=== dendro-afk is now known as dendrobates [00:06] What would cause apache to suddenly spike in memory usage and then crash the server? [00:07] it goes from < 100MB of total system memory usage to > 300MB, chews up swap, then bombs [00:07] wordpress-based sites, only one of them seems to cause the problem. [00:10] i installed vsftpd, Public accessible ftp site is located what directory..? === freeflyi1g is now known as freeflying [00:34] ruben23, I'm not sure where the default location is, though it's probably specified in the config [00:35] 218 only here. Wow. [00:35] my guess would be somewhare in /var [00:35] So, can someone please pastebin me an ldd output of ldapsearch ? [00:36] I would but I don't have an ldap server [00:37] qman__: one doesn't need an ldapserver, to have/need/use ldap-utils [00:37] well, I don't have/need/use ldap-utils either [00:38] I was much hoping someone here does/is/blah. [00:38] Alternatively, I could take a look at the package dependencies in the repos. [00:39] there are probably plenty who do, but this is generally a pretty slow channel [00:39] might take a while to get a response [00:39] Shit. [00:40] libgnutls26 (>= 2.7.14-0) [00:40] I was hoping it Ubuntu was not on the same GNU/Fascism wave as Debian. [00:41] This is the 4th package in a week I'm rebuilding because the gnutls bindings don't have the capabilities I need. [00:41] I don't really understand what's wrong with using openssl, but if it means an alternative gets good, then I'm fine with it [00:41] ah [00:41] I think the only time it would affect me is with my openvpn server [00:42] that's on hardy though [00:42] I mean, of course it's documented: ldap.conf(5) TLS_CACERTDIR Specifies the path of a directory that contains Certificate Authority certificates in separate individual files. The TLS_CACERT is always used before TLS_CACERTDIR. This parameter is ignored with GNUtls. [00:43] hopefully the issues are worked out for lucid [00:43] I'd hate to upgrade to the next LTS and have my VPN break [00:44] anybody knows what apps utilize ubuntu cloud feature? [00:44] qman__: sure, are you going to help bring all GPL/BSD/APL license wars to peace? [00:44] Jad_: lsof -i ;) [00:45] heh, I don't know what the big deal is between them [00:45] sure they're different, and choosing your favorite is one thing [00:46] but I don't see why using software from the different ones is a problem [00:46] it's all free, it's all open, it's all good software [00:46] I don't give TWO FUCKS ABOUT THE LICENSE. I just like good software. And I like good code. And I like both together best. [00:46] you mean i type lsof -i in ubuntu to get the apps? i haven't installed it yet [00:47] Jad_: apt-cache show lsof , google://lsof [00:48] It was a geek ``joke'', you didn't get it. Now read up. [00:48] that would only tell you what programs are using files over the internet [00:48] cloud computing seems to be the latest trendy buzz word [00:49] we used to call it clustering [00:49] and you didn't bother unless you had an application in mind that you specifically wanted to cluster [00:50] qman__: cloud is more than clustering. It's third party, virtualization, with optional ($$$$) clustering. The third party part is important. You give it to the ``cloud'' -- to someone else to take care of it, to someone else to blame (for $$$$). [00:50] sort of how virtualization became a trendy buzz word a couple years ago [00:51] oh yes, I understand how it's different [00:51] just saying, it's really not all that different [00:51] clustering made easy [00:51] yes i appreciate the joke but i wasn't kidding. especially since i'm practially new to ubuntu [00:51] Jad_: and I don't even use it! [00:52] you don't use ubuntu? [00:52] whats this crap heh [00:52] lets stay serious [00:54] Jad_, cloud computing is basically just combining a bunch of servers into one giant computing resource, where you create virtual machines or applications to run on that resource [00:54] Jad_: I came here to ask some info about a package. Stayed for the good coffee. [00:54] :) [00:54] so, instead of saying "what can I do on a cloud", you should be saying "what do I need to do" [00:55] And then think about how to do it cheaper and more realiable. [00:55] and once you figure that out, determine if it's economical or beneficial to do it on a cloud [00:55] And a cloud is just one of the options. [00:56] yea i understand i was just thinking it might be like windows azure [00:56] qman__: not quite. Right now the hosting I'm doing is a lot cheaper with a couple of leased root servers (all running a couple of Xen DomUs) than doing it with Amazon (as an example). [00:56] but it seems more like vmware vsphere [00:56] Jad_: Windows Azure is not so much a cloud, as it is a pipe (smoke) dream. [00:57] I don't know anything about windows azure [00:57] or vmware vsphere, for that matter [00:58] i understand what clouding is, the thing is its different among different vendors. in windows azure it lets a developer distribute bunch of processes/resources on different servers [00:58] but azure is only hosted by MS [00:59] I run all my stuff on actual hardware [00:59] nothing against virtualization, it just doesn't benefit me [00:59] midori seems to be like a cloud but actually a grid compututing system perhaps [00:59] yea qman its better to have it local [00:59] Jad_, the ubuntu cloud computing is the same type of system as amazon ec2 [01:00] or at least it can be configured that way [01:00] \o/ [01:00] you can move machines to and from amazon and your ubuntu cloud [01:01] Success. Recompiling ldap stuff, and suddenly I can actually verify my connection to all my servers. [01:01] so you mean the OS can be run on several hardwares at once? [01:01] maybe different processes run on different cases [01:01] like grid computing [01:01] well, that's how a cloud works [01:02] it shares the load among all the hardware in the cloud [01:02] http://queue.acm.org/detail.cfm?id=1017001 some more infos... [01:02] in one giant environment [01:02] how do i check my free remaining space on ubuntu-server [01:02] ruben23, hard drive space, df [01:02] I usually do df -Thx tmpfs [01:03] ok thanks, yea thats what i was thinking. vmware cloud OS uses another definition for the cloud thats why several vendors use different meanings. [01:04] good thing that ubuntu you can have unlike azure [01:04] qman__: teh un partion part of my HDD [01:04] qman__: the unpartion part of my HDD [01:04] fdisk? [01:05] cfdisk for more comfort. [01:05] vmware's cloud is more like a bunch of vm's btw [01:16] hi i did lvextend on my existing logical on a volume group, after that i check df -h nothing happend to my /var/ [01:16] *low level software that handles bunch of vms, more than 200 OSes [01:18] ruben23: what filesystem are you using? [01:18] ruben23: you've expanded the volume, but you have to let the filesystem know of the change [01:19] netrat: how to do that..? [01:19] is there a 32bit ubuntu server btw? [01:19] the logical/volume group is monuted on /var/ [01:19] do i have to unmount it first..? [01:20] ruben23: is it an ext3 filesystem? [01:20] Jad_: yes there is a 32bit server [01:20] netrat: how do i check..? [01:21] ruben23: run the mount command [01:21] oh nevermind, found it, thanks [01:22] ruben23: give me the mount information for /var, for example /dev/mapper/vg0-root on / type ext3 [01:22] /dev/mapper/VolGroup00-LogVol01 [01:22] 1.9G 1.5G 313M 83% /var [01:23] ruben23: do you see a filesystem type? ext3, xfs, etc... [01:23] netrat: no i cant see it [01:24] ruben23: type the following command, mount [01:25] ruben23: then you should see the filesystem type [01:25] /dev/mapper/VolGroup00-LogVol01 on /var type ext3 (rw) [01:25] oh these shell stuff seem complicated. hope there's easy UI for these stuff [01:26] ruben23: okay that's good, ext3 supports online resizing. run the following command, resize2fs /dev/mapper/VolGroup00-LogVol01 [01:26] netrat: but /var/ is already mounted [01:27] ruben23: ext3 supports online resizing, meaning you can resize it while it's mounted [01:28] do you have to learn these commands to use ubuntu server? i remember the linux book was pretty big :) . maybe though ubuntu is easier [01:28] netrat: how about this scenario, ill be having a directory /var/ftp---> can i resize my ftp directory only... [01:28] ruben23: is the filesystem mounted on /var or /var/ftp? [01:29] ruben23: if the filesystem is mount /var then you'll have to make a new lv and ext3 filesystem then transfer everything over and mount it on /var/ftp [01:30] ok ill do the second options you give [01:30] ftp is not yet made, im just going to create the ftp directory [01:31] maybe just use alcohol120% for mounting on ubuntu? or not possible? [01:31] ruben23: have you already resized the /var logical volume? if so you have wasted space and eventually you'll have to resize the filesystem [01:31] like mount CDs? [01:31] Jad_: what are you talking about using alcohol120$? isn't that a windows program? ;-) [01:31] netrat: can i revert it back..? [01:32] qman__: didn't read the whole backscroll, and while I of course agree that clouds are a security risk, we have mitigated that quite a bit when using libvirt in karmic. it will launch machines with their own individual profiles so they are isolated from each other as well as protecting the host from user space attacks. hypervisor/kernel level exploits are of course not protected [01:32] maybe it has a linux vers too [01:32] havn't checked [01:32] ruben23: that shouldn't be a problem [01:32] or emulating :) [01:33] Jad_: we are talking about mounting and resizing filesystem/logical volumes. alcohol120 is used to mount CD images [01:33] netrat: im just focus on resizing ftp directory cause ill be copying large file on that directory [01:34] qman__: I should rephrase... 'clouds *can be* a security risk [01:34] netrat: how would we do the revertion..? [01:34] ' [01:34] oh mounting filesystems. havn't used that ina long time :) [01:34] i guess i should check back my old linux book :) [01:35] ruben23: use lvextend and lvreduce to resize LVs [01:36] qman__: it all depends on what you are doing, who has access (just like with a real cluster of machines). obviously hypervisor bugs and kernel exploits are an attractive target, and you get more bang for your buck with one hypervisor bug as opposed to compromising a single machine [01:36] lvextend -L+5G or lvreduce-L-5G [01:36] qman__: but the point remains-- many of these issues are mitigated in 9.10 through the apparmor security driver in libvirt [01:36] s/these/the/ [01:39] Jad_: are you in libya? [01:39] no, why :) [01:40] its close though [01:40] beirut [01:40] oh Lebanon [01:41] was using redhat back in 2002. ubuntu seems the most popular these days. perhaps will switch my hosting to a ubuntu server [01:42] the only command i remember is ln sym? symbolic link hehe [01:42] Jad_: yes i used redhat too.. CentOS is basically the community version of redhat, but i prefer ubuntu [01:42] ok [01:44] will have to keep a win hosting for aspx and mssql thou [02:25] I just did a fresh install of ubuntu-9.10-server-i386 on a test system. I went to edit the /boot/grub/menu.lst file to add a boot option and the file wasn't there. Did the latest version of ubuntu-server switch to a different boot loader that grub2? [02:29] 9.10 uses grub 2 on new installs [02:30] all previous versions used grub 1 [02:31] qman: That's what I thought and read on the ubuntu site, but shouldn't there be a menu.lst file then? [02:52] hi nayone can help i have installed pxe server it work, problem only is the process how it copies the file on my os distro, im doing it by ftp but it didnt work, NFS and http are option but how to do it.. [03:04] ruben23: See if the info about using Kickstart at https://help.ubuntu.com/community/PXEInstallServer helps you? === vitaliy_ is now known as vitaliy [03:33] w/ apticron running when should i expect the upgrade available email? [03:35] my apticron runs at 12:44 daily and its 23:55 .. have not received an alert [03:36] /etc/motd is not saying anything either .. it runs every 10 mins [03:38] /etc/update-manager/release-upgrades shows Prompt=normal [03:55] Isn't apticron obsoleted by /etc/cron.daily/apt ? [04:35] New bug: #464172 in mysql-dfsg-5.1 (main) "update script break on run (mysqld not stopping)" [Undecided,New] https://launchpad.net/bugs/464172 [04:56] hi any help setting pxe server [05:03] ruben23: install dnsmasq [05:11] twb: ihave dhcpd already installed [05:11] dhcpd is not a TFTP server. dnsmasq is. [05:12] But if you want to use tftpd-hpa instead, go ahead. [05:13] twb actually i can boot to my pxe server and start the initial install of the OS, problem is during the copying of ciles it cant locate, what id copy the image file [05:13] ive tried [05:13] ftp [05:13] and httpd [05:14] same thing [05:14] it ask for cdrom [05:14] during the installation [05:14] ruben23: that's because you're booting the wrong initrd [05:15] ruben23: which release are you trying to bootstrap, 8.04? [05:15] yes [05:15] One moment [05:16] im doing the initrd.gz [05:17] http://mirror.internode.on.net/pub/ubuntu/ubuntu/dists/hardy/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/linux [05:17] http://mirror.internode.on.net/pub/ubuntu/ubuntu/dists/hardy/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/initrd.gz [05:17] You want to use those two, not the hd-media or cdrom images. [05:21] twb: this will i used to the config [05:21] how about the process of my image [05:21] how it will copy [05:22] twb: thanks for this [05:23] ruben23: eh? [05:23] I don't understand the question [05:23] Incidentally, I seem to recall a recent package that will help set up a netboot install server... [05:23] twb: i mean i used that file on my pxe config.. [05:23] can a thin client with no hdd boot ubuntu over ethernet from a server? [05:24] then may image ubuntu, how do i copy it to be used by pxe. [05:24] StrangeCharm: yes. [05:24] StrangeCharm: I sell systems that do this for an entire network [05:24] ruben23: I still don't understand. [05:24] twb: huhuhu [05:25] is there an app in the default repo for the server end of this? [05:25] StrangeCharm, you can set it up using the alternate install disc [05:25] it's an automagic type option [05:26] or you can do it manually [05:26] StrangeCharm: ltsp5 [05:26] qman__, the server already does other things. i'm not reainstalling the OS. [05:27] trouble with doing it manually is there's quite a bit to set up [05:27] twb what i do next [05:27] unless they've improved it since I last did it [05:28] netboot-assistant, that's the package [05:28] It basically does everything for you, IIRC [05:28] nice [05:28] that didn't exist when I did it [05:28] twb, so, i install the netboot package, and the client can just go from there? [05:28] had to do the DHCP and everything manually [05:28] Sorry, di-netboot-assistant [05:29] It will fetch the d-i netboot kernels and ramdisks and set up a pxelinux menu and everything [05:29] I don't know if it's available in Ubuntu yet, of course... [05:29] sweet [05:30] well, that's the fun part [05:48] problem. on a fresh 9.10 install, with several crypted lvm disks, entering the first passphrase at boot goes ok, when prompted for the second, a bunch of messages appear before the phrase can be entered [05:55] so i just bought a vps, i am mildly experinced with ubuntu, but not a security expert, best tips for keeping it secure? [05:56] other than strong passwords and not handing out ssh accounts like there candy [05:56] supermatthew, make sure no users have shells that shouldn't ever log on [05:57] and use encrypted protocols [05:57] https [05:57] atm im not handing out access to it [05:57] http isn't a big deal unless you're logging in [05:57] I meant email, shell access, file access [05:57] i setup ispconfig cause i hate messing with files [05:58] use pop3s/imaps, scp/sftp/sshfs, etc [05:58] don't use ftp, telnet, etc [05:58] i don't even have a telnet client :p [05:58] you probably do [05:58] windows 7 [05:58] no preinstalled telnet client [05:58] wait putty has a telnet client [05:58] nvm [05:59] in any case [05:59] go through /etc/password and if anything has a real shell that shouldn't, like built in accounts, change it to /sbin/nologin or /bin/false [05:59] err [05:59] /etc/passwd [05:59] supermatthew: you're running ssh, right? [05:59] the only ones that should have real shells are root and any user accounts you create [06:00] yeah [06:01] ubuntu is pretty well secured by default [06:01] supermatthew: install something like denyhosts [06:01] oh, change the sshd config, PermitRootLogins No [06:01] unless you need that [06:02] well the default vps image has root enabled [06:02] :p [06:02] right [06:02] which is why you should prevent root from logging in through ssh [06:02] log in through an unprivileged user, then su to root if you need it [06:03] k [06:03] and I'd switch to public/pricate key auth over ssh [06:04] i guess what i should really worry about is the windows server sitting at my feet :p [06:05] but thats behind my DSL nat, so not really worried [06:05] a default install is pretty secure, so you only really need to secure anything you install on top of it [06:05] or in this case, anything your VPS company did to it [06:06] also, a good firewall is quite valuable [06:07] * kblin shrugs [06:07] you can mitigate brute force attacks and prevent any connections to anything you aren't intentionally running [06:07] won't fail2ban help with the brudeforce attacks [06:07] on a server at a hoster, I usually go for "if I don't want to run the service, the port is closed" [06:08] of course closing ports is a good isea [06:08] I don't use fail2ban, I just use iptables with the recent module [06:08] brute forcers can only get about 20 failed logins done in a day [06:09] which is nowhere near fast enough to actually crack an account [06:09] if they were smart they could get more in, but they're not [06:10] they're just spamming attempts [06:10] its probably just bots [06:10] yeah [06:10] of course my shell server's down right now [06:10] video card died a couple days ago [06:11] waiting on a replacement [06:11] i used to run filezilla server on my desktop a couple years ago to let a friend quickly upload and download files(we moved to an svn solution later) [06:12] and i could watch as 1-2 IPs a day tried to brude force the admin password [06:12] yeah [06:12] though the admin account didn't exsist :p [06:12] I usually get about 5-10 separate brute forcers trying my shell server [06:12] per week [06:13] and it's always root, admin, mysql, etc... [06:13] none of which can log in [06:13] passwords to always try first if you want into a system: password admin root 123456 12345 [06:13] * kblin shrugs [06:14] I'm using denyhosts with the public database of known offenders [06:14] that's a bit too resource intensive for my 200MHz shell server ;) [06:14] iptables gets it done [06:15] might i ask what exactly your server does :p [06:15] supermatthew: most my servers have "secret" as admin password :) [06:15] I've got several, that one is for ssh and web [06:15] it's the oldest and slowest [06:16] i used to use test test as a login/password for various things [06:16] making it perfect for ssh, since it can only handle 3-4 simultaneous ssh connections [06:16] then again, those are virtual machines for testing and stuff, they're never on a public network [06:16] then i used it on a friends game and he mad at me :p [06:16] it was a public game [06:17] and any box could serve my static HTML pages and pictures at the 40k/s my net connection can handle [06:17] test test had full admin rights [06:17] i had fun then loged off and told him to change that password [06:18] I also used to run ftp and an eggdrop on that machine [06:19] :( i have a gbps port on both of my desktops, why can't i get a fiber cable for cheap [06:19] i watched as they put down a couple hundred strands infront of my apartment [06:19] * kblin goes back to try and find what's causing data corruption on his file server [06:20] why would you want fiber [06:20] cat6 is cheaper and easier to work with [06:20] fiber as in from this apartment to a datacenter [06:20] qman__, isn't it ironic that your shell server is down because of video card problems? [06:20] ah [06:20] StrangeCharm, yes, it is [06:20] it won't boot without one [06:20] and it doesn't have an AGP slot [06:20] or some other place [06:21] so I had to order up a PCI replacement [06:21] theres only 1 hop between my isps network and the datacenter my vps is on [06:21] qman__, i'm so young, i've never seen an agp slot in real life [06:21] ? [06:21] wow [06:21] O.o [06:21] hah [06:21] so let me tell you about running stuff on ISA slots :) [06:21] this machine predates AGP [06:21] it only has PCI and ISA [06:21] i have an ISA card in my closet [06:21] sound card [06:22] quite usless to me [06:22] economically, fixing it is a poor decision [06:22] but it has sentimental value [06:22] qman__, also, fiber has much higher max speeds than cat6. it is better as a long-term investment [06:23] fiber can go for miles [06:23] StrangeCharm, there are specs for 10g over cat6 [06:23] cat6 100 meters [06:23] I thought he meant in his home, PC to PC [06:23] making fiber silly [06:24] qman__, agreed, there is almost application i can think of that would require fibre in the home. but fiber to the home is a sound investment: highest experimental speeds with fiber are massive, among other advantages [06:24] yeah [06:25] why, im living in the center of thousands of corprate buildins and 10 or so datacenters within an hour drive [06:25] but im stuck with 3 mbps dsl [06:25] yet i had fios when i lived in denton, which is an hour drive [06:26] not to put too fine a point on it: the reason that the us has such poor broadband and beyond-broadband is that llu is not mandated [06:26] I'm stuck with cable [06:26] costs three times what it should [06:26] the only other option is a leased line [06:26] i want to move to sweeden [06:26] sweden [06:27] a friend there has a 100 mbps line [06:27] 100meg broadband as a human right? [06:27] the suicide rate's pretty high, though [06:27] O.o [06:27] StrangeCharm; I think 100meg broadband should be a human right =) [06:28] supermatthew, i'm just saying, there's broadband, and there's environment [06:28] I'll take my freedom over fast internet [06:28] crohakon, i agree in principle, but i'd rather not specify a speed, rather a qualitative value that'll keep pace with changing times [06:28] qman__, where do you have freedom, out of interest? [06:28] Want to know what pisses me off about ISPs? When they block ports! [06:29] I live in michigan, US right now [06:29] and my rights are pretty heavily violated here [06:29] what part of michigan? [06:29] but it's much worse in europe [06:29] lapeer [06:29] ideally I'd like to go to alaska [06:29] qman__, don't assume so. the balance is closer than you think, especially with the echr [06:29] the last free state [06:30] over near flint? [06:30] crohakon, yes [06:30] Ahh, I am from the Muskegon area. [06:31] Anyway, time for sleep. Goodnight. === crohakon is now known as crohakon|zZz [06:31] good night [06:31] so i was thinkin, Blimps + LAzors + Sharks = Internet Anywere above ground and defence system for said internet [06:31] ie each blimp is a hop [06:32] and connects to other blips or to the ground via lazers [06:32] then you stick the sharks on the blimps so that people can't attack them or enviromentalists will be angry [06:32] supermatthew, that strategy would be pretty heavily affected by poor weather [06:33] put blimps high up in air [06:33] and if the connections poor, then you use land based connections to cover the area [06:33] then when weathers clear, you can go back to blimpies [06:34] also, effective laser communication requires extreme precision [06:34] and im sure that not much could stop a 10 gigawatt comminication lazer [06:34] more than GPS can do [06:35] but sharks + satalite dishes + blimps doesn't sound as good [06:35] i should be gettin to bed [06:35] what's the package/metapackage/whatever for the standard ubuntu gnome environment? [06:36] StrangeCharm, ubuntu-desktop [06:36] so simple, thanks [06:36] also: for password security people: download these http://www.outpost9.com/files/WordLists.html [06:36] if your passwords on one of those lists [06:36] please think of a new password [06:37] nice resource [06:37] great for pen testing WPA [06:37] :p it seems WPA is becomming a joke [06:37] almost as much as wep [06:38] yay netsplit [06:39] well, WPA + AES isn't totally broken [06:39] but it's easy to get a packet, and then brute force [06:39] so it requires a strong passphrase [06:42] I keep all my wireless stuff on a separate network from my important stuff [06:42] and VPN in [06:42] just like I would from anywhere else on the internet === jussi01 is now known as jussi01_ [07:59] can anyone please tell me where i can get the key bindings for x server? [08:05] <_ruben> ubuntu-server doesnt do X [08:14] ok.. [08:14]