[00:00] Mmmmm, I LOVE XFS filesystem. [00:00] xenoterracide: OK... and... did it work? :) [00:00] Hehe.. ktorrent can reserve the exact right amount of disk space needed for each file in a torrent, in a mere second, where-as ext3 took several minutes, dragging ktorrent down to almost nothing while it did it. [00:01] yeah it worked [00:02] xenoterracide: OK, now create a script that just has #!/bin/bash and then /bin/date in it, and put it in the same dir as your backup script, and put 5 * * * * /var/www/oblivionet/com/scripts/testscript.sh [00:02] and see what happens in a few minutes :) [00:02] if I leave the MAILTO in there will it mail me all output that should go to stdout? (never messed with cron's mail before) [00:02] Yes. [00:03] man 5 crontab for the details [00:03] Sweet! [00:03] My tcrules it at least so far, working. ;) [00:04] jmarsden: You know shorewall traffic-shaping stuff any? [00:05] No, I've not used shorewall, I'm afraid. [00:05] Oh, it wasn't you that was the shorewall guy here? okay. Drats. ;) [00:05] yeah that script works too [00:06] I wonder what it's doing or not doing right [00:06] xenoterracide: OK, so now put /bin/date at the top of your backup script and see if that shows up... [00:06] and check file perms on the two scripts are the same [00:07] they are [00:07] Then I'm guessing the script (commands within it) depend on something about the environment that cron does not set up for you... [00:08] could be [00:08] maybe postgres or git needs some info.. [00:09] What are you trying to do, xenoterracide? [00:09] ... well of course that time it would work... wtf [00:09] xenoterracide: Pastebin the script, if you want? Ah... :) [00:09] other than adding /bin/date to the script I would change it [00:09] I didn't* [00:10] xenoterracide: Okay. I can't help you if you don't give details as to what you're trying to accomplish. [00:10] Overall, what are you trying to do? [00:10] Psi-Jack__: basically I'm dumping the db commit-ing the dump to git and pushing the git repo to origin [00:10] Okay. What part seems to be failing? [00:12] I'm assuming just now, you've tested cron, and it is running, so the next step would be to see if it's connecting to postgres, yes? [00:13] actually it seemed to just work now. the last 3 times I did it it failed [00:13] this time it worked [00:13] Okay, just out of curiosity, what are you using to do the dump? [00:13] pg_dump [00:13] Okay, and you're using environment variabled, like PGUSER, PGPASSWORD? [00:13] In your script? [00:13] yeah [00:14] @ cluster heads: here's a question for ya; from the perspective of a load balancer: if one wanted to just notice and log a connection from a list of ip's or where it was routed to; [just off the top of the head] would this add a lot more load on the lb since it has a match list? call it 200 or so ip blocks/single ips [00:14] well actually I made my own variables and passed them to the command [00:14] but yeah [00:14] Well, pg_dump and psql both use PGUSER and PGPASSWORD, so you can do it more securely. [00:15] I didn't set up a password. mostly because the only user that can connect on a socket is this one. and connections aren't allowed from remote [00:15] Sounds to me,, though, like it might've, for the times it failed, had troubles connecting to the database, perhaps the connection limit was maxed? [00:15] I doubt it. very lowtraffic site... [00:15] I can't rule it out though [00:15] Not setting a password is VERY VERY BAD! [00:15] well a password is set [00:16] for the site to connect. I just use ident to verify for socket connections [00:16] Again, NOT USING a password is VERY VERY BAD. ;) [00:16] ident is the most insecure method of all. [00:16] actually trust would be ;) [00:17] xenoterracide: You beat me to that one :) [00:17] and since I'm the only one with cli access to the box. and ssh is on a weird port with key auth only... if you'd like to explain how they'd get in... [00:17] Heh, yeah, true, but ident is the second most insecure methods. ;) [00:18] At work I'm in the process now of getting them to use SSL as well. Originally they'd used ident, too. ;) [00:18] xenoterracide: Defence in depth is always wise. This is the Internet, and there are bad people on the Internet :) [00:18] true [00:18] but if they have access to my user account they could just delete the whole site [00:19] Not necessarily always. ;) [00:20] if they can find it's directory and they know how to run rm -r [00:20] its* [00:20] Not if you use extra security methods to prevent it. ;) [00:21] One good thing about Linux is, it's a preemptive multi-tasking enviroment, so, some ways to prevent mass deletion is with kernel-level security enhancements. ;) [00:21] heh [00:21] remember never implement a security system that costs more than the value of the things it's securing [00:22] You know...that's a good concept. [00:23] chattr +i is fairly inexpensive :) [00:23] * Psi-Jack__ nods and grins. [00:28] and it's pretty easy to revert. [00:29] I'm familliar with it [00:29] there are all sorts of things I can do [00:30] Yes. Including using passwords. [00:30] has it occured ot you on the topic of database that the php cms stores the db password in a plain txt file readable by the same user that I've given no passwd access to? [00:31] and that variables and files would also be readable by this user? [00:31] It's your server. If you like it the way it is, fine. [00:31] and that the only way to login to this db without the password is by logging in as this usr [00:32] is there any decent documentation on GnuTLS? [00:32] I'm not finding any good docs on how to set up a certificate authority. [00:33] all I'm saying is that if someone gets access to this user account, no matter what security measure I implemented they could get in. now I can spend a day or 2 making that impossible. but is it worth the time [00:33] mushroomblue: The gnutls-doc package is not sufficient? [00:36] Heh. [00:36] TinyCA is a useful tool. [00:37] anyone??? [00:39] am trying to mirror ubuntu repo with debmirror --method=http --host=ie.archive.ubuntu.com --arch=i386 --source --dist=hardy,hardy-security,hardy-updates,hardy-backports --section=main,main/debian-installer,universe --ignore-release-gpg --root=ubuntu --allow-dist-rename /srv/ubuntu but it dies out soon with the warning : releasing 1 pending lock.. what can be the problem? [00:40] shame TinyCA doesn't work with GnuTLS [00:40] that looks handy. [00:41] nippz: dunno. good question, tho. [00:41] It doesn't? [00:41] no it says Duplicate Codename hardy. [00:41] s/no/now/ [00:43] Psi-Jack__: I could be wrong, but the homepage isn't mentioning it. [00:47] weeb_: Did you create a dir /srv/ubuntu/ubuntu before running that command? [00:48] nope just that command only:) [00:48] s/command/directory/ [00:49] I'm running Ubuntu 9.04 Jaunty here and tried it but used /tmp/srv/ubuntu instead of /srv/ubuntu and it worked as long as I first did mkdir -p /tmp/srv/ubuntu/ubuntu [00:49] I also got rid of the --allow-dist-rename since my debmirror says it doesn't know about that option. [00:50] It has mirrored 149MB while I have typed that :) [00:50] what should be the file path at the last of all the debmirror options? /srv/ubuntu/ or /srv/ubuntu/ubuntu/ [00:51] while /srv/ubuntu/ is a symlink to my external harddisk [00:51] Just /src/ubuntu. The root=ubuntu is what is adding the second ubuntu, i think. [00:51] btw creating that directory doesn't sole the problem :( [00:52] OK, I'll try again actually using /srv/ubuntu and recheck... [00:54] Hmmm. You are correct. But running the command again then works fine, for me. My command line is sudo mkdir -p /srv/ubuntu/ubuntu ; sudo debmirror --method=http --host=ie.archive.ubuntu.com --arch=i386 --source --dist=hardy,hardy-security,hardy-updates,hardy-backports --section=main,main/debian-installer,universe --ignore-release-gpg --root=ubuntu /srv/ubuntu [00:56] well well /srv/ubuntu was linking to /media/disk/mirror here.. and i just rm -rf /media/disk/mirror and rerun debmirror with target directory at /media/disk/mirror its working:) [00:56] that is without having the directory created.. [00:57] Well, as long as it works, cool :) [00:57] now i may go timed out.. it will pull all my bandwidth:) [00:57] For quite a while... probably 30+ GB or so download there. [00:58] i only have a 2mbps connection it will take a month or so to complete!:) [00:58] Then that's not a sane thing to do, is it? [00:58] no other go:) [00:58] And your ISP may kick you off if you use 100% of bandwidth for that long. [00:59] Get someone to make you a pile of DVS and mail them to you, or something... [00:59] s/DVS/DVDs/ [00:59] well not like that.. i have free net time for 2-8am every day and for other time i have a 2.5gb/month limit so can't run debmirror on those time [00:59] Do you absolutely need a full Hardy mirror? What will you do with it, and how many Hardy servers will use that mirror? [01:00] its for me to play with the repo... actually to play with the builder script for a custom distro.. [01:01] You don't need every package in universe for that?!!! [01:01] ehmm.. err..hmmm this is what i am following http://www.gnewsense.org/Builder/HowToCreateYourOwnGNULinuxDistribution ;-) [01:01] And why start with Hardy rather than with, say, Karmic? [01:02] Or, if this is a learning exercise, see http://www.linuxfromscratch.org/ [01:03] hmm.. yeah they are following LTS thats why still on hardy [01:04] just to play with the builder scripts of gnewsense.org may be i should just read the scripts.. but thought a real run would make it easier. [01:04] * weeb_ wish ubuntu to be fsf free [01:05] Well, sure, but a 40GB download is pretty significant for most home users... [01:06] yeah.. i am also trying to get a shell account to some other who is having the repo [01:07] * weeb_ may not make sense as its early morning here and he is yet to go to bed;-) [01:07] :) and they know you will be compiling the entire repo and will need several tens of GB of disk space? If you can get a shell acct like that for free, that's quite a deal :) [01:08] OK, go to bed and see how much of the mirror you have collected when you wake up :) [01:08] compile entire repo? its just a play with binary debs:) [01:08] afaik [01:09] Hmm, so what is --source doing in your debmirror command ? [01:10] If you don't need the source packages, don't mirror them. [01:10] * jmarsden thinks that perhaps you need to understand the commands you run a bit better, before running them? [01:11] yeah actually all these to understand the builder scripts.. so i thought i would just the downloading thing now so that later i can start learning on stuff.. [01:12] currently am learning more of c.. yet to enter shell stuff;-) [01:14] well well what made it work is that --dist=hardy,hardy-security,hardy-updates thing.. only --dist=hardy works! [01:16] even --dist=hardy,hardy-security gives me "Duplicate Codename hardy." [01:19] I'd suggest you drop universe and start with just main and the debian-installer -- you'll avoid mirroring all the optional stuff you don't actually *need* to create a distro :) [01:19] But even that is a large download. [01:54] i'm trying to start a python script at startup on a headless box using crontab. Do i need to do anything special to get it to start (since it won't on adding a crontab line with the path/to/run.py ) and where do i check to see what went wrong? it dosen't seem to be in syslog [01:55] faileas: Add MAILTO=you@example.com at the top of the crontab file so it emails you any ouytput from the script. [01:56] jmarsden: i can't mail out of that box for some reason [01:56] (thats the next thing i need to fix ;p) [01:56] Then (a) fix that! and (b) set MAILTO=yourlocaluser [01:57] no way to get it to log to a text file? [01:57] Not that I know of. man 5 crontab for all the details of what you can do in there... [01:58] of course you can wrap your python in a bash script that does logger -p daemin.debug "it is running now..." [01:59] kinds of things and then runs the pythin program, if you want to debug it that way. [01:59] But I'd fix mail first, if I were you, mail is pretty vital for managing a server... logwatch will mail you stuff to take care of, etc etc. [01:59] *chuckles* I just want it to work ;p [01:59] Then do the work to make it work :) [02:00] well chances are since its based off a minimal install, i may not have a mail server installed... [02:00] which would explain some other problems i had. postfix isn't it? [02:00] Could be. Postfix is a reasonable choice of MTA, yes. [02:07] i think i worked out the original issue ;p [02:08] it shoulda been python 'path/to/run.py [02:09] Well, sure, unless your run.py has a #!/usr/bin/env python or similar header in it so the shell knows what to do. [02:10] hmm, that didn't seem to work either [02:14] mushroomblue i assume you saw my long arsed question then :P [02:16] faileas: Did you add MAILTO=yourlocalusername at the top of the crontab as I suggested earlier? [03:17] anyone remember the command to reload a users group in an open shell? [03:17] without logging in and out [03:24] xenoterracide: I'm not sure there is one? You could try exec $SHELL [03:24] jmarsden: I know there is [03:24] I just can't recall the command [03:24] I've used it [03:25] Other than starting a new shell (with exec $SHELL) I can't see how you would tell a running process to go re-read all its group info... [03:27] newgrp and sg do it [03:28] newgrp just switches the current primary group, it won't add a newly created group to an existing process [03:29] well it's now in my list of groups for my open shell [03:29] Per http://www.cyberciti.biz/faq/howto-linux-add-user-to-group/ you can try su –preserve-environment –command “$(which $SHELL) –login -i” $(whoami) [03:31] and I couldn't write to this directory if I wasn't in the http group [03:31] OK... something has changed from when I first learned that stuff then. [03:31] maybe [03:32] and it probably does change the active primary group [03:32] but it still works [03:32] xenoterracide: Yes, sounds like it has a side effect of adding the group if it didn't already exist, or something like that. [04:21] !find brctl [04:21] File brctl found in bridge-utils, selinux-policy-dev, selinux-policy-doc, selinux-policy-ubuntu, selinux-policy-ubuntu-dev (and 3 others) [04:21] Interesting. [04:22] gadmin-openvpn-server needs bridge-utils, but doesn't depend on it. [04:23] If it really *needs* it, file a packaging bug against gadmin-openvpn-server, I suppose. [04:23] Yeah, it doesn't even run unless it's there, so. Yeah, ;) [04:31] And why the heck does rsyslog-pgsql DEPEND on the server? [04:34] what is the ubuntu equivalent to redhat kickstart please? [04:35] Psi-Jack__: huh? which server? -- I don't see any odd dependencies there [04:35] rsyslog-pgsql, when I try to apt-get install rsyslog-pgsql I see it including postgresql-8.3 which is the server. [04:35] Psi-Jack__: ... how do you expect to log to a pgsql server without the server? [04:36] giovani: Over the network to a database on a different physical machine? [04:36] jmarsden: that sounds silly to separate the syslog from the database it's logging to -- a huge waste of bandwidth for no gain [04:36] giovani: It's called, CLIENT. [04:36] giovani: It doesn't need the server if you have that on a seperate machine. [04:37] so install rsyslog on the server with the database? why generate twice the network traffic? [04:37] anyway, it's a universe package, it's not well supported [04:37] giovani: If you have set up a corporate database server and want to log to it, but are not the admon of it... I can see why it might be useful in some settings. [04:37] giovani: It's not. It's on a gigabit network straight to the database server. [04:37] jmarsden: rsyslog is becoming the new default syslog for ubuntu in karmic. [04:37] but not rsyslog-pgsql [04:38] Psi-Jack__: rsyslog, but not the pgsql part... right :) [04:38] Yeah. [04:38] anyway [04:38] Which is natively part of rsyslog itself, just libraries. [04:38] oh [04:38] btw [04:38] you're wrong [04:38] it's not a dependency [04:38] it's a recommend [04:38] you didn't turn off auto-install recommends [04:38] so there's absolutely nothing wrong with the package [04:39] Oh? Hmmm.. [04:39] How do Iturn off that then? [04:39] sudo apt-get install WHATEVER --no-install-recommends [04:39] I've seen things recommended, but never had to forcefully tell it NOT to install them. [04:39] Or you can configure it somewhere under /etc/apt [04:39] Psi-Jack__: for a number of versions of ubuntu you have [04:40] Default is to install recommends now, it has been the default since... Hardy I think. [04:40] Hmmm [04:40] APT::Install-Recommends "0"; [04:40] APT::Install-Suggests "0"; [04:40] in apt.conf [04:41] Heh, guess I gotta create that, eh? [04:41] or conf.d [04:41] no [04:41] /etc/apt/apt.conf I think it is? Seems to be a zero length file here, by default. [04:42] Mine's non-existant. [04:42] jmarsden: or /etc/apt/apt.conf.d/ [04:42] All I have is the apt.conf.d [04:42] right ... use that [04:42] same thing [04:43] That's better. [04:43] And to note, Hardy did show the list of Recommended, and didn't install them by default. At least Hardy-server [04:44] it's existed for at least a few versions [04:44] Yeah... Definately not in hardy-server. I remember seeing Recommended packages almost always. [04:45] http://www.ubuntu.com/getubuntu/releasenotes/810#Recommended%20packages%20installed%20by%20default [04:45] maek: It may be out of date, but see https://help.ubuntu.com/community/KickstartCompatibility [04:45] Interesting though.. Why it doesn't depend on the postgresql-client-8.3, but /recommends/ postgresql, a virtual package for all of postgresql. [04:46] Psi-Jack__: what use is recommending/depending on the pgsql client? [04:46] Psi-Jack__: Because the expected common use case is not to move the syslog data over the network twice. [04:46] jmarsden: thanks. but preseed is the "ubuntu" way? [04:46] maek: look at http://www.ubuntu.com/products/whatisubuntu/serveredition/features/autodeploy [04:46] maek: Yes, I think so. I've not used it; years ago I used Kickstart on RedHat 5.x and 6.x :) [04:47] Still, though, it should depend specifically on the postgresql client libraries, and not just rely only on the recommends. [04:47] That is a bug. [04:47] jmarsden: I use kickstart now for rhel5, but I got a new job and its a 100% ubuntu shop :) [04:47] giovani: thanks [04:48] if you don't want to register for the pdf -- http://www.ubuntu.com/system/files/u1/AutomatedDeploymentsWP-20090126.pdf [04:49] Psi-Jack__: I'm not sure that it is a bug ... [04:49] there's no way to make a single depends/recommends setup work for every situation [04:49] How would it not be a bug? Recommends are optional recommendations, not absolutely required to run it. [04:49] they've found a middle ground by making the server/client a recommend [04:49] Psi-Jack__: not according to the debian manual [04:50] which is what the recommends being automatically installed thing is all about [04:50] No, no, that definately sounds incorrect. [04:50] That's not even the meaning of recommendations. [04:50] the english meaning of recommendation isn't relevant to what the debian manual describes them as [04:51] it's pretty common for technical terms based on english words to deviate from the definition [04:51] submit the bug report if you wqnt to ... [04:53] It is a bug, truely. [04:53] I wouldn't want to run postgreql on EVERY system I put rsyslog-pgsql on, thats just hideous. [04:53] And I'm speaking with the debian people now, about it. I am right., [04:54] Recommends are /optional/ and Not even Debian installs them by default, it just offers them. [04:54] Hi! I just set up a gui in Ubuntu server. But the /etc/X11/xorg.conf file is empty! Also, my Xorg process is taking up 100% of a cpu core. Can I resolve this? [04:54] I have the following card: [04:54] http://ati.amd.com/products/server/es1000/index.html [04:54] If rsyslog-pgsql absolutely cannot under any circumstances run without postgresql-client, then there should be a Depends: for it. [04:54] Correct. [04:54] Psi-Jack__: you should not be using multiple rsyslog-pgsql instances on different servers [04:54] poi77: Ubuntu server has no GUI. If you add one you are creating a non-standard installation. Maybe ask in #ubuntu ? [04:55] there should be one central syslog server responsible for writing to the db [04:55] postgresql-client is what it should minimally depend on, because it needs those libraries to work, period and simple, but it doesn't need the full blown server to work, as-is by itself. [04:55] jmarsden: My distributer set it up; but got the xorg.conf wrong [04:55] giovani: Wow.. Oh hell no, That'd be a HELL of a SPF! [04:55] giovani: Single Point of Failure. [04:56] giovani: rsyslog keeps track of what it cannot send to the pgsql server, and will re-spool them once it can connect. [04:56] giovani: Where-as if you used udp or tcp methods, you could loose some messages. [05:00] Any ideas? This is really important. If not, can I get paid support for ubuntu server [05:01] poi77: you're welcome to contact canonical -- but they'll likely tell you to run regular ubuntu desktop [05:01] What is canonical and I need to run server (my company specifies that) [05:02] Why would you run X on a server [05:02] That's the first question. [05:03] Canonical is the commercial company that does Ubuntu support etc if you pay them for it... the big organization behind Ubuntu, if you like. And ... the right way to run a server is to run it without a GUI. It is more secure, and leaves more resources available for doing real work, the thing the server is for... [05:04] poi77: Seriously.. Answer the question. Why would you ever run X on a server? [05:04] Ubuntu server is trying to remove everything... when runing any apt-get command it comes up with a shit ton of "no longer required:" programs to auto-remove .. only if I do autoremove them .. I wont have a working system. .. WTF! anyone else had this issue b4? [05:04] I am just configuring a machine for a customer [05:05] macrocosm: you probably removed the metapackage [05:05] poi77: you need to talk to your customer about their "need" for a gui then [05:05] Indeed. [05:05] which meta? I dont remember removing anything recently but small apps [05:05] Can you run ssh -X without a gui? [05:05] You should NEVER run X on a server. [05:05] poi77: Yes, you can. [05:05] How [05:05] ssh -X forwards X to the origin. [05:05] The GUI will be on your workstation, not on the server :) [05:06] Oh :-) they wanted a gui [05:06] I will tell them [05:06] why do they want a gui? we've asked this dozens of times [05:06] poi77: They can get it without installing Xorg on the server. They just need an X server on their workstations. [05:07] Sorry I don't know why [05:07] I think they want to attach a monitor for debugging and their tech guys need it [05:07] giovani: is there a way to convince ubuntu not to jump ... what should i google? [05:07] poi77: well like I said, you need to talk to them about this -- and learn yourself, then explain to them why it's a bad idea [05:07] poi77: plugging in a monitor is not a reason to need a gui [05:08] Why is it a bad idea? [05:08] If the GUI is used only intermittently [05:08] and not running in other cases [05:08] it's buggy, bloated code that offers no advantages whatsoever [05:08] poi77: Memory consumption, stability, the list is huge. [05:08] But of course it will only be started when needed... [05:08] so? [05:08] It should never be started, period. [05:09] that doesn't make it less buggy [05:09] there's NO reason to use it [05:09] you haven't offered one [05:09] you just keep saying it's needed [05:09] use webmin for a gui instead [05:09] no [05:09] do not use webmin, it breaks the debian way of doing things [05:09] ebox is the only supported web gui [05:09] well it works [05:10] no, it doesn't work [05:10] it's specifically not supported [05:10] Eh? [05:10] webmin is not a supported solution... use ebox, if you need a web UI. [05:10] ubuntu is clear on this [05:10] wtf is ebox [05:10] !ebox [05:10] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [05:10] ive never had a single problem with webmin [05:10] macrocosm: you have a problem right now you're tryign to get us to help with [05:10] and thats using it for years [05:11] wonderful [05:11] anyawy [05:11] webmin isn't supported [05:11] Thanks for the suggestions [05:11] don't recommend it here [05:11] macrocosm: https://help.ubuntu.com/community/WebMin [05:11] on a test dev virtualized server that does not have webmin [05:11] Heh. ebox is nice, though. [05:11] I'm waiting for them to fix a few things before I truely can use it properly. ;) [05:12] Psi-Jack__: Why wait... fix them yourself and submit patches :) [05:12] I only use it for simple stuff .. so thats prolly why ive never had trouble with it [05:12] I will check out ebox tho .. sounds cool [05:12] jmarsden: It's been a loooong time since I messed with perl, let alone Mason. [05:12] macrocosm: webmin will totally ruin your clean configs [05:13] https://answers.edge.launchpad.net/ubuntu/+question/2873 has more pointers to why webmin was dropped... [05:13] My console seems to have fallen asleep [05:13] how can I wake it up [05:13] SJr: press some keys [05:13] nope [05:13] the screen isn't coming on [05:13] Turn it on? [05:13] hasnt yet ... check out . turnkey linux .. all their servers are ubuntu with webmin .. no issues [05:14] then it's probably an issue with your monitor [05:14] or your video card [05:14] or the server is not "asleep [05:14] " [05:14] well no the apm kicked in would be my guess. [05:14] uh [05:14] that's not related to the console [05:14] like to turn the monitor off [05:14] that would be a hardware-level issue [05:15] http://www.turnkeylinux.org/ how can they use it so successfully .. if you say its an ubuntu killer [05:15] macrocosm: nobody said "killer" [05:15] well .. an irritant .. perhaps lol [05:15] macrocosm: Itr isn;t us saying it, it is the Debian and Ubuntu communities, and we have provided pointers to official docs... read them :) [05:15] maybe they modify it [05:16] maybe they don't use webmin -- it's not mentioned on that page [05:16] the bottom line is [05:16] they all have webmin [05:16] it's not supported -- and hasn't been for a long time [05:16] or at least the ones ive used [05:17] if you're not willing to configure a server by hand -- you probably don't belong on linux anyhow [05:18] been using it for years ... and sometimes you start from scratch .. like my production server .. and other times a virtual quickstart is handly for testing [05:19] I couldn't agree less -- but it's a free world, and a free os [05:19] certainly .. time is money [05:20] proper, non-graphical configuration can be done 10s to 100s of times faster by someone competent [05:20] absolutly [05:20] macrocosm: BTW, does your server still have the ubuntu-minimal and ubuntu-standard metapackages installed? [05:20] this is proven by looking at all major, professional linux installations and seeing how they do things [05:20] I never use webmin for any of that .. but I like the file browser and the mysql admin pages [05:21] I asked the customer; he did killall Xorg and then ran Matlab bench. Performance is terrible [05:21] oh yes, open your files to a web interface -- that sounds safe [05:21] From the workstation I mean [05:22] poi77: So this machine is a graphical mathematics workstation? If so, install Ubuntu desktop on it. [05:22] Yes basically [05:22] Why the desktop [05:23] Does the desktop support raid [05:23] Because you seem to want local graphics. And yes. [05:23] absolutely [05:23] Is it configured automatically [05:23] Did you really do your research before offering this client Ubuntu server as a graphical math workstation?? [05:23] Heh [05:23] He asked for it; he needs virtualization [05:23] poi77: the same way it is on the server [05:25] I am running about 4 VMs on a Ubuntu desktop right here... what does virtualization have to do with server vs desktop? [05:26] Isn't server optimized for virtualization? We're talking hundreds, not 4 [05:26] Is it? In what way? How did you determine whether it it or is not optimized for your clients massively virtual workload? [05:27] Hundreds of virtual servers? on a single box? [05:27] Must be a supercomputer. [05:27] I didn't make the decision [05:27] But see http://www.bmighty.com/blog/main/archives/2008/10/ubuntu_server_o.html [05:27] Yes it's pretty powerful [05:28] With at least 100 CPUs, and petabytes of RAM. [05:28] I didn't know Ubuntu scaled to 100 cores... [05:29] poi77: All the features that blog lists as new for 8.10 server were and are also in the Desktop edition. Use more informed sources :) [05:30] poi77: https://help.ubuntu.com/community/ServerFaq#What%27s%20the%20difference%20between%20desktop%20and%20server? [05:31] Well, currently, AFAIK, Linux supports up to 32 x86 CPUs, or 64 64-bit CPUs. [05:32] And only 64GB of memory on 32bit, 128GB on 64-bit [05:32] Yes. So for hundreds of VMs doing complex math calculations, life will get slow in a hurry, I suspect. [05:32] Ayup [05:32] Though. [05:32] Linux cluster systems can scale up to 1,024 CPUs. [05:33] Unless it is one VM per end user and end users won;t all happen to do computation at once... [05:33] Most clusters I know of use customized cluster-oriented distributions of Linux, though. [05:33] The maxed specs for ubuntu are plenty for this applications. VM's will not all be doing math; in fact none will be. Same system, different users :-) [05:34] As a result of budget cuts, I guess [05:34] VM's each need 256 mb mem [05:34] But I am wondering if the desktop installer will automatically set up software raid [05:34] That's still 25-50GB of RAM [05:35] Ubuntu supports that :-) [05:35] poi77: It will do it just as automatically as the server installer will. [05:35] jmarsden: I did not install server; what do you mean [05:36] The automation in the one is as good as in the other. So this has no bearing on your choice of desktop vs Server edition of Ubuntu. [05:37] It doesn't decide all by itself "oh, I think I'll set up RAID for this guy, he seems to have more than one drive"... it does let you specify RAID partitions and various RAID levels etc at install time. On either edition. [05:37] thankx for the ebox heads up ... looks pretty cool in spite of its missing features ... not really comprable to webmin but still useful none the less [05:37] macrocosm: What kind of missing features? [05:38] filebrowser ... I really like having it [05:38] silly I know but I like it [05:38] You mean like using nautilus or dolphin directly over a secure protocol like ssh? [05:38] never used those [05:38] Well, start. [05:39] lol .. thanx .. ill deffinately check them out [05:39] definitely* [05:39] Thanks for the help [05:39] nautilus == gnome, dolphin == KDE [05:39] will those work on vista? [05:39] Not really. [05:40] macrocosm: Only over a Windows-based X server like Xming [05:40] well .. that sux [05:40] macrocosm: WinSCP will though. [05:40] is that similar to filezilla? or someas much [05:41] Heh, one of these days I gotta find me a better file manager than Finder, for OSX [05:41] macrocosm: FileZilla will work too. [05:41] macrocosm: Yes, FileZilla and WinSCP are pretty similar. [05:41] Both have SFTP support [05:41] yeah ... but the webmin filebrowser will decompress tars and edit files in place [05:41] filezilla cant go that far [05:42] That's because the webmin runs ON the server, where-as sftp is a protocol from client->server. [05:42] im sure there is something out there ... just need to dig .. I wasnt aware of webmin conflicts .. maybe cause ive never used it to manage system stuff [05:42] Emacs does that kind of thing for you, why use a separate file browsing tool if you want an all-in-one do-everything swiss-army-knife app :) [05:42] I am talking to client ... can you confirm there are no differences (other than lack of gui) between server and desktop [05:43] There's also simply just mounting sftp resources directly to your own machine as if it were local. [05:43] poi77: https://help.ubuntu.com/community/ServerFaq#What%27s%20the%20difference%20between%20desktop%20and%20server? As I already said... did you read this? [05:43] I read that [05:43] Read it again. [05:43] Those are the only differences. [05:44] Okay thanks; so all the blogs are wrong? [05:44] blogs are blogs. [05:44] emacs looks cool .. thanks for the tip [05:44] If they say there are other differences and provide no evidence to support their claims, yes. [05:45] macrocosm: Emacs and TRAMP mode lets you do inplace file editing over SSH (and other transports)... worth learning. [05:45] yeah .. looks very cool indeed. [05:47] What does "Ubuntu server install by default a server optimized kernel. " [05:47] mean? [05:47] poi77: Different scheduler configuration by default, and I don't remember exactly what else. Tuned for sever workloads, basically. [05:48] are these differences documented anywhere? [05:48] Probably... :) I'll google for you... but really, next time do your own research ahead of time! [05:49] poi77: http://www.ubuntu.com/products/whatisubuntu/serveredition/features/kernel [05:50] If you really need that kernel, there's nothing to stop you installing it on a desktop install, I suppose... I've not tried it but it should work fine. [05:50] Here is what the client was referring to, from the above page " Virtualization is better supported in the Server Edition through the enabling of IPC namespaces. " [05:51] And the client really needs those IPC namespaces for what they are doing? You know this? [05:51] Wait, what?Pre-emption is turned off in the Server Edition. ? [05:52] Psi-Jack__: The real time stuff that helps sound and video editing go smoothly at the expense of total throughput, yes, I think so. [05:53] OSes are (should be) tubed for their expected workload, if you really need every alst drop of performance out of them. [05:53] s/tubed/tuned/ [05:54] I showed the client that page; he does not understand the tech details. Is there a layman's explaination [05:55] Okay.. That's better. You can't turn off something that's native to how the kernel runs. It's a pre-emptive multi-tasking environment totally. [05:55] That *is* the laymans explanation. The details for techies are in the source code and kernel configuration :) [05:55] poi77: If you are consulting for the client, he needs to trust you to know your stuff and make a solid recommendation based on the research you did ahead of time... [05:56] I am not in a consulting position [05:56] I just install what he asks for [05:56] Then why are you showing him web pages and why is he asking you questions about what they mean? [05:56] Heh [05:57] I am trying to relate the information you are giving [05:57] So now I'm doing free consulting for your client? perhaps he can call my company on Monday and we can work something out with him? :) [05:57] * Psi-Jack__ grins. [05:58] Or mine! [05:58] He might be interested if you provide a web page [05:59] jmarsden: ahh my ubuntu-standard metapackage was gone .. thanks for that tip [06:00] So, Ubuntu now also auto-removes stuff that's no longer "needed" anymore? [06:00] Psi-Jack__: Only when you run apt-get autoremove [06:00] Instead of just telling you they're not needed anymore? [06:00] Ahh [06:00] Okay. That makes me feel better. ;) [06:00] It just complains a lot... [06:01] Auto-installing recommendations was bad enough. heh [06:01] lol ... was just reading that I may have removed something with a dependency and in return it chewed my system a bit [06:02] well at least its just a vertual test server .. no sweat there [06:02] macrocosm: Once you have ubuntu-standard back you can do apt-get -s check to see if all is well [06:02] Ah, make that apt-get check [06:02] * jmarsden wonders what a simulated check would do? :) [06:03] cool thanks man.... could always try and see [06:03] Looks like it ignores the -s and does the check as usual. Seems reasonable under the circumstances. [06:04] yeppers [06:04] everything checked out fine .. thanks a mill ... wasnt looking forward to reverting to an old snapshot .. thats so windows [06:05] Good, you're all set. [06:06] time to dive into emacs... thanks everyone! [06:06] No problem, and have fun with emacs :) [06:08] cheers! I will! [06:09] Psi-Jack__: Looks like the default for auto-installing recommendations changed in Intrepid, not Hardy, BTW. [06:14] Yes, I know. ;) [06:14] Noticed, anyway. [06:15] I've turned it off on one system so far, plan to do it on all of them. [06:15] Not even Debian devs recommend it. [06:15] Ubuntu devs must've misinterpretted something somewhere. [06:15] It's more a convenience feature for desktop newcomers than something useful for server admins, I think. [06:23] Bleh, not.. Really. [06:23] I find it mostly annoying, and again, Debian doesn't even recommend it. [06:24] You are not the target audience for that feature :) [06:24] Seeings' I use Ubuntu Server more than I do Desktop. [06:24] Exactly. [06:24] I believe I'd constitute myself part of the audience. [06:25] It's Server edition that's screwing it up. ;) [06:25] Not making that alteration between server, and desktop for apt. [06:25] 1 file is all it would take to make that change. ;) [06:26] well... I meant, turning that on was intended to help newcomers -- they know one package name and install it, and get everything "most" people who use that package will need. Oh... well, I see what you mean on that, but minimizinb the differnces between the two editions is also good. [06:26] Or even just an altered 01ubuntu in apt.conf.d [06:26] 1 file. [06:26] Is not that big a change. [06:27] Since there's no GUI for server edition, apt CLI tools would be used, they would see recommendations when installing before answering do they want to continue. [06:27] But different behaviour for a commonly used command (apt-get)... IRC tech support would be harder if you had to remember to say --no-install-recommends on one edition but not the other. [06:27] it would change nothing, except making it less a security hazard for server admins. [06:28] Not even OpenSUSE is that assinine to make recommendations mandatory installations. [06:28] File a but report, if you can really see a clear security risk there. [06:28] s/but/bug/ [06:28] I feel it is a serious security risk, actually because it installs servers, such as postgresql, when it's not needed. ;) [06:29] They still are not mandatory. You can still remove them if you want later... they are not Depends: . [06:29] Then file a bug. [06:29] jmarsden: Would the general audience know that though? [06:30] See the difference? ;) [06:31] At work, we have a whole shop of techs, totalling like only 6 actual techs. [06:31] Well, 7 including me. :) [06:31] Yes, I see what you mean. I'm not exactly the general audience... I just noticed the change somewhere during Intrepid alphas (I think it must have been) and got used to it :) [06:31] They're all PHP developers, some with knowledge of minimal administration skills, some with other language skills. [06:32] But, EVERYONE, still has to ask me, how to use the adduser command. [06:32] Then why do they have root (or sudo) powers? And if they don't, they can't run apt-get anyway :) [06:32] course, everytime, I answer back, it's still useradd -m usernae [06:32] jmarsden: Heh, We use Gentoo at work. [06:32] Yeah, even more a headache, because they don't know how to truely manage it. [06:33] gentoo can be a real disaster if you don't know exactly what you're doing from the get go [06:33] I know, exactly. [06:33] That does seem a strange choice of distribution for a work environment... [06:33] I had to upgrade them from a 2007.0 profile to 2008.0, the hard way, on 6 servers. [06:34] A friend of the department head, also his roomate, suggested Gentoo to him. And he liked it a lot over RHEL. [06:34] The guy is a serious OSX user, too. ;) [06:34] I've never been a fan of redhat [06:34] When it comes to OSX, he knows it fairly well. But Linux.. Not so much. [06:35] Nor I. [06:35] Personally, for a server environment, I'd have recommended 1 of two options: opensuse, or ubuntu-server [06:35] Never gentoo. [06:35] ubuntu makes everything so easy, there's little reason to use anything else [06:36] some specific applications might be more difficult on ubuntu, but in general, that's my main choice [06:36] yeah. [06:36] That's why I setup my home server farm with ubuntu-server, I am trying it out, testing it, making sure it's what I want. [06:36] Cause opensuse, it's nice, ... VERY nice in fact, but desktop-wise, 11.1 still has some major issues. [06:37] KDE system tray icons, for example, they gitter, quite a lot. [06:37] SaX, is horrible, horrrrrrible. [06:37] heh [06:37] I don't have any experience with suse [06:37] SaX and ATI, don't mix. [06:37] YaST on the other hand....... [06:38] That's some sweet stuff there! You can setup a full-scale LDAP+KerberosV+SAMBA-LDAP server in minutes. [06:38] nice [06:38] that's one thing that's seriously lacking in ubuntu and pretty much all other distros [06:38] And manage it, in X GUI, or TUI [06:38] Same program. [06:38] yast detects wether it's running under Qt, GTK+, or console. [06:39] Yeah.. The only thing I'm not too fond of so far, is YaST-Firewall, which is why I'm looking at shorewall. [06:40] shorewall mimics a lot of ideas from Cisco, including the safe-restart method. [06:40] It'll restart with the new firewall rules, and wait for confirmation to keep it, if you don't respond, it'll revert it back in 60 seconds. [06:40] Perfect for remote management. [06:41] nice [06:41] pardon the probably dumb question ... but do I install emacs on my server and access it from my vista box . or do i install in windows? The instructions dont really differentiate... cause its looking like the win version tis a port to work on win file sys, havnt found anything to connect to external server. [06:41] Even I, Linux user, Unix/Linux admin for 10+ years, have made firewall rules that blocked me out of the entire system before. [06:41] macrocosm, you install it where you want to edit text files [06:41] heh [06:41] I cannot stand emacs. :) [06:41] ahh .. lok that makes sense [06:42] I'm a vim guy [06:42] Another thing I truely liked about opensuse.. :) [06:42] looks a bit peckish but there seems to be a lot of features ... ugh .. I have to search for a standalone replica of the webmin file manager chingus [06:42] The ABILITY to lock specific packages from ever being removed, changed, or installed. [06:43] I don't think apt can yet still do that. [06:43] yeah, you can hold packages but that's about it [06:43] If it can, I'd like to know! [06:43] and if you do hold packages, it cmoplains endlessly [06:43] complains* [06:43] I'd put postgresql-8.3 on the do-not-install list in a heartbeat, on ALL but my actual DEDICATED PostgreSQL server. [06:44] I've had to deal with that on my laptop, thanks to networkmanager [06:44] Heh [06:44] I like nano but sometimes a file browser/editor that feels native is nice to have. [06:44] needed the intrepid kernel to connect to college wireless, but they removed the proper options in networkmanager 0.8 [06:44] and no other managers supported them [06:44] Yeah, Network Manager is still beta too, so. [06:45] apparently it finally got fixed for karmic [06:45] of course, ideally [06:45] That does remind me though, I need to find my opensuse cd, and toss it on my box I intended to use ldap for. Simplest way to make my auth box work 100%. ;) [06:45] my college wouldn't have a retarded wireless setup [06:46] that doesn't work on anything right [06:46] they use PEAP-GTC + dynamic WEP, with no certificates [06:47] it doesn't even work right on windows without installing special software [06:54] Heh wow. [06:55] OpenSUSE 11.1 actually was able to start the full GUI installer for this old Compaq P3-730 with not quite 512mb RAM. [07:07] hi... i need some help setting up a nameserver [07:09] i registered a nameserver for a domain, but its not resolving when i ping it. i need to know where on the server i need to make the change so that it recognizes ns1.domain.ws === macrocosm_ is now known as macrocosm === maek_ is now known as maek [09:37] hi folks [09:39] how do I turn off the mechanism that tries to make sure network devices have constant names? [09:40] ah, right :) IRC is working again. I found it, right after asking the question, as always [09:41] /etc/udev/rules.d/75-persistent-net-generator.rules [11:53] New bug: #417660 in samba (main) "package samba-common 2:3.3.2-1ubuntu3.1 failed to install/upgrade: defektes Tar-Dateisystem - Paketarchiv ist defekt" [Undecided,New] https://launchpad.net/bugs/417660 [12:06] Please make my day. How can I run "Select Best Ubuntu Server" in terminal? No GUI. [12:07] leaf-sheep: I don't understand the question. [12:07] leaf-sheep: are you trying to configure a local apt mirror? [12:08] twb: There are Ubuntu archive mirrors all over the world. Often, in Software Source / Synpathetic, there will be a setting where you can test/ping for fastest mirror closed to your area. [12:08] Usually I know in advance what mirror to use. Then, I edit /etc/apt/sources.list or sources.list.d/ [12:09] On Debian, there is apt-spy, but IIRC it's not in Ubuntu. [12:09] twb: Something like http://linuxhelp.blogspot.com/2007/05/using-netselect-apt-tip-to-select.html but that's outdated. [12:09] Sure, netselect is like apt-spy [12:09] we need something like gentoos mirror-select [12:10] !info apt-spy jaunty [12:10] Package apt-spy does not exist in jaunty [12:10] I'm surprised that there are one for GUI -- but no terminal command. Heh. [12:10] thats what you get from gui orianted thing [12:10] oriented [12:11] leaf-sheep: there are such tools, but they can't be trivially pinched from Debian, because Ubuntu's mirror list file (if it exists) has a different format. [12:13] Now we know what feature Ubuntu is lacking. [12:13] Hmm. [12:13] Thanks. Even my Google Fu is failing me too, :< [12:23] leaf-sheep: do you want to work this out for a specific host, or do you want to automate it? [12:23] The former, we can probably hold your hand for. [12:28] twb: Just as long as it's in my country. But I decided to give this part up and ask the author about that. [12:29] twb: Also, komp-something in #ubuntu extraced the code --> http://pastebin.ubuntu.com/258021/ [12:30] leaf-sheep: which country are you in? [12:30] You IP is masked so I can't easily tell [12:31] Primary mirrors have the form XX.archive.ubuntu.com, where XX is a two-letter country code. [12:31] twb: United States. You probably should include all Ubuntu official mirrors and publish. [12:31] I don't work for Ubuntu [12:31] official = primary [12:32] But obviously secondary and tertiary mirrors (such as your ISP or university provide) are faster and cheaper [12:32] Searching for "ubuntu archive mirrors" turns up stuff like http://www.ubuntu.com/getubuntu/mirror [12:32] And easier on loads. I believe my best mirror is the university -- but yeah, that's nice. [12:33] Also https://wiki.ubuntu.com/Mirrors [12:33] twb: Did you made a localhost mirror for yourself? Is it *really* fast? I have been thinking about doing that for both benefits and experiments. [12:34] leaf-sheep: I maintain on-disk mirrors because I regularly build chroots [12:34] It is still I/O bound by the disk speed, or the speed of NFS over 100baseT. [12:35] TBH it is not noticably faster than my ISP's mirror, except for large (>50MB) runs [12:37] I see. I don't work with servers myself but I came in to find answers. I recently bought computer parts for XBMC. Still waiting on the case. [12:37] My mirror is faster than local disk, usually. ;) [12:40] Oh I finally got my network bridge to work. It nearly killed my laptop wifi. :< [12:40] And that was few hours ago. [12:40] Now I'm liking it. There are something nifty about playing Halo3 off your laptop's wifi. :) [12:42] Ubuntu servers support Halo3? [12:42] Nay. [12:43] Bungie may be secretly running Ubuntu servers. ;) [12:50] New bug: #417635 in nagios3 (main) "package nagios3-common 3.0.6-2ubuntu1.1 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,Invalid] https://launchpad.net/bugs/417635 === cemc1 is now known as cemc [14:11] hey, is there some kind of Ubuntu alternative to the host side of Remote Web Workplace? Basically something running on an Ubuntu server that I could have users log into and then RDP to their (Windows) workstations from? [14:14] I guess I could just hand-maintain a web page with rdp:// links on it and password protect the page... [16:01] Is it possible to apt-mirror few packages (eg, ubuntu-minimal, ubuntu-desktop)? [16:11] leaf-sheep, if you want to mirror only a few packages, apt-proxy may be for you [16:12] obst: Ahh. I'm uninstalling apt-mirror then. [16:15] obst: I'm using Ubuntu 64bit and I'd like to create apt-proxy for Ubuntu 32bit. Is that possible? I know this is the case for apt-mirror [16:17] Yes this is possible, you can configure to use any repo that you want or let the proxy simply learn your repos [16:19] I use this at home to make downloading the same packages on multiple machines faster. [16:21] obst: https://help.ubuntu.com/community/AptProxy --> It does not say anything about packages for 32, 64, etc. [16:26] You want to install it on a 64 bit system and let a 32 bit system retrieve packages from it, that is possible I think [16:28] I have it installed on a 32 bit machine and my 64 bit desktop can use it [16:30] obst: I wanted to download all 32-bit pacakges for ubuntu-minimal on my laptop then let my mini-itx machine with minimal usb installation getting all packages from my laptop (bridged). [16:31] obst: For some reason, it's getting packages really slow... sometimes failing/frozen. [16:32] hmm, apt-proxy loads the packages when they are requested for the first time and stores them in a cache so the next request is fast [16:32] But the binaries for amd64 and i386 is not same. I think I could do this with apt-mirror but I don't want to download entire main/restricted -- Only ubuntu-minimal and its dependencies. [16:36] obst: Have a good day. Thanks for helping. I need to look more into this apt-proxy thing. [16:36] It sounds very useful. [16:38] Okay but maybe you also lookup APTonCD [16:38] obst: I knew about that one. It's in M350 case -- Pretty small -- No CD/DVD reader. [16:39] obst: I'm going to run apt-mirror for a minute and see if I can "throw" all the needed packages in the same folder it's mirroring to. [16:43] you could also for your use-case simply download all packages of ubuntu-minimal, transfer them to the target machine and execute "sudo dpkg -i *.deb" [17:35] hi [17:37] im trying to rebuild a ubuntu kernel (reason: need a modified version to support the fitpc2), ive changed the default .config and copied it to linux-version/.config. after running: fakeroot make-kpkg --append-to-version=.030320 kernel_image the resulting .deb file did not contain the expected results, my changes were also reverted in the .config file...why? === PhotoJim is now known as PhotoJim_ === lamont` is now known as lamont === johe_ is now known as johe [19:52] good evening all [20:15] hi [20:15] I want to ask if anyone know a better interface for server other than webmin [20:15] I have my lamp server [20:23] !ebox [20:23] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [20:23] ^-- shally87 [20:23] Nafallo: Error: "--" is not a valid command. [20:24] o_O [21:21] can i import a phpmyadmin sqldump with mysqldump ? [21:22] Claw6_: i would hope so! :) [21:22] Claw6_: well, you'd use the 'mysql' command, not mysqldump -- mysqldump is to get data OUT [21:22] aaaaaaaaah [21:22] lets see [21:25] mattt : ERROR 1007 (HY000) at line 12: Can't create database 'db260642497'; database exists [21:25] well i know that is already exists but i want to update it [21:26] <_ruben> there's an option in phpmyadmin to add "IF NOT EXISTS" [21:27] im using mysqldump _ruben [21:27] not phpmyadmin [21:27] Claw6_: didn't you say you dumped w/ phpmyadmin tho? [21:27] <_ruben> oh .. and also an option similar to 'overwrite' iirc [21:27] <_ruben> huh? [21:27] i just exportet the dump with myadmin [21:27] <_ruben> *confused* [21:27] but want to import it with the terminal [21:28] Claw6_: can you re-dump w/ the option ruben recommended? [21:30] mh... [21:32] i will try something different [21:33] otherwise, drop the datbase :P [21:33] (and then import) [22:51] what's a good way of doing a connection speed test from a terminal? === niclasa is now known as Nicke_ [23:56] New bug: #417889 in openvpn (universe) "redirect-gateway not working for openvpn 2.1_rc11" [Undecided,New] https://launchpad.net/bugs/417889