| === ircd is now known as samferry | ||
| Psi-Jack | My gawd, how long can it take to make a Raid5 array of only 3 drives? heh | 00:30 |
|---|---|---|
| Psi-Jack | Playing with FreeNAS, and made it build a Raid5 softraid just to see how it works. | 00:30 |
| ScottK | lamont: No idea. | 00:49 |
| slangasek | are there UEC images available yet that are candidates for inclusion in alpha 5? | 01:11 |
| wfiuewfew | Hi---does ubuntu server 9.04 come pre-configured with a firewall, or do I need to configure one manually | 01:16 |
| Damm | is there a good question to ping about Ubuntu Karmic Kernels missing the virtio stuff? | 02:23 |
| Damm | guess i'll boot into a known working version of the kernel | 02:25 |
| Damm | and file a bug | 02:25 |
| twb | "IvAin Arce, Pablo HernAin Jorge, Alejandro Pablo Rodriguez, MartAn Coco, Alberto SoliAto Testa and Pablo Annetta discovered that Dnsmasq [...]" | 02:50 |
| twb | Someone forget to use UTF-8? | 02:50 |
| twb | (From USN 827-1) | 02:50 |
| MTeck | I was wondering how I could get rid of these errors. They're starting to get annoying. http://paste.ubuntu.com/263520/ | 03:18 |
| twb | MTeck: where are those messages appearing, and what is generating them? | 03:19 |
| twb | Seems like you're using exim4 | 03:19 |
| ScottK | Some of them are exim generated. | 03:19 |
| ScottK | If the logs are annoying use logwatch and don't read logs directly. | 03:20 |
| twb | logwatch is awesome | 03:20 |
| MTeck | That's logwatch I though | 03:21 |
| jmarsden | MTeck: Or you could ask about what causes them in #exim | 03:21 |
| twb | Probably this channel is just postfix fanboys | 03:21 |
| MTeck | yup - that one's logwatch | 03:21 |
| MTeck | I like the guys in this channel | 03:21 |
| MTeck | it's in the #ubuntu space | 03:22 |
| ScottK | Exim4 probably ships with a logwatch file that has a regex in it for the exim logs. | 03:22 |
| ScottK | You'd need to tune that to get rid of more exim stuff. | 03:22 |
| MTeck | It's not them being there that bothers me - it's why they're there | 03:23 |
| MTeck | no mail should come into this system | 03:23 |
| ScottK | twb: Actually one of the two people primarily responsible for exim4 beingin Main in Ubuntu is in this channel. | 03:23 |
| twb | Oh sorry, I meant logcheck. | 03:23 |
| twb | logwatch is for people who enjoy unknown log entries being silently ignored instead of red-flagged | 03:23 |
| jmarsden | There is some message or other trying to go OUT of your system that isn't making it, I think... but someone in #exim should have a better idea about that than I do. | 03:23 |
| ScottK | So it's not all Postfix fans. | 03:23 |
| twb | ScottK: ah, I didn't know it WAS in main :-) | 03:23 |
| MTeck | I use logwatch and logcheck | 03:24 |
| MTeck | check is nightly and watch is weekly | 03:24 |
| MTeck | so - how would I make exim only listen locally on 25? | 03:25 |
| twb | MTeck: surely that's the default? | 03:25 |
| ScottK | Well you'd needone of the exim people for that. | 03:25 |
| ScottK | twb: Not likely. | 03:26 |
| ScottK | MTA should listen on port 25. That's what they do. | 03:26 |
| MTeck | so I need iptables? | 03:27 |
| twb | ScottK: I was just thinking in general Debian packages avoid listening to the world by default | 03:28 |
| ScottK | twb: Not MTA packages. | 03:29 |
| twb | Fair enough | 03:29 |
| ScottK | Accepting mail and listening on the port are two different things. | 03:29 |
| ScottK | For example, the postfix package listens on port 25, but won't accept mail for any domain without configuration. | 03:29 |
| MTeck | I just want the system to send email without being a butt head about it | 03:29 |
| jmarsden | MTeck: Then use ssmtp not exim4 :) BTW to reconfigure what interfaces exim4 listens on, do sudo dpkg-reconfigure exim4-config | 03:39 |
| twb | I have had bad experiences with ssmtp and nullmailer. | 03:44 |
| twb | I currently use msmtp, and it has worked MUCH better for me. | 03:44 |
| ScottK | iptables is another option. | 03:44 |
| twb | ScottK: that's kinda a bludgeon-into-submission approach, though | 03:45 |
| ScottK | Sure. | 03:45 |
| === gcleric_ is now known as gcleric | ||
| jmarsden | twb: Did you file bugs against ssmtp and nullmailer, so the issues can be addressed? | 03:50 |
| twb | jmarsden: I can't remember, this was a long time ago | 03:55 |
| MTeck | jmarsden: ok - almost done w/ homework and I'll try out msmtp - will web applications automatically use it instead? that's where most of the mail comes from | 03:56 |
| jmarsden | OK. I've not had issues with it, so I was going to check uo on them. | 03:56 |
| twb | The problem was ssmtp IIRC was some kind of assumption about a hostname and mailname matching, because somehow bounce messages were ending up on twb@<my ISP> because my local username was twb, though my email address was not-twb@<my ISP> | 03:56 |
| twb | ...or something like that. | 03:56 |
| twb | The problem with nullmailer was more along the lines of panic messages getting stuck in its queue, on machines that nobody looked at for months, so nobody noticed they had exploded. | 03:57 |
| twb | I like that msmtp doesn't have a local queue -- it will simply not exit until the remote end has either accepted the message for relay, or told it to FOAD | 03:58 |
| jmarsden | MTeck: If they open port localhost 25, your web apps will use any working MTA. If they exec a sendmail program, you may have a little configuring to do. | 03:59 |
| twb | Anything Provides: mail-transport-agent should have a standard /usr/sbin/sendmail interface... | 04:00 |
| MTeck | It's php so I'll hope it'll just work | 04:00 |
| twb | haha | 04:00 |
| giovani | php will use a sendmail app | 04:01 |
| giovani | so "just work" not so much | 04:01 |
| giovani | unless you have a drop-in sendmail replacement | 04:01 |
| MTeck | oh | 04:01 |
| twb | Debian Policy requires MTA packages to provide a drop-in sendmail replacement! | 04:02 |
| jmarsden | dpkg -L msmtp | grep sendmail does not seem to reveal a /usr/bin/sendmail being installed... it is described as an SMTP client, not an MTA. | 04:05 |
| jmarsden | That is why I think some configuration might be needed if you pick msmtp, which is what MTeck said he was about to try out. | 04:06 |
| twb | jmarsden: msmtp-mta is a separate package | 04:06 |
| twb | It just symlinks /usr/sbin/sendmail to /usr/bin/msmtp | 04:07 |
| twb | I think the recent versions also use debconf to autogenerate /etc/msmtprc. | 04:07 |
| twb | Having said all that, msmtp is certainly for light deployments, not for e.g. a 256-user shell server. | 04:08 |
| uvirtbot | New bug: #415587 in mysql-dfsg-5.1 "Mythbuntu installation broken after dist-upgrade" [Undecided,New] https://launchpad.net/bugs/415587 | 04:11 |
| lamont | ScottK: -2 uploaded to debian, btw | 05:15 |
| uvirtbot | New bug: #422968 in bind9 (main) "bind9 fails to start and update" [Undecided,New] https://launchpad.net/bugs/422968 | 05:16 |
| ScottK | lamont: OK. My upload saved having to deal with Launchpad once, so I'd call it a win. | 05:17 |
| lamont | heh - yeah, no worries | 05:25 |
| lamont | bug 422968 is proof that maintainers kind of assume that you won't completely stray from their stock config. sigh | 05:28 |
| uvirtbot | Launchpad bug 422968 in bind9 "bind9 fails to start and update" [Undecided,New] https://launchpad.net/bugs/422968 | 05:28 |
| twb | Yay for dnsmasq | 05:31 |
| lamont | twb: you're pegging the sarcasm meter here... | 05:32 |
| twb | HHOS | 05:32 |
| lamont | ?? | 05:33 |
| twb | !google HHOS site:catb.org | 05:34 |
| ubottu | Error: I am only a bot, please don't think I'm intelligent :) | 05:34 |
| lamont | heh | 05:36 |
| jmarsden | http://catb.org/jargon/html/H/ha-ha-only-serious.html | 06:49 |
| MTeck | So... any reason dd would be running on my server? | 07:04 |
| MTeck | a server that is only a virtual machine (linode) | 07:05 |
| MTeck | that was just kind of alarming.. | 07:06 |
| MTeck | klogd is taking up 100% cpu too.... | 07:08 |
| MTeck | sleep - time - please hilight me with any answers and I'll catch up when the sun comes up. | 07:16 |
| MTeck | thanks | 07:16 |
| henkjan | MTeck: http://fixunix.com/ubuntu/551193-why-there-dd-process-running-daemon.html | 07:17 |
| === Belloto_ is now known as Belloto | ||
| twb | I remember sending esr a grumble email when his domain changed without warning from tuxfoo.net to catb.org | 07:27 |
| twb | That's going back a way | 07:27 |
| un|matrix | hi... how do i block an IP address with iptables on a router? | 10:34 |
| jmarsden | How did you set up the current set of iptables rules on that same router? | 10:36 |
| jmarsden | Basically you create a rule to match that IP as a source address and drop traffic that matches it. Then you add it to whatever config file your current routing setup uses. There are too many variables to give you a "cut and paste" answer. | 10:39 |
| un|matrix | i've tried iptables -A OUTPUT -d $address -j DROP | 10:42 |
| un|matrix | but this only bans it on the actual router | 10:42 |
| un|matrix | the nat clients can still ping it | 10:42 |
| jmarsden | Sounds like you added it to the wrong table? | 10:43 |
| un|matrix | filter? | 10:44 |
| un|matrix | where should i add it to? mangle? | 10:44 |
| jmarsden | Probably FORWARD. Read the docs/tutorials on iptables and you'll find diagrams explaining what each table is for. Such as at http://iptables-tutorial.frozentux.net/chunkyhtml/c962.html | 10:46 |
| un|matrix | i'm also dropping it in both directions in FORWARD, but it can still be pinged | 10:47 |
| un|matrix | is the rule order important? | 10:48 |
| jmarsden | Yes. | 10:48 |
| un|matrix | so if i have a rule that lets everything through | 10:49 |
| un|matrix | and add a rule that bans a certain thing after it | 10:49 |
| un|matrix | would it still get thru? | 10:49 |
| un|matrix | damn | 10:50 |
| un|matrix | yeah | 10:50 |
| un|matrix | that was it | 10:50 |
| jmarsden | Yes. | 10:50 |
| un|matrix | x_x | 10:50 |
| un|matrix | well thank you very much, these few basic details were missing in my iptables knowledge | 10:50 |
| jmarsden | No problem. | 10:50 |
| uvirtbot | New bug: #412972 in openssh (main) "bad signal mask of ssh sessions" [Medium,Confirmed] https://launchpad.net/bugs/412972 | 11:32 |
| === cjwatson_ is now known as cjwatson | ||
| MTeck | henkjan: thanks | 13:20 |
| Kjartan2 | Hello, I'm having issues with my pure-ftpd-server. I have created users and can access them from the machine itself. But I cannot access them from any other machine. I can however access the apache server from any machine. Any tips? | 13:38 |
| bunny | does anyone know what partitioning utilities are available from the "execute a shell" environment of the server install cd? | 13:42 |
| Kjartan2 | fdisk? | 13:43 |
| bunny | !bugs | 13:48 |
| ubottu | If you find a bug in Ubuntu or any of its derivatives, please file a bug using the command « ubuntu-bug <package> » If that fails, you can report bugs manually at https://bugs.launchpad.net/ubuntu/+filebug - Bugs in/wishes for the bots can be filed at http://bugs.launchpad.net/ubuntu-bots | 13:48 |
| Kjartan2 | Hello, I'm having issues with my pure-ftpd-server. I have created users and can access them from the machine itself. But I cannot access them from any other machine. I can however access the apache server from any machine. Any tips? My first time setting up a text-only server. | 14:37 |
| MTeck | Kjartan2: did you check logs? | 14:46 |
| Kjartan2 | in /var/log/pure-ftpd/transfer.log? That log is empty | 14:49 |
| MTeck | Kjartan2: Can other systems get to the server at all? | 14:50 |
| MTeck | Enable ufw without allowing the two ports for ftp? | 14:50 |
| Kjartan2 | As said, I can access the webserver fine. Perhaps it's apparmor if that's installed be default. | 14:51 |
| Kjartan2 | Trying to learn this all at once. ^^ | 14:51 |
| Boohbah | Kjartan2: is the ftp server listening on a public IP? check with netstat | 14:52 |
| jdstrand | there is no default apparmor protection for pure-ftpd-server. Please see https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/AppArmorProfiles | 14:53 |
| jdstrand | so there is no need to change apparmor | 14:53 |
| Kjartan2 | Oh, I don't have to mess with apparmor? | 14:55 |
| Kjartan2 | Boohbah: There's nothing with pure-ftpd in netstat | 14:55 |
| Kjartan2 | Only connection open is to here, freenode. | 14:55 |
| Boohbah | really, even with netstat -anp ? | 14:55 |
| jdstrand | Kjartan2: I'm just saying that apparmor isn't getting in the way of pure-ftpd unless you specifically added an apparmor profile for it | 14:56 |
| Boohbah | sorry i should have specified flags, netstat won't show all connections by default | 14:56 |
| Twink | What's the best solution for getting nagios3 installed on 8.04? Is it to download/compile from source, use a debian source, or any other way? | 14:58 |
| Kjartan2 | jdstrand: Ah ok, so since there is no DENY it's default ALLOW? | 14:58 |
| Kjartan2 | Boohbah: *:21 is on listen | 14:58 |
| MadCoder_ | Hi! Could anyone help me with freenx setup? | 14:59 |
| MadCoder_ | if any... I need to use client's com-port | 14:59 |
| Twink | MadCoder_: Don't ask to ask, just ask ;) | 14:59 |
| jdstrand | Kjartan2: apparmor usage in Ubuntu application specific. if a profile is not defined for a binary, the binary is unconfined. | 15:00 |
| Boohbah | Twink: i would install from source... no need to worry about breaking your apt db :) | 15:01 |
| MadCoder_ | How to use COM1 on client from freenx session? | 15:02 |
| Twink | Boohbah: From nagios source? | 15:02 |
| Twink | Boohbah: Thanks - I'll do that, and sorry for my dumb reply just a second ago! | 15:03 |
| jdstrand | sommer: hi! I added a couple of features to ufw that you may want to add the server guide for 9.10 | 15:24 |
| jdstrand | sommer: a) filtering by interface, b) egress filtering and c) the ufw-framework.8 man page | 15:24 |
| jdstrand | sommer: as always, it is in the man page and I'm available for questions/feedback :) | 15:25 |
| uvirtbot | New bug: #423071 in php5 (main) "PHP5 now depends on libapache2-mod-php5 even if lighttpd installed" [Wishlist,Confirmed] https://launchpad.net/bugs/423071 | 15:31 |
| sommer | jdstrand: thanks that's awesome... I'll hopefully be able to get to that today or tomorrow | 15:45 |
| jdstrand | sommer: thanks! :) | 15:47 |
| VSpike | Is there a way to install saned on ubuntu server without pulling in the whole of xorg? | 15:56 |
| Sam-I-Am | hey folks... | 15:58 |
| Sam-I-Am | got an interesting issue with karmic | 15:58 |
| Sam-I-Am | (and it affects server) | 15:58 |
| Sam-I-Am | as soon as i change nsswitch.conf to use ldap for passwd, su and sudo break | 15:58 |
| Sam-I-Am | as in, unusable. | 15:58 |
| VSpike | aha - install sane-utils, not sane | 15:59 |
| Sam-I-Am | brought this up yesterday as something i found in karmic desktop, but its apparent in server too | 15:59 |
| alvin | VSpike: indeed | 16:00 |
| Sam-I-Am | mathiaz: you around? | 16:01 |
| smoser | mathiaz, https://bugs.launchpad.net/ubuntu/karmic/+bugs?field.milestone=12713 | 16:01 |
| mathiaz | Sam-I-Am: hey | 16:02 |
| Sam-I-Am | mathiaz: got a problem i'd like to run by you before filing a bug... maybe its some policy thing i'm missing in karmic. | 16:02 |
| mathiaz | Sam-I-Am: sure - go ahead | 16:03 |
| Sam-I-Am | mathiaz: as soon as i change the 'passwd' field in nsswitch.conf to point to ldap, sudo and su quit working completely. | 16:03 |
| Sam-I-Am | sudo returns 'sudo: setreuid(ROOT_UID, user_uid): operation not permitted" and su returns "setgid: operation not permitted" | 16:04 |
| Sam-I-Am | returning the system to files only fixes the problem | 16:04 |
| mathiaz | Sam-I-Am: was it working on jaunty? | 16:04 |
| Sam-I-Am | if i havent already enabled root to get back into the system, its competely hosed | 16:04 |
| Sam-I-Am | yes, works fine | 16:04 |
| Sam-I-Am | verified that yesterday | 16:04 |
| mathiaz | Sam-I-Am: seems like a regression then | 16:04 |
| Sam-I-Am | i cant even figure out whats breaking... its a system call of some sort thats getting blocked... figured it might be some sort of new policy thing maybe. | 16:05 |
| Sam-I-Am | like apparmor, only worse. | 16:05 |
| Sam-I-Am | what package would i post this bug with? | 16:05 |
| Sam-I-Am | since it seems to be more of a core problem | 16:05 |
| Sam-I-Am | seems 'ldap files' does not work but 'files ldap' does | 16:10 |
| mathiaz | Sam-I-Am: seems like an issue with the nss system - libc then? | 16:11 |
| orudie | question. i followed this tutorial to set up mail filters for postfix/dovecot https://help.ubuntu.com/8.10/serverguide/C/mail-filtering.html and it had been working find for almost a year. However ClamAV seem to use a lot of memory, so I was wondering if it is wise to uninstall it , and how should i actually go about safely uninstalling it | 16:11 |
| Sam-I-Am | mathiaz: yeah... nsswitch.conf is part of base-files | 16:13 |
| Sam-I-Am | hard to say whats going on here | 16:13 |
| Sam-I-Am | it seems rather grave at any rate | 16:13 |
| VSpike | alvin: have you used saned? I'm just trying to figure out, if I set up xinetd to use saned, do I also need to edit /etc/default/saned to start saned? | 16:15 |
| alvin | VSpike: yes, a long time ago. It worked, but I don't remember using xinetd. Take a look here: https://help.ubuntu.com/community/ScanningHowTo There is a section about setting up a scanner server in Ubuntu 9.04 | 16:17 |
| mathiaz | Sam-I-Am: even though nsswitch.conf is part of base-file, it's the libc package that takes care of the nss subsystem (IIRC) | 16:17 |
| Sam-I-Am | mathiaz: yeah, i'll file against glibc | 16:18 |
| Sam-I-Am | mathiaz: another problem... sudo-ldap in karmic doesn't work with TLS. looks like another gnutls problem. | 16:18 |
| orudie | is there a way for me to somehow be connected to irc from screen , but use windows client like xchat to connect to my screen then irc? | 16:18 |
| Sam-I-Am | its not a 'main' package, but its definitely something people use... should probably become part of 'main' someday | 16:19 |
| Sam-I-Am | orudie: screen doesnt do gui stuff | 16:19 |
| Sam-I-Am | it'd be cool if there was a way to 'screen' x11 stuff... | 16:19 |
| alvin | Sam-I-Am: you can try Quassel | 16:20 |
| orudie | Sam-I-Am-> what about screen proxy ? | 16:20 |
| VSpike | It seems a bit odd that the package doesn't add the saned user to the scanner group | 16:20 |
| mathiaz | Sam-I-Am: right - we've discussed sudo-ldap - IIRC it should just be merged with sudo | 16:20 |
| mathiaz | Sam-I-Am: there isn't any reason to have two packages IIRC | 16:21 |
| Sam-I-Am | yeah | 16:21 |
| mathiaz | Sam-I-Am: but I would double-check this | 16:21 |
| alvin | orudie: Oops, that message was for you. (Quassel can do that) | 16:21 |
| Sam-I-Am | i think its actually libldap doing the tls connection, not sudo itself... going to try my openssl-bound libldap packages, see what happens. i'm guessing this is YAGB :) | 16:21 |
| mathiaz | Sam-I-Am: it may well be the case - report it then ;) | 16:22 |
| mathiaz | Sam-I-Am: thanks for testing karmic! | 16:22 |
| Sam-I-Am | yeah, just going to get to the bottom of it first | 16:22 |
| Sam-I-Am | hopefully these will get looked at before release... they seem really bad... well, the su/sudo one at least. | 16:23 |
| Sam-I-Am | if you dont know about it, you're locked out of your system | 16:23 |
| Sam-I-Am | mathiaz: bug 423252 | 16:52 |
| uvirtbot | Launchpad bug 423252 in glibc "NSS using LDAP on Karmic (alpha 4) breaks 'su' and 'sudo'" [Undecided,New] https://launchpad.net/bugs/423252 | 16:52 |
| uvirtbot | New bug: #423246 in openldap (main) "slapd should have a ufw profile" [Undecided,New] https://launchpad.net/bugs/423246 | 16:52 |
| Claw6 | is there a shell app to display whole network utilization? | 16:53 |
| Claw6 | such as htop for cpu and mem? | 16:54 |
| Sam-I-Am | ntop! | 16:54 |
| giovani | Claw6: this of course only reflects usage on that server, or through that server, in the case that it's a router/firewall | 16:55 |
| Sam-I-Am | not quite... | 16:55 |
| aubre | nmon? | 16:55 |
| Sam-I-Am | there is iftop | 16:55 |
| Sam-I-Am | but its still only host-based | 16:55 |
| Sam-I-Am | you can use snmp to query your switches and aggregate i guess... | 16:56 |
| aubre | nmon was only recently open sourced | 16:56 |
| aubre | so I am sure it isn't in the distro yet | 16:56 |
| giovani | yeah, I don't know what "whole network utilization" really entails | 16:56 |
| Claw6 | i need a solution that would act like "rsync -az ftp://user:pwd@domain.do /var/www | 17:07 |
| uvirtbot | New bug: #418208 in samba (main) "package samba-common 2:3.4.0-3ubuntu1 failed to install/upgrade: podproces instalovaný post-installation skript vrátil chybový status 1" [Undecided,Won't fix] https://launchpad.net/bugs/418208 | 17:07 |
| Claw6 | i just want to download all files from a external ftp for a local backup | 17:08 |
| Claw6 | and then do a cronjob for that | 17:08 |
| * cabbey waves at smoser | 17:13 | |
| smoser | hello to cabbey from the other side | 17:13 |
| cabbey | looks like I might become a customer of yours soon :) | 17:14 |
| soren | jdstrand: I was just talking to danpb over in #virt on OFTC (the libvirt channel), and he said you should probably S/GPL/LGPL/ your apparmour stuff. Do you have any idea when you'll be able to upstream it? | 17:55 |
| orudie | how can i check the size of contents of a directory ? | 17:56 |
| soren | orudie: du | 17:56 |
| jdstrand | soren: the files are GPLd in the karmic patches | 17:56 |
| jdstrand | soren: I am waiting on a kernel fix in karmic to get uploaded | 17:56 |
| jdstrand | soren: then I can say-- look in karmic, it works! | 17:57 |
| jdstrand | soren: I haven't been able to say that yet | 17:57 |
| soren | jdstrand: libvirt is LGPL. They're unlikely to accept stuff that will force the rest of the project to go GPL. | 17:57 |
| jdstrand | soren: I originally had it LGPL'd, but someone (ahem, kees ;) recommended I do GPL 3 | 17:58 |
| soren | jdstrand: Maybe you can have a quick chat with danpb yourself? | 17:58 |
| jdstrand | soren: but the kernel patches are committed, just waiting on alpha freeze | 17:58 |
| orudie | soren-> so with du, the numder displayed at the buttom is in bytes or kylobytes ? | 18:00 |
| soren | orudie: kilobytes. | 18:00 |
| cabbey | orudie: the -h option will translate it to "human readable" values like "22.5G" | 18:05 |
| orudie | cabbey-> thanks | 18:06 |
| orudie | how to search withing man pages ? | 18:07 |
| sub | forward slash | 18:08 |
| sub | then type your search terms and press enter | 18:08 |
| guntbert | orudie: man uses your default "pager", usually "less", so "man less" will tell you more :-) (no pun intended) | 18:11 |
| kees | jdstrand: oops, I was just voicing the "canonical default license". :P | 18:17 |
| jdstrand | kees: no worries | 18:20 |
| jdstrand | kees: just a light jab. I looked at it and tossed a coin on upstream's licensing intent | 18:20 |
| jdstrand | kees: I lost :) | 18:20 |
| orudie | how do you generate an ssh key ? | 18:23 |
| KillMeNow | what are you generating it for? | 18:24 |
| KillMeNow | apache or mail? | 18:24 |
| mushroomblue | https://help.ubuntu.com/community/SSH/OpenSSH/Keys | 18:25 |
| mushroomblue | there you go | 18:25 |
| orudie | mushroomblue-> so the key should be generated on the computer that i am connecting from | 18:28 |
| orudie | right ? | 18:28 |
| kees | jdstrand: heh | 18:28 |
| pmatulis | orudie: on the client you generate a key-pair. you then place the public part on the server | 18:29 |
| orudie | ok | 18:29 |
| guntbert | orudie: yes, because (at least in theory) your private key should never be sent over a network | 18:29 |
| KillMeNow | protect that private key like you do YOUR privates! | 18:30 |
| guntbert | KillMeNow: but you need not carry it with you :-) | 18:30 |
| KillMeNow | LOL true that Guntbert | 18:43 |
| KillMeNow | course, my wife keeps mine on the night stand next to the bed | 18:43 |
| KillMeNow | get married, and they become detachable | 18:43 |
| guntbert | KillMeNow: :-) | 18:43 |
| mushroomblue | pfft. | 18:43 |
| mushroomblue | you must've married an american woman. :) | 18:44 |
| KillMeNow | yes | 18:44 |
| KillMeNow | i did | 18:44 |
| mushroomblue | Canadian women let you keep them attached. :) | 18:46 |
| orudie | how to make file executable ? | 19:03 |
| giovani | orudie: chmod +x filename | 19:05 |
| orudie | how to rename screen windows ? | 19:20 |
| PhotoJim | orudie: control-A " | 19:23 |
| PhotoJim | orudie: if you mean the shell app "screen" | 19:23 |
| orudie | how would i go about installing irssi ? | 19:29 |
| orudie | apt-get install irssi ? | 19:29 |
| giovani | orudie: yes ... | 19:37 |
| giovani | if you installed screen, I imagine you know how apt-get works :) | 19:37 |
| orudie | hey i havent touched shell if a few months :) | 19:38 |
| orudie | just have to get some stuff done right now | 19:38 |
| giovani | it would probably be useful for you to read the ubuntu server guide to get comfortable with the command line | 19:39 |
| orudie | what is the best way to copy paste an additionaly pub key into authorized_keys ? | 19:45 |
| giovani | you don't copy-paste | 19:49 |
| giovani | you use cat >> | 19:49 |
| giovani | i.e. cat key.pub >> .ssh/authorized_keys | 19:49 |
| giovani | >> appends to the file on the right | 19:49 |
| thowland | make sure you use 2 >> | 19:50 |
| giovani | you mean 2 ">" | 19:50 |
| giovani | 1 ">>" | 19:50 |
| thowland | or you'll overwrite your existing | 19:50 |
| giovani | sure, which shouldn't be the end of the world, since public keys should be all over | 19:50 |
| giovani | but that's why I wrote it explicitly that way twice | 19:50 |
| ycy | i want that a special package will never be upgraded. how can I do this? | 20:37 |
| genii | !pinning | 20:37 |
| ubottu | pinning is an advanced feature that APT can use to prefer particular packages over others. See https://help.ubuntu.com/community/PinningHowto | 20:37 |
| * genii sips | 20:38 | |
| ycy | thanks | 20:38 |
| genii | np | 20:38 |
| orudie | i'm looking at how to set up irssi proxy to connect to with a remote client on this tutorial, and kinda stuck at the last step http://pthree.org/2007/01/06/irssi-proxy/ | 20:40 |
| orudie | giovani-> maybe you can help me one more time and hopefully last time today | 20:40 |
| orudie | :) | 20:40 |
| ahe | i just want to create development systems with mysql unattended and so i want to seed the mysql passwort with a default or empty password | 20:46 |
| ahe | anyone knows how to do that? | 20:46 |
| ahe | debconf-get-selections gives me the right settings of the type password, but is it even possible to specify a value here? | 20:47 |
| thowland | ahe: maybe you'd do better to do a system image? (like ghost)- then you can set up a full system and clone it for each development system | 20:48 |
| ahe | thowland: unfortunately this is not an option since i want to find a way to build such systems with deb packages | 20:51 |
| thowland | ahe: maybe make a custom deb for mysql-server, and change the post-install script? That's where it's asking for the password. | 20:52 |
| ahe | actually i want to find a way to do this without changing any packages because i want to be able to get all kinds of server packages and build a virtual appliance by only building a deb and providing a seed file | 20:55 |
| ahe | so i just want to reuse the existing server packages | 20:55 |
| ahe | i already have a tool that applies the seedfile and installs the package afterward | 20:56 |
| orudie | where is irssi config file is located when installing from the binary in Ubuntu, and whats it called ? | 21:00 |
| sandstrom | When will php 5.3 be in an ubuntu server edition? | 21:09 |
| ahe | sandstrom: it's not in karmic so i guess it will be in karmic + 1 | 21:18 |
| mdz | ttx_, hi | 21:28 |
| ttx_ | mdz: hey | 21:28 |
| mdz | ttx_, I'm back online after my flight. how are things going with alpha 5? | 21:28 |
| ttx_ | mdz: we are still blocked in some eucalyptus new classloading errors. soren is expected to drop a new version in 30 min. and respin the ISO so that we can spend the rest of the day testing | 21:29 |
| mdz | ttx_, there is not very much day left :-/ | 21:33 |
| mdz | ttx_, have you been able to test the ISO apart from eucalyptus? | 21:34 |
| stefan___ | e | 21:34 |
| ttx_ | mdz: mathiaz is on that | 21:34 |
| ttx_ | mdz: it's in progress, no issue so far | 21:38 |
| mdz | ttx_, I think it would be a good idea for you to join #ubuntu-release to coordinate with the release team | 21:43 |
| ttx_ | mdz: done | 21:51 |
| giovani | orudie: by "the last step" do you mean ssh tunneling? | 21:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!