=== ogra_ is now known as ogra [00:44] so, i just ran find . -size +0 -exec mv -i {} {}xxx \; and now i have a bunch of files that are named genericporntitle.avixxx, can anyone tell me how to get rid of the xxx's i just added to my files? [00:51] New bug: #458637 in samba (main) "samba has many issues" [Undecided,New] https://launchpad.net/bugs/458637 [01:03] fighter: ls > list; while read file; do mv "$file" "`echo "$file" | sed s/avixxx/avi/`"; done < "list"; rm list [01:04] there's probably a better way but that will work [01:05] sed s/xxx// would work as well [01:05] yeah but the string "xxx" is more likely to be in the title than "avixxx" [01:06] I'm willing to loset he xxx in the title [01:06] well [01:06] in that case: [01:06] then change it to sed s/xxx//g [01:06] sed s/xxx//g [01:09] i typed it but so far i'm still waiting, i'm checking the dir on my windows box and nothing has changed yet. any idea how long it should take? [01:09] 226gb in 461 files [01:10] should be changing them as it goes [01:10] unless it's still waiting on the "ls > list" [01:11] ps ax | grep ls [01:11] and see if ls is still running [01:11] and really it shouldn't take extra time based on size, since it's really just changing the name [01:11] no need to actually move the data [01:11] the time should be based on the number of files [01:12] ah there we go [01:12] got it now [01:12] thank you for you help :) [01:12] no problem === MenZa_ is now known as MenZa [01:57] erichammond, ping [02:06] New bug: #458672 in bind9 (main) "package bind9 1:9.6.1.dfsg.P1-3 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/458672 === erichammond1 is now known as erichammond [02:08] soren, mdz erichammond feedback on release criticalness of bug 458576 and my attached patch would be nice. [02:08] Launchpad bug 458576 in ec2-init "ec2: ssh public key fingerprint in console output does not match EC2 standards" [Undecided,New] https://launchpad.net/bugs/458576 [02:08] i can definitely see an argument for it being fairly release critical. [02:16] good night all. [02:16] ttx, soren, zul, erichammond you have mail from me. i will see you all on monday AM. [02:16] smoser: have a good day off [02:26] smoser: I don't have any specific examples of who/what has automated security checks of ssh host keys, how they are implemented, or how difficult it would be for them to adjust regular expressions to work with a different console output format. [02:27] I'm sure this type of checking exists, but don't have any real insight. So, I'd probably go with importance "Low" until somebody complains. If it's going to be easier to fix now than after release, and you want to avoid complaints, then bump it up to a higher priority. [02:27] erichammond: are you talking specifically about checking for host keys generated during the Debian ssh-keygen entropy fiasco? [02:28] twb: checking for ssh host key fingerprints in the EC2 instance console ouptput. [02:28] twb: I think I know what you're talking about (a while back) and that's something different. [02:28] OK, no worries. [02:29] I was gonna say, that kind of host key scanning ought to be done by openssh-blacklist or whatever the package is. [02:29] Dunno if it's any help to RTFS that. [04:10] !guide [04:10] Sorry, I don't know anything about guide [04:10] !rute [04:10] documentation is to be found at http://help.ubuntu.com and http://wiki.ubuntu.com - General linux documentation: http://www.tldp.org - http://rute.2038bug.com [04:11] !sag [04:11] Sorry, I don't know anything about sag [04:11] Grr, I need to teach ubottu my mnemonics for the admin guide. [04:12] !learn sag is https://help.ubuntu.com/9.04/serverguide/C/index.html [04:14] need help with sshfs and fstab [04:14] here is my situation [04:15] hmm hold on [04:15] You can't automount sshfs filesystems unless you're using passphraseless key-based authentication. [04:15] I do [04:15] OK, carry on. [04:16] (But I highly recommend you learn about passphrases and ssh-agent for most other ssh keys.) [04:16] I have server with username torrent that allows all the client to login [04:17] so on one of my client computers logged in as media I do: sshfs -o allow_other torrent@consus2:/home/torrent/data/music music/ [04:18] and that mounts it properly [04:18] but if I try to do it with fstab it does not work [04:18] here is what I have on fstab [04:19] sshfs#torrent@consus2:/home/torrent/data/music /home/media/music fuse comment=sshfs,auto,users,exec,allow_others,reconnect 0 0 [04:19] Doing A/V files over sshfs is gonna be pretty sucky. If you're on a LAN, have you considered using NFS or CIFS? [04:19] ... [04:19] I hate both of them [04:19] sshfs ftw [04:20] hmm [04:20] you know I wonder... [04:23] what's with the comment= [04:23] something fuse specific? [04:23] qman__: probably ends up in mtab or something [04:24] poningru: what do you "hate" about NFS/CIFS? [04:25] twb, too many issues [04:25] poningru: such as? [04:26] NFS is difficult to secure, but that's usually not a problem on a LAN [04:26] can't see any problems with CIFS [04:26] ok nfs: issues with reconnecting, crashing windows/osx etc. [04:27] I would never use NFS with windows [04:27] CIFS is ideal for windows [04:27] but not for linux [04:27] it works fine on linux [04:27] trying to setup samba on lin or osx is worse than pulling teeth [04:28] but there's no reason you can't use both [04:28] anyway [04:28] not at all [04:28] qman__, well my experience says otherwise [04:28] Surely if your machine can use sshfs well, it can use NFS well. [04:28] twb, its not a matter of processor power [04:28] the default configuration is pretty well set [04:28] oh god [04:28] adjusting it is easy [04:28] I realize that. I was speaking about the quality of the NFS implementation. [04:29] ok if you guys wanna argue the merits of nfs/cifs vs. sshfs ... [04:29] I just want help with sshfs [04:29] twb, look at the lkml discussions on nfs [04:29] sshfs has its uses, but I think it's a poor choice for distributing large A/V files over a LAN. [04:29] well I would like to disagree with you [04:29] I have to agree with twb, too much overhead [04:29] not at all [04:30] todays modern cpus? [04:30] it's not just CPU power [04:30] besides, why waste it on the network mount [04:30] my 'old' pentium dual core with 1.46 I have maybe 1% overhead with sshfs [04:30] It'd be like riding a bicycle on an interstate highway [04:30] * poningru rolls eyes [04:30] oh god [04:30] sorry I bothered you guys [04:31] poningru: I don't think you actually describe the problem you're having with sshfs yet. [04:31] just saying, I wouldn't ever bother setting up sshfs that way [04:31] as such my advice is to not use sshfs for that purpose [04:31] twb, uh... [04:31] qman__, point taken [04:32] twb, I have server with username torrent that allows all the client to login [04:32] so on one of my client computers logged in as media I do: sshfs -o allow_other torrent@consus2:/home/torrent/data/music music/ [04:32] and that mounts it properly [04:32] but if I try to do it with fstab it does not work [04:32] here is what I have on fstab [04:32] sshfs#torrent@consus2:/home/torrent/data/music /home/media/music fuse comment=sshfs,auto,users,exec,allow_others,reconnect 0 0 [04:32] poningru: ah, sorry, I missed the "not" [04:32] having never put an sshfs mount in the fstab, my first guess is that # [04:32] poningru: the mount command is run as root, not as media. [04:32] second guess is the comment= on the options [04:33] poningru: therefore, *root*'s .ssh/config must be set up correctly. [04:33] but I could easily be wrong about it [04:33] qman__: the # means it's a fuse entry [04:33] ah [04:33] twb, right but thats what the uid and gid is for [04:33] poningru: what uid and gid? [04:33] oh sorry that is old one [04:34] poningru, he's right about that [04:34] root's keys need to be set up too [04:34] qman__: well, just tell /root/.ssh/config to use ~media/.ssh/id_%h or whatever. [04:34] well add on uid=1001,gid=1001 [04:35] right but I remember setting this up a while ago [04:35] and putting it into root is the easy way out [04:35] I have it working like that [04:36] poningru: that doesn't change who the operation runs as. [04:36] twb, oh hmm [04:36] mounting a systemwide file share as root isn't exactly risky, considering that all your other filesystems are mounted as root [04:36] how does one do that then? [04:36] qman__, I know [04:36] poningru: you can't. [04:36] poningru: mount -a always runs as root. [04:37] poningru: if you want to mount a filesystem as some other user, you need to put -o noauto in its fstab entry, then add an init script or an entry in /etc/rc.local. [04:37] As qman__ says, it's pretty silly to try to restrict that, generally. What are you guarding against? [04:38] I'm not [04:38] I'm trying to figure it out [04:38] curiosity [04:40] twb, there has to be a way for a user to not have to share his private key with the root [04:40] I mean technically the root can just view it... [04:40] but still there has to be a way [04:41] you generate and trust another key [04:41] but using the key you already have set up is easier [04:41] Is there a Unified Monitoring System that doesn't rely on SNMP to gather data? I find SNMP so hard to configure. [04:42] KurtKraut, what are you trying to configure? [04:42] err monitor* [04:43] poningru, the essencial is: if the host is up or down (by ping) and what services are reachable by the central node (httpd, irc). [04:43] eh go with something simple like bigbrother [04:43] KurtKraut, you could configure a script on the monitoring host with nmap [04:43] 14:40 twb, there has to be a way for a user to not have to share his private key with the root [04:43] poningru: if you can't trust root, you are fucked. [04:44] twb, read what I said immediately after that [04:44] qman__, that is possible indeed. By I think this is so essential for small scenarios that I'm impressed no one has already did it. [04:46] KurtKraut, I've been too lazy to set one up myself [04:46] nagios does this, but it may be a little bigger scope than what you're looking for [04:47] KurtKraut, bigbrother [04:47] poningru, is it a package name? [04:48] http://www.bb4.org/ [04:48] no clue [04:48] flash? really? [04:48] I wouldn't use it on that basis alone [04:49] qman__, yeah you can turn that shit off [04:49] http://www.zabbix.com/ [04:49] btw another cool/simple one [04:50] what is that? [04:51] Zabbix rely on SNMP. This single fact makes me think this cannot be pointed out as simple. [04:51] KurtKraut, you dont have to rely on snmp iirc with that [04:51] I remember setting it up to do just ping/nmap tests [04:52] crohakon, network monitoring tool [04:52] poningru, so I'll give it a try [04:52] for datacenters or something? [04:52] still seems like overkill [04:52] crohakon, eh sure [04:52] crohakon, you can use it for your home network too [04:52] nagios is pretty much exactly like those [04:53] hmmm something to play with.. =) [04:53] and is in the ubuntu packages [04:53] qman__, absolutely nagios is a good one too [04:53] imho a little to much for us sys admins though [04:53] not point and click install [04:53] dont' know if it requires snmp to work or not [04:53] I know it can use it [04:53] cacti is snmp based [04:54] right [04:55] still overkill for my taste, which is most of why I don't have one set up [04:56] eventually I'll write something up in php that parses a simple nmap output [04:58] no ubuntu package for zabbix? [04:58] crohakon, it should be there iirc [04:58] qman__, bb is for you then [04:59] iirc? [04:59] if I recall correctly [04:59] I see 6 zabbix packages in my apt-cache [04:59] yeah same here [04:59] so yes, though it may be universe/multiverse/canonical [05:00] So can I install this on my server, and view it from my laptop? [05:00] looks like you install zabbix-server-??sql and zabbix-php-frontend on the server [05:00] Zabbix has a web interface, yeah [05:00] and zabbix-agent on the systems you want to monitor [05:00] then you just browse to the web site [05:01] wow, lots of little pieces. [05:01] sub, yo [05:01] qman__, yep [05:03] crohakon, if you dont like snmp you may wanna try out spong [05:03] though I have never used it [05:04] <--- just getting into this stuff. Not really sure what the benefits or disadvantages are of snmp. [05:04] I'm not a fan of snmp [05:04] it's difficult to configure, and a cleartext protocol to boot [05:04] at least, the version everything supports is [05:04] crohakon, eh its a little complicated unneccesarily and hard to configure [05:05] supposedly newer versions can be encrypted but it's just a mess [05:05] qman__, whats wrong with cleartext? [05:05] nmap is a better option [05:05] just put it over ssh [05:05] qman__, nmap isnt super reliable though [05:06] hey poningru [05:06] didnt know you hung out here [05:06] yep [05:06] here and #ubuntu-virt [05:07] oh cool [05:07] i do some light contributing to Ubuntu VMBuilder and triag bugs in server when I have the spare time [05:07] I heartily support protocols that use cleartext, and a separate encryption layer. [05:07] It makes debugging far less painful. [05:07] twb++ [05:07] sub, I've been meaning to get into vmbuilder [05:08] I wanna get into getting debian/rhel/suse build be as easy as ubuntu [05:08] it's a cool little piece of code, although about to go through a heavy refactoring or rewrite [05:08] I want a static IP so I can host my own websites. But thats not going to happen. =) [05:09] sub, really? [05:09] yeah [05:09] didnt soren here write that code? [05:09] sub, link? [05:09] yes, and he's the one who wants to rewrite it, hehe [05:09] let me see if i can find the email [05:10] crohakon, dynamic DNS works pretty well for me, though my ISP filters ports 21, 25, 53, 80, and 445 for security reasons [05:10] oh it's lind of long, i'll see if i can find an archived one i can link you to [05:10] poningru: https://lists.launchpad.net/vmbuilder/msg00003.html [05:11] yeah, charter blocks those ports as well. I sent an email asking what I need to do to get a static IP and those ports unblocked. They want me to pay $99/m for a 10mb down/1mb up connection with a static IP.... not going to happen. [05:12] hah, I have charter too [05:12] total rip [05:12] unfortunately there's no competition, no other options [05:13] 3 years ago I had a business account with verizon, and although DSL is much slower, I had a static IP for like 34/m and no ports blocked. Where I live now, however, charter is my only option. [05:13] crohakon, that sucks [05:14] my 5M/512k service is $50 a month on top of the "bundle" discount for getting TV with them too [05:15] the only other option is a T1 at $400 a month [05:16] Currently with charter I have a 8down/1up connection with dynamic IP and ports blocked for 34.99/m... to get the same up speed and a static ip with no port blockage they want $65 extra a month. [05:16] jeezus [05:16] * crohakon his hand on head [05:16] crohakon, work for cablevision [05:16] with no vid [05:16] cablevision? [05:17] 30down and 5up is about 65USD thats with a free domain, hosting, all ports open, static ip etc. [05:17] a cable company that services ny,nj,parts of ct etc. [05:17] damn... I need to move. [05:18] http://www.internode.on.net/residential/broadband/adsl/nakedextreme/pricing/ (annex M) [05:18] Sadly, I live in the rust belt... Michigan. [05:18] is anyonw having static ip issues with 9.10 ? [05:18] No one has work, and everything is expensive. [05:18] Sorrell, my vm isnt [05:18] server, install from iso [05:18] monthly download quota? that wouldn't work [05:19] :( dang, just me then. [05:19] I exceed 150GB every month [05:19] bandwidth cap = suck [05:19] And in .au, all domestic lines are rate limited (or subject to hefty excess fees) after exceeding a monthly quota. I get the impression that's uncommon in other nation-states. [05:19] yeah its sucks [05:19] qman__, comcast has a technical limit of 250gig [05:19] per month [05:20] I do exceed that time to time [05:20] but... [05:20] they dont care [05:20] Theoretically our wonderful new center-left government will put in FTTH (FTTP) in the next ten years. [05:20] I used 450GB in august [05:20] qman__, hehe [05:20] though that's not typical [05:21] http://en.wikipedia.org/wiki/National_Broadband_Network [05:21] qman__, downloading ubuntu isos ;) [05:21] let's go with that [05:21] "Download speeds of 100 mbps for 90% of Australia homes and businesses" [05:21] cool [05:21] http://www.phoronix.com/scan.php?page=news_item&px=NzYzMA [05:21] wow [05:21] Of course, that won't apply to anything hosted OUTSIDE .au [05:21] And that's assuming they actually manage to build it, on time and on budget (har har har) [05:22] yeah [05:22] AT&T promised the US 100 meg lines to every home over a decade ago [05:22] The government said "the telco's bids don't offer value for money, so we're going to do it ourselves, for cheaper" (har har har) [05:23] in return for tax breaks [05:23] qman__, THANK YOU [05:23] not only have they not delivered on that, their service hasn't improved in years [05:23] bunch of dirty bastards [05:23] qman__, and now everytime net neutrality comes around [05:24] they prop up the argument that 'we own the network we can do what we like with it' [05:24] no you dont you shit heads [05:24] tax payers essentially paid for it with tax cuts [05:25] Have you ever gotten sick of hearing AT&T take credit for things that they didn't invent? You will. -- Dave Hamilton [05:25] I wish I had the resources to get a dedicated line just for fun. [05:25] I've seriously considered getting a T1 despite the ridiculous cost [05:25] charter has terrible service [05:26] qman__: you could just get three separate DSL connections from separate providers, then multiplex them [05:26] can't get DSL [05:26] if I could, I would [05:26] In this area it is hard to get DSL from one provider... let alone three! [05:27] So you're saying that in .us, you can get fibre in places you can't get DSL? [05:27] WTF, are your exchanges so far apart, or just lacking DSLAMs? [05:27] you can get a T1 anywhere if you're willing to pay [05:27] but you can't get FIOS in most places [05:27] T1's a wire protocol. What does it run on? [05:27] Existing copper lines? [05:28] new copper, I'm pretty sure [05:28] it's a dedicated line [05:28] I feel sorry for the kind of people who would lay new copper in this day and age [05:29] Americans like to live far apart from each other... which makes DSL difficult. [05:29] oh, the US is far from that [05:29] copper's not going anywhere [05:29] crohakon: you'll get that in ANYTHING that uses copper as a transport. [05:30] my choices are 21k dialup, 512k satellite, charter cable, or a leased line (T1 or better) [05:30] crohakon: it's just that DSL uses only the high frequencies (to leave room for voice), so it attenuates quickly. [05:30] I have no other possible service [05:30] Maybe I should get a lease line and try to get my neighbors to use me as an ISP. =) [05:30] AT&T is too cheap to fix the phone lines [05:31] there's no way they'd lay fiber here [05:31] qman__: not so much cheap as lacking competition (and antimonopoloy laws), I suspect [05:32] *monopoly [05:32] yeah, they're the only phone provider in my specific area [05:32] same goes for charter cable [05:32] only cable provider [05:32] So, how much more bandwidth do you get with a basic T1 connection? [05:33] less download, more upload, 1.544mbps full duplex [05:33] as compared to a basic cable connection? [05:33] but, it's got a 99.999% uptime guarantee [05:33] My arse it does [05:33] as opposed to charter, which in my area is about 90% [05:34] That's like two minutes downtime per year. [05:34] that's what they advertise [05:34] advertising isn't the same as the contract [05:34] My only problem with charter in my area is that it starts to slow down after midnight (when I normally am trying to watch something on hulu or netflix [05:34] Maybe they're only giving five nines that e.g. the cable won't explode, and not that e.g. the repeaters won't shit themselves. [05:35] probably [05:35] but they will fix the problem [05:35] unlike charter, who waits around for a few hours first [05:36] So... if I wanted to host a few websites... would a T1 be any better then a 10down/1up cable connection? [05:36] company policy, they won't fix the problem unless at least five people make it to tier 3 and complain [05:36] even if they know for a fact that it's down [05:36] heh wow [05:37] Here, if you report a problem to the ISP, and it's a problem with the physical line, they wait until the end of the day to queue up all the fault requests and then send them as a batch to telstra (who own the copper itself). [05:37] And then telstra take days to get back to the ISP [05:37] charter's DNS is also totally worthless [05:37] I've had to run my own for years [05:37] is there a special way to set the static ip in ubuntu server? [05:37] 9.10 [05:38] Sorell: /etc/network/interfaces (see "man interfaces") [05:38] Sorell, /etc/network/interfaces [05:38] :/ that's what I have been doing [05:38] Sorell: purge NetworkManager [05:38] go in and change auto to static. [05:39] you don't change auto [05:39] There are copious examples in the manpage [05:39] maybe it's dynamic then [05:40] I was wondering exactly for 9.10 [05:40] I had this working in 8 [05:40] it's the same as for every previous version I'm aware of [05:40] . [05:41] huh [05:42] error upgrading, corrupted archive [05:42] wouldn't mind except that's the kernel [05:43] omg... I so desire an OC-48... [05:44] just sign here in blood [05:44] lol [05:44] :) [05:45] I don't know why, really. [05:45] Ultimately the bandwidth all goes to bittorrent, which never has anything good on it [05:45] =) [05:46] Even if you wanted to watch something by Joss Wedhon, it's probably cheaper in .au to walk to the store and buy a boxed DVD set than to rent an ADSL2+ line. [05:47] Anyone know a good co-location host? [05:48] What are your metrics for "good"? [05:48] Fast, cheap, unaccountable, ... ? [05:48] yes. [05:48] lol [05:48] fast and cheap mostly [05:49] cheap... mostly. [05:49] lol [05:49] I'm starting to regret the decision to upgrade my desktop to the RC [05:50] corrupt packages, dbus errors abound [05:51] Fortunately, you're gonna report those bugs so they're fixed for everyone else [05:53] Okay, so the real reason I have been playing around with ubuntu server is that my employer wants to host his website(s) on sight. What kind of connection speed do you need to host 3-4 websites that get anywhere between 100-200 hits a day? [05:54] depends entirely on the content [05:54] No video [05:55] a few basic pages, half a meg ought to do fine [05:55] probably 384k [05:55] mostly text and images. database heavy, though. [05:56] Yeah, I did not think it would take much. [05:56] 100-200 hits per day suggests that you wouldn't have more than a dozen people loading pages at once [05:57] correct [05:57] assuming your page downloads are small, a half meg should be able to keep up [05:58] Now, this connection would also handle are merchant services, quickbooks services, etc.. [05:58] would that have any effect? I don't see where it would. [05:59] well, if you have more than a couple users I'd suggest you throw in another 256k [05:59] nothing serious [06:00] "Could not install the upgrades [06:00] The upgrade is now aborted. Your system could be in an unusable state. A recovery will run now (dpkg --configure -a)." [06:00] bleeding edge ftw [06:03] and having the mysql server and the apache server on the same machine should not be a problem? [06:04] not for that small of a load [06:04] you can always create another mysql server and move the databases if it becomes a problem, too [06:06] true [06:07] ok, I think I got all the broken packages sorted [06:07] time to cross fingers and reboot [06:07] bbl [06:08] good luck [06:14] well, it booted up [06:14] but firefox overrode all my settings with defaults, lost my bookmarks and everything [06:14] at least it booted... [06:18] hmm [06:19] I can get my 3.0 settings back, but I was using 3.5 before [06:20] One more reason to drop firefox [06:20] And what do you suggest instead of firefox? [06:20] Well, I use a combination of emacs-w3m, w3m, html2ps, midori and opera. [06:20] But obviously that is not for everyone [06:21] I was trying to get uzbl to work, but no dice [06:21] Webkit is a featureful engine, but the downside is that it's a featureful engine [06:21] well, I only switched to 3.5 from 3.0 a few weeks agos [06:21] Just like xulrunner, it takes like 3 hours to compile on typical hardware, and wants to use gobs or resources at runtime [06:21] so not much lost [06:22] Anyone have desire for chrome to be released for linux? [06:23] Nope. [06:25] not really [06:25] I have been using firefox for so long the thought of using something else has not even crossed my mind... [06:25] I was really unhappy with firefox 3 [06:26] but 3.5 is much better [06:26] though still not ideal, it works well enough [06:27] firefox has never not met my needs. [06:28] 3 was really, really slow [06:28] I had whole second UI delays [06:28] qman__: you think that's bad? [06:28] and when flash would die, as it tended to do [06:28] qman__: try ssh -Xf fs firefox [06:28] I basically had to kill it, wait five minutes, open it up, and wait five more minutes for it to reload my tabs [06:28] openoffice is even more hilarious to run remotely [06:28] I guess I just did not notice... most likely at the time I blamed it on my internet connection. [06:28] hah [06:29] Both of them basically abuse the fuck out of pixmap objects to fake their own "themed" widgets -- even more so than GTK2 does [06:30] !language | twb [06:30] twb: Please watch your language and topic to help keep this channel family friendly. [06:31] it appears afraid.org's DNS servers are down [06:32] first time that's happened since I started using them...probably 5 years ago, now [06:32] Linguistic apartheid! [06:33] NOOOOOOOOO [06:34] what do you get from poningru.close.com? [06:34] can you ping it? [06:34] downforeveryoneorjustme.com [06:35] twb, I dont have any web sites here [06:35] just mail [06:35] can you ping poningru.close.com? [06:36] oh, looks like the domain my subdomain is on got pulled for some reason [06:36] guess I just have to wait it out [06:36] oh ok cool [06:37] nice site [06:38] man, if this domain doesn't come back, I have a lot of work to do [06:38] I have certificates to replace and everything [06:38] oh shit [06:40] might even have to trash my entire VPN setup [06:40] man that sucks [06:42] poningru: Ive just asked twb to watch the language, if you could do same that would be great :) [06:42] arr? [06:42] sucks? [06:43] oh shit? sorry [06:46] New bug: #458785 in likewise-open5 (universe) "can not unlock gnome-screensaver when password is near to expire" [Undecided,New] https://launchpad.net/bugs/458785 [06:49] just wondering if anyone's ever used gitosis + gitweb. I have it running fine on my test virtual server, however i have everything pointed to /home/git/repositories/ , where all my repos including 'gitosis-admin.git' reside. The problem is when viewing: http://virtual_server/gitweb/ , it does show my test repos but also 'gitosis-admin.git' which is fully browsable and public keys downloadable. Surely this isn't desired, any ideas? [06:50] One link said to add: [repo REPONAME] gitweb = no , tried that, restarted apache2, no dice. [07:08] good morning [07:11] good night === crohakon is now known as crohakon|zZz [07:16] * altf2o incase anyone else wonders: In /etc/gitweb.conf , setting: $project_list = "/home/git/gitosis/projects.list"; $export_ok = ""; $strict_export = "true"; , will only allow those repos listed in /projects.list to show up. In your gitosis.conf file: [repo gitosis-admin] gitweb = no , DOES then control if it's visible or not. Setting it to: gitweb = yes , will make it world viewable again. [07:49] hi [07:49] I have a chinese video capture card for which lspci returns "02:00.0 Multimedia video controller: Conexant Systems, Inc. Device 8200", what module should I load to make it work ? [07:49] Is there a module for this card ? [07:51] maxagaz: google that string [07:51] The part after the colon [07:51] twb, I did it... [07:52] twb, but I go nothing [07:52] got [07:55] Well, I got lots of hits [07:55] I didn't look to see how useful they were [08:00] twb: No results found for "Conexant Systems, Inc. Device 8200". [08:00] Results for Conexant Systems, Inc. Device 8200 (without quotes): [08:00] twb: useless [08:00] http://www.google.com/search?q="Conexant+Systems,+Inc.+Device+8200"8 [08:00] The first three hits are ubuntu ones, for me. [08:00] Your search - "Conexant Systems, Inc. Device 8200"8 - did not match any documents. [08:01] Oops, no 8 [08:01] Bad copy-and-paste job. [08:01] ooh, second link looks possibly good. video controller: Conexant Systems, Inc. Device 888 [08:01] Boohbah: are you in China? [08:01] Device 8880 [08:01] twb: nope [08:02] Maybe you're logged into google? [08:02] I don't know why else google would be filtering your search results [08:02] am i getting chinese results? i was googling for chinese pages yesterday [08:02] but i am in the US [08:02] Boohbah: Google filters its results within China [08:02] i don't think they would filter results for such things [08:03] Shrug. [08:03] anywway, i'm wondering if i can make this card work on ubuntu [08:03] how would you try to make it work ? [08:04] at least, dmesg returns no error at the boot [08:04] I would generally make it work by waiting for the revolution to put the MPAA against a wall and shoot it, since HDMI has more DRM than DVDs [08:05] twb, do you mean that there are no way to make it work easily ? [08:05] maxagaz, not likely [08:06] if it doesn't work out of the box, and google is no help, there probably isn't a driver for it [08:06] maxagaz: the whole point of DRM is to make it impossible for FOSS projects unable to use hardware that you theoretically "own". [08:06] did you try to see if it works? [08:06] qman__: good question! [08:07] qman__, no, I didn't [08:08] my tuner is pretty much dead, but I used to use tvtime with it [08:54] hi [08:54] is there a way to know in MySQL DB Server which query consumes more time ? [08:59] <_ruben> there's a slow query log config option [10:17] New bug: #292800 in vm-builder (universe) "run.sh shellscript doesn't accept parameters with whitespaces" [Medium,Fix released] https://launchpad.net/bugs/292800 [10:17] New bug: #298109 in vm-builder (universe) "ubuntu-vm-builder is undocumented (no manpage, readme, etc)" [Low,Fix released] https://launchpad.net/bugs/298109 === josh__ is now known as QQ_ghost [10:33] New bug: #458904 in eucalyptus (main) "Adding nodes in several waves after launching VMs is not possible" [Undecided,New] https://launchpad.net/bugs/458904 [11:30] pwd [11:48] how can can i check the number of kB uploaded and downloaded on a machine ? Is there a command to check the activity of my NIC ? [11:49] maxagaz: ifconfig [11:50] soren, ifconfig ? how to check it with ifconfig ? [11:50] soren, i'd need a tool like htop [11:50] maxagaz: By looking at it? [11:50] maxagaz: It's right there in the standard ifconfig output. [11:51] RX bytes:3908829145 (3.9 GB) TX bytes:69635931 (69.6 MB) [11:53] what RX and TX stand for ? [11:54] One is receive, the other transmit. [11:54] and X ? [11:55] Nothing, really. [11:55] It's frm the old telegraph days. [11:56] They abbreviated transmit-out as TX, and receive-in as RX. [11:56] It's /very/ commonly used. [11:58] interesting [11:58] soren, ifconfig isn't very convenient to monitor the nic activity [11:59] You never said anything about monitoring it. [11:59] If you want to keep track of it, look at munin. [12:20] soren, yes munin... [12:20] soren, I just tried ntop, it looks good [12:22] maxagaz: Well, if that's what you need, just stick with that. [12:26] what i'm wondering now is, can i monitor the data flow coming the NIC of a machine and leaving the server from once of its NICs ? [12:30] What do you mean? [12:36] New bug: #458987 in php5 (main) "Segmentation fault when running Wordpress Multiuser" [Undecided,New] https://launchpad.net/bugs/458987 [12:46] I have a problem with a fresh installation of Karmic RC1. (On same server, nog problem with Jaunty): [12:46] Sometimes, the server boots fine, but most of the time the boot process halts when it can not mount the nfs /home because the network isn't there yet. [12:46] That's not a big problem, but the network service doesn't even try to connect after that. Is this a known problem? Shouldn't it retry connecting? [12:52] I like the fact that you try to boot ubuntu faster, but actually, I don't find it very important on a server. Starting services one by one is ok with me. even waiting 5 minutes until the network comes online. But this is a showstopper. [13:01] ok, another question: is there (experimental) boot logging yet? [13:06] alvin: what error messages do you see? [13:44] hello [13:44] how many years of update packages has the ubuntu server? [13:45] (my english sucks) [13:54] 8.04: 5 years. 8.10, 9.04, and 9.10: 1½ years. 10.04: 5 years. [13:54] kRocKodile: ^ === aubre_afk is now known as aubre [13:58] when I try to attach a volume to an instance using SC I get bad input params to vnetAttachTunnels() followed by failed to attach tunnels for vlan 10 during maintainNetworkState() followed by network state maintainance failed - what am I doing wrong? [13:58] that's in the cc.log btw [13:59] reinstalling didn't fix my problem [13:59] euca-attach-volume -i i-4F8E099C -d sdb vol-329904A4 VOLUME vol-329904A4 [14:02] I can get everything else to work, and I am anxious to show the system to the director, but this is a show-stopper for me [14:19] I'm going to reinstall Jaunty, because the network service starts before idmap/nfs. Is there anyone who will stop me and tell I can use Karmic, but have to change the configuration a little? [14:20] alvin: If there's problems with NFS in Karmic, we need to fix them. Can you please file a bug, so we can look at it? [14:21] Are services meant to be started and stopped by calling init.d scripts directly or is there a utility that's intended to be used instead? [14:21] soren: I don't know if NFS is the problem. If I don't mount any drives, the network service will not always start either. The NFS just halts the whole boot process if there is no network available at that time. Sometimes (rare), the server does boot. [14:23] soren: Can I perform some tests? Any suggestions? [14:25] Hmm, now the console says: 'Gave up waiting for root device'. That happens from time to time too, but only in Karmic. [14:25] The question is: is bringing up the network and the rootdelay related? [14:27] soren: I'd like to file a bug, but I don't know against what. Sometimes, root is not found, and sometimes the NFS server (shared home) is not found because the network isn't there. [14:37] alvin: take nfs out of the picture - use a regular home and test === dendro-afk is now known as dendrobates [14:37] after a lot of 'giving up waiting for root device' and reboots: If the NFS server is not found, you can escape to a rescue shell. If you wait a bit, the network will come up and the server can be seen. Then you can mount by hand and continue the boot process. If you just continue, mountall stops responding and nothing can be done. [14:38] I will try with a regular home. (please stand by) [14:39] done, rebooting. Another thing: when booting, mountall says that the swap is busy every time the home can not be mounted. Swap is just a local volume. [14:55] alvin: File it against mountall. It may not be correct, but it's better to have it filed and then we can move it afterwards. [15:07] apt-get seems to be struck. I ctl+c'd it and now I can't run it. How can I get it back? [15:15] heath|work: use the ps command to ensure it's no longer running [15:15] heath|work: kill it if it is [15:15] pmatulis: thanks I got it [15:22] soren: I will. It's certainly network related. If I omit all NFS mounts and just boots and I can log in. I can then start a ping to the fileserver. First, there is no network, then the ping is unanswered, and after a while, the ping will start responding. So, it's really the network. (side note: it is a static network) [15:26] Hmm, my problem looks related to bug 431248, but that is reported to be fixed and I have all latest updates. [15:26] Launchpad bug 431248 in portmap "NFS not mounted" [High,Fix released] https://launchpad.net/bugs/431248 [15:31] smoser: hello. is the current karmic aki/ari to use on ec2 published somewhere? [15:37] New bug: #459101 in eucalyptus (main) "Relay denied from eucalyptus registration emails - source address is wrong." [Undecided,New] https://launchpad.net/bugs/459101 [15:43] nijaba: he is away today [15:44] hey zul [15:44] hi nijaba [15:44] zul: would you have any clue where I could find that? [15:44] yeah i think giime a sec [15:46] ok, reported as bug 459134. Thanks for the help. Work on this will continue on monday. I have permission to test this a little while further before going back to Jaunty for production use. [15:46] Launchpad bug 459134 in mountall "karmic: networking is started too late in the boot process" [Undecided,New] https://launchpad.net/bugs/459134 [15:47] zul:duh I look in this exact directory, did not think of looking at this file [15:49] nijaba: heh [15:57] I figured out my SC problem, my SC had registered itself (during the automatic UEC install) to use my public IP and interface, when I switched to a private IP and private interface, and subsequently created a new volume, everything works. Then the question becomes why did the UEC disk install register itself with my public interface instead of my private interface? [15:57] could it be because it doesn't know about the private interface until the end? I changed my SC config in the web interface btw [16:04] ttx: ping [16:04] zul: pong [16:05] ttx: do you want me to upload the fix for 458576 if its not done already? [16:05] bug 458576 [16:05] Launchpad bug 458576 in ec2-init "ec2: ssh public key fingerprint in console output does not match EC2 standards" [Low,In progress] https://launchpad.net/bugs/458576 [16:06] zul: we have another required fix in that area [16:06] ttx: k [16:06] that may or may not also be in ec2-init [16:06] I'd better make a single change with both... [16:07] ttx: agreed [16:08] ttx: let me know when you need my expert services [16:24] Hello, anyone is aware of some problems with pam_mkhomedir.so (LDAP) script shipped in Karmik? Here it fails the UID of the user while creating the /home/dir (on NFS) at the first login (it goes to NOBODY). [16:38] eaman: pam_mkhomedir runs as root when creating the dir. On NFS, root on the client gets translated to nobody on the server by default [16:38] eaman: unless you have no_root_squash turned on [16:38] eaman: which is not generally a good idea [16:38] eaman: so, you shouldn't be using pam_mkhomedir with nfs mounted home directories. The home directories should be created on the server, not on the client [16:39] ttx: since I figured out what was causing my problem in bug https://bugs.launchpad.net/eucalyptus/+bug/452185 , but it could present problems for people who set it up in the future, should I close that bug and open a new one about the interface binding issue? [16:39] Launchpad bug 452185 in eucalyptus "can't access SC volumes in a UEC instance" [Low,Incomplete] [16:40] ttx: because while my system is working now I guarantee someone in the future will have the same thing happen to them [16:41] aubre: just a sec [16:43] I'm trying to use checkinstall to install git but the git docs need to be installed also. In the INSTALL file it states to use make prefix=/usr/local install install-doc. How do I tell checkinstall to do that? [16:44] aubre: the fact that you might need to adjust registration of components in the case of multiple NICs on your cluster controller is, I think, a known issue [16:45] aubre: but yes, feel free to invalidate the current bug and create another one [16:45] at the very minimum it will be a documentation wishlist [16:45] aubre: ok. That's what I will make it [16:45] ttx: ok that's what I will make it [16:45] aubre: did you see the latest doc ? [16:46] https://help.ubuntu.com/community/UEC [16:46] feel free to fix it based on your experience [16:50] ttx, mathiaz, kirkland: the text of the eucalyptus/publicips debconf template is wrong; you cannot specify range in the form 192.168.1.1-192.168.1.20 for the value of VNET_PUBLICIPS [16:51] either that, or there has to be some logic in the postinst to expand that range into a list [16:51] or even, Eucalyptus should take it but don't [16:51] I am not sure [16:51] gotta report the bug, I guess it is a pretty important one [16:51] as it result in a non-working Eucalyptus setup [16:56] ahasenac: Thanks, this make sense. [16:57] ahasenack: And of course I'm not willing to use root squash on the nfs server === mrchrisadams_ is now known as mrchrisadams [16:58] *no* root squash, you probably mean ;) [16:58] yes sorry [16:59] So now the problems is: finding a nice way to create the user on the server, as the user creation is trigged by a PHP script running on Apache [16:59] ttx: ok [17:00] seems like you need to do one more thing in that trigger [17:00] It comes to my mind making Apache (www-data) take some sudo priviledge in order to cast a mkdir and a chown on the new dir [17:01] and copy /etc/skel/ [17:01] Well I could use a skell population as well I guess [17:01] Yes :) [17:01] sounds reasonable, if done carefully [17:02] Well it could be the only way [17:07] soren: ping [17:07] ttx: thanks for testing the appliance, looks like we have some work to do [17:07] hi [17:07] mdz: yes... [17:07] can i change catalina.out to catalina.log or something else. if its possible then how is it done ? [17:08] I am talking about tomcat Application server [17:09] Weird things is that pam_mkhomedir.so is able to cast the right GID: it goes to 2000 here. [17:10] mdz: the other remaining issue is the UEC image / ephemeral disk automount one [17:10] And UID goes to NOBODY, which makes sense [17:10] ttx: right [17:10] ttx: smoser is on that, yes? [17:10] mdz: yes, though he wasn't working today [17:11] ah, right, he's off [17:11] mdz: I still think he is in the best position to find the right way to fix it in the less-intrusive manner [17:11] that would increase our chances of having it pass release management [17:16] bug #459204 [17:16] Launchpad bug 459204 in eucalyptus "The text debconf template eucalyptus/publicips is wrong" [High,New] https://launchpad.net/bugs/459204 [17:16] ttx, if you have a minute, you should look at the above [17:17] I don't have a minute, but I can have a look [17:17] ttx, sorry, man! [17:17] EtienneG: yes you can ! [17:17] EtienneG: what makes you think you can't ? [17:18] ttx, huh? I am afraid you lost me here. [17:18] EtienneG: specify 192.168.1.1-192.168.1.20 [17:18] ttx, you can, it just won't work [17:18] ttx, easy enough to test without reinstalling [17:19] hmm? works here, as far as euca-describe-addresses goes [17:19] (or whatever the exact command is called) [17:19] ttx, change VNET_PUBLICIPS to 92.168.1.1-192.168.1.20", restart eucalyptus [17:19] ttx, ah, ok, then it has to be something else [17:20] EtienneG: wht evidence do you have its *not* working ? [17:20] doesn't show the addresses in euca-describe-addresses ? [17:20] ttx, evidence? the output of euca-run-instances, perhaps? :) [17:21] EtienneG: you mean its not affecting any of the addresses you configured ? [17:21] ttx, and yes, the addresses do not show in the the output of euca-describe-addresses either [17:21] hmmm... works here [17:21] (last time I looked) [17:21] ttx, which Euca version? [17:21] and which VNET_MODE? [17:22] ttx, fsck it, mark it Invalid [17:22] my bad [17:23] VNET_PUBLICIPS did not correspond to a range actually in use by the machine [17:23] ttx, that was a user error [17:23] ttx, sorry for wasting a few minutes of yours you did not had! [17:23] :P [17:28] checking in again for my query ? [17:29] hi can i further optimize ubuntu..? for network- have anyone tried it..? [17:34] New bug: #459194 in eucalyptus "SC must be re-registered to the private NIC/IP after installation " [Undecided,New] https://launchpad.net/bugs/459194 [17:37] anyone..? [17:37] have tried it..? [17:41] ttx: how's this ? https://help.ubuntu.com/community/UEC/StorageController [17:45] ttx: I need to make the command line stuff brown [17:55] ruben23: what kinda of optimization are you looking for? [18:02] hi people [18:02] I seem to have isntalled some package which has broken my samba server... [18:02] and the samba server won't start by running /etc/init.d/samba start [18:02] (nothing happens) [18:03] can anyone help me troubleshoot? [18:23] SyL:network and the system itself [18:30] mathiaz: ping any reason why autofs would conflict with itself? [18:31] zul: with itself or an *earlier* version of itself? [18:31] with itself [18:33] zul: hm - that's a good question - I don'tknow [18:33] debian unstable still has it as well [18:33] zul: I'd ask in #ubuntu-devel about it [18:35] New bug: #459204 in eucalyptus (main) "The text debconf template eucalyptus/publicips is wrong" [High,Invalid] https://launchpad.net/bugs/459204 [18:53] is there a difference between "apt-get dist-upgrade" and "apt-get upgrade"? [18:53] !dist-upgrade | ninjah [18:53] ninjah: A dist-upgrade will install new dependencies for packages already installed and may remove packages if they are no longer needed. [18:54] soren: if you are around I'd love to have your point of view on the following. I've been trying to upload your mediawiki image to ec2 using http://pastebin.ubuntu.com/299939/ but ec2-register send me the error you'll see there as well.... any idea? [19:11] soren: nm, sorted [19:44] Hello! I installed 9.04 64-bit on an machine with an onboard 1GB/s intel network interface, and a broadcom 1GB/s pci express card. I bonded these two interfaces in /etc/network/interfaces, created VLANs on top of that and it all works peachy. But when I reboot, the interfaces don't come up saying "VLANs not supported on bond0". [19:44] When the machines it booted, and I restart networking, it all works fine again. I pasted my config here: http://www.pastie.org/667009 . I also added 8021q and bonding to /etc/modules. Is there anything else I'm missing? [19:48] New bug: #423289 in autofs (main) "autofs deletes directories but does not re-create them" [Low,Incomplete] https://launchpad.net/bugs/423289 [19:50] stephank, sounds like a bug having to do with boot order to me, you could probably work around it by adding something to /etc/rc.local as a temporary measure [19:54] qman__: hehe, neat. I'll add a networking restart there. Let's see if this works [20:00] smoser, re: uec official image, the bug about waiting for /dev/sdb, is that just a matter of fixing /etc/fstab? [20:09] qman__: trick seems to fool it. Thanks :) [20:13] nijaba: Oh, good, because I had /no/ clue :) [20:13] mdz: Yes? [20:20] soren: yeah, your mediawiki img is now instanciated in ec2 :P [20:20] nijaba: Working? [20:20] soren: quite well [20:20] nijaba: Are you subscribed to ubuntu-devel? [20:21] nijaba: ttx reported a failure, but I suspect he may have unintentionally have used an earlier version of the image. [20:21] soren: I am, but not reading assiduously [20:21] soren: I'll reply [20:21] nijaba: I'm about to follow up there, mentioning the new version. Once I've done that, can you please post your results? [20:21] soren: sure [20:23] I even have it managed with Landscape :) [20:27] New bug: #369682 in autofs (main) "AutoFS direct maps not working with NFSv4 exports" [Low,Incomplete] https://launchpad.net/bugs/369682 [20:43] is there a way to turn off ipv6 in ubuntu? [20:43] !ipv6 [20:43] For an introduction to IPv6 and information on tunneling IPv6 through IPv4 connections, see https://wiki.ubuntu.com/IPv6 | To disable IPv6 see https://help.ubuntu.com/community/WebBrowsingSlowIPv6IPv4 [20:44] SyL: Second link from the bot [20:45] thanks [20:50] * nijaba calls it an evening [20:50] anyone know if the iscsi install works in 9.10-rc ? [20:57] Zodling: I know there is at least one significant bug about that. I don't know if it affects all iscsi or just some. [20:57] My ubuntu wont start so many error's, i went to a live cd and i cant copy some files because they are under root! How can i copy root files? [20:58] BrixSat: sudo cp [20:58] even on a live cd? [20:58] i managed to get it to install but.. it dont look to be booting right .. *i have rdp runing if anyone wants to look* [21:02] BrixSat: I think so. [21:04] worked :) thanks [21:22] New bug: #458702 in vm-builder (universe) "vmbuilder crashed with VMBuilderException in run_cmd()" [Undecided,Incomplete] https://launchpad.net/bugs/458702 === AdamDV is now known as Adam|Away === Adam|Away is now known as AdamDV|Away [21:44] Does anyone have a how-to for OpenLDAP with TLS/SSL support that actually works? [21:48] DNS ?: is it OK to have two A records that with the same IP? When I google this it says it's not recommended but nothing about why [21:51] bventura: Two different domains? [21:52] jpds: no same domain [21:52] That seems a bit redundant. [21:52] bventura: yes, perfectly fine [21:53] ok cool maswan [21:53] the PTR record should probably only be to one of these though [21:53] right [21:53] bventura: of there are CNAME records too, but don't use one for your mail server [21:53] *of course [21:54] But "kermit A 10.0.01" + "mail A 10.0.0.1" + "smtp A 10.0.0.1" + [in the reverse zone file] "1 PTR kermit" is perfectly fine [21:55] In fact, there is sufficient weird corner cases for CNAMEs that I wouldn't really recommend them for most places [21:55] right guntbert, that's what got me here, I can't use CNAME to map my mail server [21:55] Since an IP can have lots and lots of A records. [21:55] ok [21:56] bventura: but as maswan already pointed out: use two differnt A records [21:56] i just wasn't sure when I google it, 2nd result says "When the domain name system was designed it was recommended that no two A records refer to the same IP address." [21:57] the second paragraph of that is probably "but these days, ..." [21:59] bventura: that must have been before mail admins decided not to accept CNAMEs any more === MTeck-ricer is now known as MTecknology [22:23] Lo all. does anyone have experience in taking exams for a linux course? [22:38] OK i think I've put all this DNS stuff together , would anyone be kind enough to critique my config, it is here: http://ubuntu.pastebin.com/m1d75d683 [22:43] bventura: r u from Ventura? [22:43] I live in a town named ventura [22:43] cool in CA? [22:43] yeah [22:43] I used to live down there but ithat's actually my last name [22:43] i gre up in newbury park [22:43] oh [22:43] oh, right next door [22:43] cool [22:44] small world on the internets :-) [22:44] ah i miss that southern california weather tho, i'm in sonoma now [22:44] :D [22:44] well, good wine and near San Fran at least (2 good things in my book) [22:44] oh yeah [22:45] that other recreational substance is readily available too hehee [22:45] ha [22:45] btw, whats your dns config for, just an example? [22:46] at this point yes, I'm just trrying to figure out how it's supposed to work but eventually I have to replace my company's primary DNS and mail server [22:47] we have an anicent xserve running OS X server and I hate it.. I want ubuntu [22:47] ah [22:47] yeah, i have been considering getting an automated dns setup for my ec2 deployments [22:47] but i hate dealing with bind, soo... havnt done it [22:48] yeah it's a bit challenging [22:48] bventura: just a reminder: use a LTS for that purpose [22:48] guntbert - I have been wondering what you just mentioned can you tell me why? [22:48] not trying to argue I just dont think I get it [22:49] LTS = more secure? [22:49] No, LTS = having to upgrade less often. [22:50] Actually we've introduced a number of hardening features after Hardy, so the newer releases are 'more' secure. [22:50] LTS = Long Term Support .. so you get upgrades for longer [22:50] bventura: In my experience such servers will be put into service and the "forgotten" - so .. ^^^ [22:50] *then [22:50] i'm not sure what you mean by 'get' i thought they all were free? [22:51] 'get upgrades' * [22:51] !eol | bventura [22:51] bventura: End-Of-Life is the time when security updates for an Ubuntu release stop. See https://wiki.ubuntu.com/Releases [22:51] eureka! OK I gotcha now I get it [22:52] so 8.04 LTS is the way to go i suppose [22:53] if you want to run BIND for serious purposes, buying a book about BIND might be useful... [22:53] or, perhaps run tinydns [22:53] or at least read all the docs [22:53] I have been chewing thru the docs on isc.org [22:53] stimble: still, reading about how DNS works is very useful ツ [22:53] or if you dont need all the bind power, i have found dnsmasq to fill most of my LAN needs [22:54] yes, true [22:54] i just wanted to get a 2nd pair of eyes on what I have so far === ogra_ is now known as ogra [22:54] i'm in a 1-man IT department over here ;p [22:55] I have a fresh 6 nodes UEC cloud/cluster and am getting internal IPs of 0.0.0.2. Anyone have hints to troubleshoot this? [22:55] for a LAN, dnsmasq is absolutely great (it just does what you need without all the complicated stuff) [22:57] stimble: internal IPs? do you refer to NC private IPs or instances IPs? [22:57] JanC: yeah, thats what I have found. And it even does tftp and dns and dhcp together, which makes for a pretty nice integration, as in nice to have dhcp update your dns etc [22:57] instance ip [22:57] im using managed mode [22:57] yep, I used it for that (and so do many "home routers") [22:57] stimble: MANAGED-NOVLAN? [22:57] no [22:57] MANAGED [22:58] stimble: is your network VLAN aware? [22:58] yes [22:59] i guess i can switch to novlan and try it again [22:59] stimble: not necessarly [22:59] stimble: just making sure of your configuration [22:59] but i checked it for vlan support a while back and was pretty certain it came up positive [22:59] stimble: what does euca-describe-addresses say? [22:59] i have VNET_SUBNET="192.168.6.0" [23:00] it lists the public_ips i have in my eucalyptus.conf [23:00] 192.168.2.100 - 110 [23:00] 192.168.2.100 is assigned to the one running instance [23:00] stimble: is there another dhcp server running on the network? [23:00] but i cnat ping it [23:01] yes [23:01] right - is the dhcp server on the same vlan as the NC? [23:01] well, it is plugged into the same switch [23:02] but, i would think it should not be on the same vlan [23:02] its a pfsense box [23:02] stimble: have you checked that you have multiple VLANs and set the switch correclty? [23:02] its an unmanaged switch [23:03] stimble: if the dhcp server is on the same vlan as the UEC nodes, then there is a chance that the instances got their IP from the external dhcp server rather than the UEC dhcp server [23:03] yeah, but then it should have been in the 192.168.2.0/24 network [23:03] its 0.0.0.2, which just seems bonkers [23:04] stimble: how did you notice that the instances had 0.0.0.2? [23:04] euca-describe-instances [23:06] stimble: could you pastebin the output of the command? [23:06] doing that now [23:06] stimble: command == euca-describe-instances [23:07] mathiaz: http://pastie.org/667272 [23:07] im working from 2 machines (hence the 2 irc handles) [23:07] hello [23:08] command output is at the bottom [23:08] hello Burebista [23:08] i try to install a kvm server. the host server are done, but how can i install a virt machine/ [23:09] -topic [23:09] stimble: could you paste the output of: grep ^VNET /etc/eucalyptus/eucalyptus.conf [23:10] updated pastie [23:10] http://pastie.org/667272 [23:12] stimble_: hm - well - I don't know - sorry [23:12] just updated again with the full uncommented eucalyptus.conf [23:35] when UEC installs a eucalyptus node, it never asks to create a username, password. Anybody know how to still log into a sudo capable account on a node controller?