/srv/irclogs.ubuntu.com/2009/12/02/#ubuntu-server.txt

RoyKbaccenfutter: wtf - who did?00:02
baccenfutterthe garrythefish guy00:04
lunaphytehow can i show the real group and effective group for processes in he output of ps?00:41
=== nxvl_ is now known as nxvl
thenetduckhi, i'm setting up postfix on my hardy heron server and I was wondering what would the best option be for a website that sends simple emails for welcome and orders?00:57
thenetduckthere is "internet site" internet site with smarthost"00:57
thenetduckand some other options00:57
lunaphyteisn't there already a mail server on your network you can use?00:58
thenetducklunaphyte: i'm using a slice from slicehost01:05
thenetduckI don't know, i'm kind of new to the mail server thing01:05
thenetduckthere is something called sendmail I think01:05
thenetduckto be honest, I acutally need some realy help getting my mail server set up01:06
lunaphyterunning a mail server isn't trivial.  you really should employ someone who can ensure things go well.01:06
thenetducklunaphyte: I have no money, I guess this is more of a learning experience01:07
thenetducknow if I had a job... haha01:07
lunaphyteemploy doesn't necessarily mean money.01:07
lunaphytedoes slicehost provide a mailserver for their customers to use?  if so i would just use that.01:08
thenetduckum, I don't know I should ask01:09
lunaphyteprobably a good idea.01:09
thenetduckI guess the problem is my rails app uses :sendmail for the server01:10
lunaphytethat's no problem.01:10
lunaphyteassuming your provider provides a mail server, all you need is a null client, not an mta.01:11
mrchrisadamslunaphyte: how does that normally work?01:11
lunaphytewhat?01:11
lumpEeegreetings all01:12
mrchrisadamsI have one account with webfaction which has a mailserver at mail.webfaction  that I can send mail through from an app01:12
mrchrisadamsmuch like thenetduck01:12
mrchrisadamsbut I've recently started using a vps01:12
mrchrisadamswhich doesn't explicitly have a mail server for this01:12
lumpEeethis is support channel for ubunter server correct?01:13
mrchrisadamsor at least there isn't something like mail.vpscompany.com, like webfaction provided01:13
thenetducklumpEee: no it's for elephants who like to eat peanuts01:13
lunaphytemrchrisadams: you'd just have to ask, like thenetduck01:13
lumpEeeoh good i fit in there too01:13
thenetduckhaha01:13
lumpEeeand thenetduck, likely i will have more dumb Qs01:15
mrchrisadamsah, "A null client is a machine that can only send mail. " - http://www.postfix.org/STANDARD_CONFIGURATION_README.html01:15
thenetducklumpEee: i'm pretty much the biggest noob on the chanell so ask away ahah01:16
lumpEeeI like ubuntu, have needs best met by a server and am rather a n00b at ubuntu server01:16
lumpEeei ain't even ready to ask yet01:16
lumpEeei am reading through docs and figured it be a good idea to lurk here a bit01:16
lumpEeei love ubuntu though01:17
lumpEeejust not used to any type of server stuff outside of CPanel01:17
thedoblelumpEee: feel free to lurk, I'm a windows sysadmin who'se slowly converting to the dark side :)01:19
=== mneptok is now known as weremnep
thenetducklunaphyte: well they do but it's 10/month for it. I'm not paying that haha01:19
lunaphyteno surprise there.01:19
=== weremnep is now known as mneptok
lumpEeethedoble, i still have a ME machine running.. lol01:20
lumpEeeother than that one XP and the other 4 all flavors of ubuntu01:20
thedoblelumpEee: heh, I am not yet a fan of ubuntu desktop, but I like the server version a lot. I have a macbook now as well so I am slowly weaning myself off microsoft !01:22
lumpEeei have the studio version, the net book remix version, the desktop (although I mostly use it as storage via the network) and just build a server01:23
mneptokoh yes. Apple is a *much* more open company than is Microsoft. they treat their users with respect, assuming them to be intelligent and capable.01:23
mneptok</sarcasm>01:23
lumpEeei am rather fond of the way they did the netbook version01:24
lumpEeei really like it on this Eee01:24
lumpEeestudio is also very good with a real time kernel01:24
thedoblelol01:26
lumpEeebut as for the desktop version.  I just set up file sharing and it sits in my lr01:26
lumpEeemy7 migration seem to be more toward ubuntu than "a company that used to be deifned by a band"01:28
lumpEeeheh01:28
lumpEeesorry i am an apple fan in another way01:29
thedoblei still struggle to get my head around linux file permissions in samba01:30
lumpEeethanks for saying that01:30
lumpEeeone of the things i am having problems with myself01:31
lumpEeecorect my n00b arse if wrong01:31
lumpEeeit just don't seem to work right from the GUI01:32
thedoblei dont know, I don't use the GUI, but I do know that it can be really confusing in the command line too01:33
thedoblei think its just different01:33
thedobleand i need to relearn how i think about it01:33
lumpEeei am not afraid of cli01:34
lumpEeejust reaaaal rusty at it01:34
lumpEeethe last time i played with php it was 3.001:34
lumpEeei am just at a point where i really need a server01:36
lumpEeeso it is time to hit the books again so to speak01:36
thedoblehehe01:38
thedoblei dont do much work with web servers01:38
lumpEeemore of a database and media server in my case01:40
thedoblecool01:45
thedobleyeah i am mostly file/print/domain/email stuff01:45
thedoblesmall businesses01:46
lumpEeei do podcast and internet radio01:46
lumpEeei do all indie artists01:47
lumpEeei just need to create a server so that I am not the only one able to enter data to the database and add media to the streaming server01:48
lumpEeei know it can be done01:48
lumpEeei believe i am tech competent enough to do it01:48
lumpEeejust not sure exactly how and gotta shake some rust out of me01:48
thedoblenice one01:49
thedoblesounds like a good project01:49
thedoblegood luck :)01:49
thedoblehave you read through the ubuntu official documentation ?01:49
thedoblesome of it is brilliant stuff01:49
lumpEeei am doing that as i go back and forth01:50
lumpEeei have actually installed server 2x atm01:50
lumpEeeeach time i do so, i read more, figure out a bit more and decide the do-over is better01:51
lumpEeethings have improved much since i played much with anything other than a CMS about 10 years ago01:51
thedoblehehe01:53
lumpEeeand, again, that was all CPanel01:53
lumpEeei did not actually have to install everything01:53
lumpEeethe docs are good though01:55
lumpEeei am just going through them with a highligher in oo right now01:55
tonyyarussoHi, I was just looking over the server seeds proposals for Lucid.  Two relatively minor questions regarding that:02:32
tonyyarusso1)  What's the rationale for dropping vlock?  It's small, but has come in handy for me a few times.  Is there a better replacement these days, or would it be dropped without a replacement in main?02:33
lumpEeegnight all02:33
tonyyarusso2)  Has there been any consideration given to possibly putting an IRCd in main, either for Lucid or later?02:36
twbtonyyarusso: !anyone :P02:39
ScottKtonyyarusso: You'll probably have more luck during when mathiaz`or ttx are around.02:44
tonyyarussoScottK: all righty02:51
* tonyyarusso idles02:51
marks256Say if i had a lab of 50 ubuntu computers, could i have an update server so i dont have to download 50 400mb updates (example size). Then i would only have to download 1 400mb set, then distribute it to the lab02:53
twbmarks256: yes.02:53
marks256twb, how would it work?02:54
twbIt'd be even easier to simply use LTSP, so that you maintain one image and all the lab machines are updated automatically by rebooting02:54
marks256yeah. LTSP would be nice. but i'm just asking for proof-of-concept02:54
twbBut if you just want a local cache of package updates, I highly recommend debmirror.  If you're very tight on bandwidth, you could try apt-cacher[-ng] or apt-proxy, but both have caused me huge problems in the past.02:55
marks256twb, aah ok. repos dont mind keeping dumps of them though?02:55
twbIn particular, one of them (apt-cacher?) is vulnerable to injection attacks by any client, which -- although being caught by checksumming -- might be overridden by an ignorant user.02:55
twbmarks256: debmirror magically maintains a partial copy of the Ubuntu archive.02:56
twbe.g. you can tell it "keep a copy of hardy and hardy-security for i386 and amd64, but don't mirror the "games" section or the "universe" category."02:57
marks256twb, neat!02:57
twbIIRC a single-arch, single-release mirror is on the order of 10 to 30GB.  The updates each week are negligible (for stable releases) or significant (for ubuntu+1, testing and sid)02:58
twbThe other thing you could do, which I haven't tried yet, is setting up apt-bittorrent.02:59
marks256oh my that's not bad02:59
marks256only 30gb?02:59
twb31GB for --arch i386 --nosource --dist hardy,hardy-updates,hardy-security,hardy-backports --section main,restricted,universe,multiverse03:00
twbUnfortunately I don't keep a record of downloads per week03:01
marks256wow03:02
marks256i though it'd be more along the lines of a few hundred gb!03:02
twbWhere that kind of size comes in is if you want to track all the arches that Debian supports03:03
twbWhich according to type-handling, is: cpus [alpha amd64 arm armeb armel avr32 hppa i386 ia64 lpia m32r m68k mips mipsel powerpc ppc64 s390 s390x sh3 sh3eb sh4 sh4eb sparc] × systems [darwin freebsd hurd kfreebsd knetbsd kopensolaris linux netbsd openbsd solaris uclibc uclinux]03:04
tonyyarussomarks256: I've been keeping local mirrors for a while.  For fine-grained control, ie for just one release, one architecture, I've been very happy with apt-mirror.  I recently decided to do a full mirror, and I'm pulling that down with the ubumirror utility.03:09
tonyyarusso(Which, btw, I put in my PPA if you'd rather apt-get than bzr branch)03:09
marks256twb, aah ok ok03:09
marks256tonyyarusso, ok cool. this sounds quite useful03:10
tonyyarussomarks256: It's about 250GB for all supported releases, btw.03:10
tonyyarussoi386 and amd64.03:10
marks256tonyyarusso, :o oh my03:11
wolfreinhi everybody03:16
wolfreini have a problem with one of my ipsec tunnels03:16
wolfreinit doesnt come up when i do a racconctl fs isakmp followed by fs ipsec03:17
wolfreinthe preshared key is not issued03:17
wolfreinwhen i check status, it shows all 0000000 in the preshared key position03:17
wolfreinplease advise how i can rectify this03:17
twbtonyyarusso: have you used both apt-mirror and debmirror?  Would you care to compare them briefly for me?03:21
tonyyarussotwb: I haven't tried debmirror, no.03:21
uvirtbotNew bug: #461444 in eucalyptus "memory leaks in NC: getConsoleOutput and startup_thread" [High,In progress] https://launchpad.net/bugs/46144403:22
marks256tonyyarusso, twb, thanks for the hlep guys03:25
wolfreinplease advise about the ipsec tunnel03:27
twbWhy doesn't ntpd like to bind to my IPv6 address? http://hpaste.org/fastcgi/hpaste.fcgi/view?id=13480#a1348003:56
twbAlso, how can I just tell my 8.04 system to not use IPv6 at all?04:04
Clusty_hey04:04
Clusty_are there generally any issues when it comes to blooth dongles?04:04
Clusty_or most chips are really supported04:04
twbAnswer: change /etc/modprobe.d/aliases:alias net-pf-10 ipv6 from "ipv6" to "off".04:15
MBCR!ops05:00
MBCR!staff05:01
ScottKMBCR: What are you doing?05:01
MBCRcalling the ops duh05:01
MBCR!ops05:01
ScottKApparently not.  Why?05:02
Ninjixhello all05:08
Sorellhi Ninjix05:11
Ninjixgreetings Sorell05:15
NinjixI'm looking to discuss Intel ICH10R "fakeraid" with anyone that has any production experience with them05:18
=== Sorell is now known as Sorell_sleep_mod
=== Sorell_sleep_mod is now known as Sorrell_sleep_mo
twb!anyone05:20
ubottuA large amount of the first questions asked in this channel start with "Does anyone/anybody..."  Why not ask your next question (the real one) and find out?05:20
Ninjixtwb: Hi there05:25
jmarsdenNinjix: https://help.ubuntu.com/community/FakeRaidHowto05:35
jmarsdenBasically, it doesn't make sense to use fakeraid on a server, software RAID is more flexible and performs as well.05:36
Ninjixjmarsden: Yes, I have always believed that but so many servers come with fakeraid now05:37
Ninjixjmarsden: and the tech has been around a few years now05:37
jmarsdenPreconfigured Ubuntu servers that use fakeraid?  Interesting.  Just because the motherboard chip can do it doesn't make it a good choice for a Linux/Ubuntu server.05:38
NinjixTrue05:40
jmarsdenWhat would you hope to gain from using fakeraid -- how would it benefit your users or your sysadmins or your profit margin, compared to using software RAID ?05:41
NinjixI having good success with Adaptec 2258100-R cards but would rather not have to shell out extra $40005:41
NinjixI trying to move as much of our data center to commodity hardware as possible05:42
jmarsdenI don't think you'lld get hardware RAID performance from fakeraid; I think youu'd fine software RAID performance about equal to fakeraid... so then the chocie is between software RAID or hardware RAID... right?05:43
NinjixDisk IO is a tough obstacle, though05:43
jmarsdenInteresting... a lot of people are moving the other way -- a few big servers and virtualization, rather than many cheap servers.05:43
Ninjixah.. don't get me wrong. I'm moving down that path as well05:43
jmarsdenAt the same time?  So... a few really big fast but cheap commodity servers?  :)  Where can I find some of those? :)05:45
Ninjixthis year we are moving off VMware and onto Ubuntu KVM virtualization05:45
Ninjixafter spending tons of money on Dell and HP "enterprise" class hardware for years now, I sat back and ask my team how much of those enterprise features we were really using05:48
Ninjixthe answer turned out to be very little05:49
Ninjixthis made us rethink where we spend our money, especially with the economic condition of the last year05:50
jmarsdenSure... but you've had hard drives fail and may even have hot-swapped them when that happened... that's a different level of "enterprise-class" than the "lights out management" and similar things, I'd think.05:51
Ninjixagreed05:51
freeflyingha all05:52
freeflyingI can ping other machine from an instance in UEC, but can't access to the instance from other machine besides from cloud clontroller05:52
Ninjixand now we're returned to rolling our own white-box servers that have redundancy where we use it the most like hot swap bays05:53
jmarsdenNinjix: So maybe you really want to move towards commodity server hardware, but still hardware RAID cards and hot swap disk chassis... yup.  Makes sense.05:53
jmarsdenMaybe you can build two such boxes, one software RAID and one hardware RAID, and benchmark for your workload and then decide if the $400 is worth it for your situation?05:55
Ninjixso far I've had mix results in our tests05:56
Ninjixthe fakeraid can hang with the hardware RAID on 0,1 and 1005:57
Ninjixmoving up to RAID 5 there's where the parity hurts05:59
jmarsdenI guess that makes sense.  Did you compare fakeraid with pure software (mdadm) RAID too?05:59
Ninjixsame hardware with Windows drivers produces better results by some extra % points06:00
jmarsdenBut for the cost of Windows Server you can buy a hardware RAID card :)06:01
NinjixI haven't tested the ICH10R against Linux RAID yet06:01
NinjixGood point. Love FOSS cost savings. :)06:01
Ninjixfreeflying: I wish I could help but I still waiting to get the chance to play with UEC06:03
jmarsdenNinjix: I'd think hard about doing RAID5 fakeraid in production... if things go bad and you end up needing to rescue a broken array, you're more likely to find people and tools for messing with the guts of an mdadm setup than with a (Linux) fakeraid-based array, I suspect.06:03
jmarsdenSo unless fakeraid has significant reliability or performance benefits (which I don't think it does), I'd use mdadm software RAID rather than fakeraid.  But that's just me.06:05
Ninjixyes. That seems to be the general consensus. I know guys that won't use hardware raid for that reason.06:05
NinjixNo one want to get burned by proprietary drivers or even hardware06:06
jmarsdenYes... although real hardware raid on a controller from a decent vendor is slightly different; the vendor can often help you rescue things, and since the RAID is hardware they don't need to know Linux to do so... only their own hardware.06:06
Ninjixthankfully I have only come close to that with Dell PERC controllers06:07
jmarsdenWe've seen some Windows servers where older Adaptec SCSI RAID5 broke badly, and their techs can do what looks near-miracles to get things going again... I think twice in the last 4 years I have seen that.06:09
Ninjixyes, Adaptec hasn't ever let me down. Still have a old 2940 SCSI card around here somewhere. :)06:10
jmarsdenThat's pretty old now, I remember those :)06:10
Ninjixhow about yourself? what kind of disk IO solution are you running your Ubuntu servers on?06:11
jmarsdenSoftware RAID1; we're doing smaller lower cost servers mostly where the cost of a hardware RAID card doesn't seem to be justified.  For a couple of clients that did need more serious IO we did SAS drives and an LSI MegaRAID card, I don't remember the exact model.06:15
Ninjix15k SAS drives?06:22
fallous_I was always a symbios fan myself.  875-based cards were the bomb06:27
jmarsdenYes, Seagate.  I'm really more of a network/sysadmin, I only get involved with low level hardware details when I have no choice :)06:27
Ninjixnice chatting with you this evening06:33
jmarsdenLikewise.  Sometimes it is nice *not* to be helping out teenage newcomers with minimal Linux background :)06:34
billybigriggerhey im 2406:47
billybigriggerthank you very much06:47
billybigrigger:P06:47
jmarsden:)  Hi billybigrigger06:48
billybigriggerjmarsden, howdy06:48
=== RussellAlan is now known as KronicKoH
tonyyarussottx: Hey, I was wondering if you could comment on either of these things re: server seed proposals for Lucid:07:34
tonyyarusso1)  What's the rationale for dropping vlock?  It's small, but has come in handy for me a few times.  Is there a better replacement these days, or would it be dropped without a replacement in main?07:35
tonyyarusso2)  Has there been any consideration given to possibly putting an IRCd in main, either for Lucid or later?07:35
ttx1) I don't know, feel free to ask the question in the discussion section of the spec07:36
ttx2) I guess yes07:36
Malekohow do you view parition details, aside from using fdisk -l08:13
jmarsdenMaleko: YOu could use cfdisk if you prefer :)  What is wrong with using fdisk -l ?08:15
Malekoit does not give in-depth details such as partition filesystem, total size in gb, free space etc08:16
jmarsdenHow could it... it is just reading the partition table, which does not contain that information.08:17
jmarsdenIf you know what fs is on a given partition you can use fs-specific tools to look at that fs...08:18
Malekohmm. what about ext* ?08:20
jmarsdentune2fs -l   would work on ext2/ext3 filesystems, lots of info there, for example...08:22
_rubenlooks kinda "ironic" to me: process `sysctl' is using deprecated sysctl (syscall) net.ipv6.neigh.default.retrans_time; Use net.ipv6.neigh.default.retrans_time_ms instead.09:27
uvirtbotNew bug: #491288 in samba (main) "File corruption after copying files via samba from Karmic to Karmic" [Undecided,New] https://launchpad.net/bugs/49128809:56
uvirtbotNew bug: #490843 in net-snmp (main) "Confusing debconf question on dist-upgrade" [Wishlist,Confirmed] https://launchpad.net/bugs/49084310:02
uvirtbotNew bug: #491084 in eucalyptus "Object get requests will non determinstically fail (with the rightaws library)" [High,Fix committed] https://launchpad.net/bugs/49108410:02
=== alex88[sleep] is now known as alex88
=== mrchrisadams_ is now known as mrchrisadams
* soren grabs some lunch10:55
=== mrchrisadams_ is now known as mrchrisadams
alvinGood to see there's another Server survey.11:53
ivokswhen is the meeting?11:56
Aisonhello12:00
AisonI installed ubuntu server on two machines12:00
Aisonon one machine, /etc/fstab root is monted at /dev/mapper/mediaserv-root12:01
nijabaivoks: meeting is at 2PM UTC, 2h from now12:01
Aisonon the other machine, root is defined by an UUID12:01
Aisonwhy this difference?12:01
ivoksright in the middle of working hours :/12:01
ivoksAison: it's newer version of ubuntnu12:01
Aisonbut I installed both from the same ubuntu cd?12:03
ivokswhich one?12:03
ivoksubuntu ...?12:03
ivoks8.04?12:04
ivoks9.10?12:04
Aison9.10 amd6412:04
ivoksso, on one you installed LVM, and on the other you didn't right?12:04
Aisonhmm, I just noticed that also12:05
Aison;)12:05
ivokshehe12:05
Aisonis there a good howto for ubuntu 9.10 to build my own custom kernel? because I've got 12 DVB-s Cards in this machine, I need to change some constant in the kernel sources12:10
Aisonby default, the kernel support just 8 DVB Cards at the same time12:10
=== mrchrisadams_ is now known as mrchrisadams
Aisonthe wiki here https://help.ubuntu.com/community/Kernel/Compile  is not working somehow12:12
ivoksthere's git12:22
ivokshttps://help.ubuntu.com/community/Kernel/Compile#Build%20the%20kernel%20%28when%20source%20is%20from%20git%20repository,%20or%20from%20apt-get%20source%2912:23
ivoksthis should work12:23
Aisonthx12:34
Aison:)))12:34
=== mrchrisadams_ is now known as mrchrisadams
zulmorning12:37
=== Sorrell_sleep_mo is now known as Sorrell
acalvohow can I grow a LVM partition, if it is mounted as /?12:46
alvinacalvo: The same way as you grow other logical volumes. It works.12:47
acalvobut, shouldn't it be unmounted first?12:47
alvinno, you can resize online12:48
alvinfirst, use lvresize, and then resize2fs12:48
acalvoeven with ext4?12:48
alvinyes, even with ext412:48
acalvothanks alvin, I'll try it12:49
acalvois it worth to have vmware tools installed on a production server?13:08
zulmorning13:15
nijabamorning zul13:29
nijabaacalvo: if your server is running on ESX or a VMware product, yes, it makes a lot of sense13:30
acalvothanks nijaba13:30
acalvolast question then: are the vmware packages available in any repository?13:30
sorenopen-vm-tools.13:32
sorenI don't know if it works. Haven't used it in....13:32
sorenerr...13:32
sorena very long time.13:32
* soren desperately needs coffee13:32
acalvosoren: quick question: where you from?13:41
sorenacalvo: Denmark13:44
acalvook :)13:44
zulaka vikingland13:46
sorenThe very same.13:47
* zul smacks net-snmp around some13:57
sorenjdstrand: http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=32f021f2664290cffe34723c52435ac4a62fb365 fixes the eventtest thing.14:00
sorenjdstrand: If you'd rather leave that to me, that's perfectly cool as well.14:00
jdstrandsoren: ok, thanks14:01
soren..but there it is.14:01
jdstrandsoren: I ran into some other issues (hal), but am working through them. I'll apply that commit too14:02
cyphermoxI'm trying to setup a full kickstart for a ubuntu server using the kickstart compatibility config format. What would be the way to skip the creation of the initial user?14:25
=== robbiew-afk is now known as robbiew
cipixhi all. I'm having an issue on a ubuntu server with grub2 installation in that when server boots it gives me the error "You need to load the kernel first" and I tried grub-install and update-grub and I don't know what else to check to see what's wrong and to fix it. can you help me please?14:36
uvirtbotNew bug: #485760 in php5 "Need to upgrade integrated zip module" [Undecided,Fix released] https://launchpad.net/bugs/48576014:43
RoyKu hm... http://www.grist.org/article/2009-11-18-oil-enough-energy-to-melt-glaciers14:46
mathiazttx: byobu isn't brought into main only by Recommends - http://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.lucid/rdepends/byobu/byobu14:52
mathiazttx: it's a dependency from a bunch of packages14:52
ttxmathiaz: ok, good.14:53
mathiazttx: what I'm grepping for is packages that  only have Reverse Recommends and that they're brought in by one of the server seed (ultimately)14:54
mathiazttx: the goal was to have a (rather) short list to review by hand14:54
mathiazttx: and make proposal from it14:54
xfrogman5Are ssl features installed and enabled with a standard Ubuntu LAMP installation?15:00
nijabaxfrogman5: yes they are installed but not enabled15:11
xfrogman5Can you point me to a detailed howto for enabling ssl within apache215:12
nijabaxfrogman5: https://help.ubuntu.com/9.10/serverguide/C/httpd.html15:12
xfrogman5thx15:13
nijabaxfrogman5: see ubuntu.com/server/doc for a summary of resources available about ubuntu server edition15:13
heath|workcan some pastie there source.list for 7.10, I'm getting nothing but 404's15:22
heath|workor did support end and I not know it15:23
mjeansonheath: http://old-releases.ubuntu.com15:25
sorenheath|work: Support ended more than 6 months ago. You should upgrade ASAP.15:29
heath|workwe are moving servers, I just needed to install git for a test thanks soren15:29
* MenZa makes mental note to upgrade his 8.10 box the moment 10.04 is out15:31
sorenMenZa: 8.10->10.04 is not a supported upgrade path, fwiw.15:31
MenZaaye, I know15:31
sorenIt may Just Work, but we put no effort into testing anything at all.15:31
MenZaI'm scared to do it15:32
MenZaI might just do a full backup and install 10.0415:32
sorenBah. It's only bits and bytes.15:32
soren:)15:32
MenZaI regret not installing Hardy back when I set my box up15:32
* soren is still running hardy on most of his production systems.15:32
MenZaI ought to on my server15:32
MenZaI never considered using it for anything else than irssi, but I'm now running multiple websites and stuff on it15:32
sorenI suppose my primary work laptop is sort of a production system (at least in the sense that I'd be severely impaired if it broke), but it's running Lucid.15:34
MenZasoren: So, you mean Jaunty with a new toolchain? and /etc/apt/sources.list?15:36
MenZaer15:36
MenZas/Jaunty/Karmic15:36
MenZaI can't keep up with releases anymore15:36
* MenZa has lived to see Breezy, Dapper, Edgy, Feisty, Gutsy, Hardy, Intrepid, Jaunty, Karmic and Lucid15:36
MenZaChrist, that is a lot of releases.15:36
* MenZa feels old.15:36
sorenMenZa: No, Lucid is waaay past just being an updated toolchain.15:40
MenZasoren: I suppose - Alpha 1 is out soon15:40
smosermathiaz, or anyone, have you done command line compltion before (ie, added bash completion hooks for a package) ?15:41
* soren goes to pick up his daughter at day care15:48
TeTeT_how to exchange the self signed certificate for UEC with a CA signed?15:48
Rascal999have setup up rsa/dsa so i don't need password for ssh but i get this error pop up in auth.log Error attempting to add filename encryption key to user session keyring; rc = [1]15:50
MTecknologyIf my server is running on xen and I don't want xen to control the kernel; what kernel can I use that already has xen support built in?15:56
MTecknologyI tried -generic and -virt but neither seem to have xen support15:56
smoserMTecknology, it depends on what version of xen you have. ... newer xen can boot either of the above kernels (i think) in pv_ops16:04
smoseradditionally there is the xen hvm, which i htink you mean by your statement of "don't want xen to control the kernel"16:05
MTecknologysmoser: I'm running on a Linode if that helps16:11
smoserdoesnt help me, sorry.16:12
=== mrchrisadams_ is now known as mrchrisadams
=== david is now known as Guest67831
MTecknologysmoser: I'm getting this error   ERROR Invalid kernel: elf_xen_note_check: ERROR: Will only load images built for the generic loader16:18
MTecknologyor Linux images16:18
MTecknologyxc_dom_parse_image returned -116:18
smoserMTecknology, i'm sorry, i can't be much more help. sorry to get your hopes up.  maybe someone else here can help.16:19
MTecknologyok, thanks16:21
* ttx hates C16:33
Rascal999ttx, why do you hate C?16:37
ttxRascal999: struggling with some memory management, I forgot how painful it can be.16:38
Rascal999ttx, oh, not been there yet16:38
Rascal999based on what I've learnt and done in C so far, I'm liking it16:39
Rascal999but I haven't really touched on memory management, multi-threading or the rest16:39
kirklandttx: where is your eucalyptus SRU branch?16:41
kirklandttx: last i recall, it was a private branch owned by you16:41
kirklandttx: could you push it somewhere ubuntu-core-dev owned?16:41
ttxkirkland: done already16:42
kirklandttx: sweet, link me :-)16:42
ttxkirkland: http://bazaar.launchpad.net/~ubuntu-core-dev/eucalyptus/ubuntu-karmic/changes16:42
ttxcommitted as rev725..72616:42
kirklandttx: thanks; i'll hack the new CLEAN=1 operations today16:42
kirklandttx: fixing the non-determinism seems, um, a bit harder16:43
ttxkirkland: I didn't observe any non-determinism in my testing16:43
ttxkirkland: doesn't mean there isn't any, by definition16:44
kirklandttx: https://bugs.edge.launchpad.net/ubuntu/+source/eucalyptus/+bug/490382/comments/316:44
uvirtbotLaunchpad bug 490382 in eucalyptus "eucalyptus-cc init script doesn't always clear /var/lib/eucalyptus/CC" [Medium,Triaged]16:44
ttxi.e. stop eucalyptus-cc CLEAN=1 always PASSed16:44
kirklandttx: you wrote "Looks quite non-deterministic from here."16:44
ttxarrh16:44
kirklandttx: typo?16:45
ttxyep16:45
ttxcommenting16:45
kirklandttx: ah, would you add another comment to that effect?16:45
ttxi progress16:45
kirklandttx: i was happy you had seen something similar to me :-)16:45
ttxkirkland: https://bugs.launchpad.net/ubuntu/+source/eucalyptus/+bug/490382/comments/516:46
uvirtbotLaunchpad bug 490382 in eucalyptus "eucalyptus-cc init script doesn't always clear /var/lib/eucalyptus/CC" [Medium,Triaged]16:46
ttxsorry about that16:46
kirklandttx: no problem16:46
kirklandttx: so i'll add the new CLEAN=1 support, test that a bit, and push to proposed?16:46
ttxyes, sounds good16:46
ttxIf you still observe some non-determinism, let me know which commands you tested16:47
ttxI couldn't make it fail with "stop eucalyptus-cc CLEAN=1"16:49
ttxbut that's rather counter-intuitive16:49
* soren goes to dinner... bbl16:53
kirklandttx: question about https://bugs.edge.launchpad.net/ubuntu/+source/eucalyptus/+bug/490382/comments/316:57
uvirtbotLaunchpad bug 490382 in eucalyptus "eucalyptus-cc init script doesn't always clear /var/lib/eucalyptus/CC" [Medium,Triaged]16:57
kirklandttx: your comment about the env not being passed from eucalyptus to eucalyptus-cc upstart script ...16:57
kirklandttx:  is that supposition, or confirmed operation?16:57
kirklandttx: ie, do i need to chase keybuk down and ask him about that ?16:58
ttxkirkland: supposition.16:58
kirklandttx: okay, i'll confirm with scott16:59
ttxkirkland: I see no reason why it would be propagated to upstart tasks that get triggered by another event16:59
ttxkirkland: but sometimes I'm surprised by upstart :)17:00
xfrogman5Looking for detailed howto for converting an IIS6 ssl cert to be used on a Ubuntu Apache2 Openssl system.17:03
=== mrchrisadams_ is now known as mrchrisadams
uvirtbotNew bug: #491481 in tomcat6 (main) "package tomcat6 6.0.20-2ubuntu2 failed to install/upgrade: el subproceso script post-installation instalado devolvi? el c?digo de salida de error 1" [Undecided,New] https://launchpad.net/bugs/49148117:51
=== mrchrisadams_ is now known as mrchrisadams
=== dendro-afk is now known as dendrobates
Aisonis there some ldap howto (samba, pam, radius, etc...)   for 9.10?18:24
AisonI tried https://help.ubuntu.com/community/OpenLDAPServer18:24
Aisonbut eg. on 9.10 /etc/ldap/ldaps.conf is a directory18:24
Aisonerr slapd.conf18:25
ahasenackAison: look for the server guide18:42
Aisonthis? https://help.ubuntu.com/9.10/serverguide/C/index.html18:43
Aison:D18:43
ahasenackI was looking for it, let me see18:44
ahasenackah, help.ubuntu.com18:45
ahasenackAison: yes, that's the one18:45
ahasenackAison: https://help.ubuntu.com/9.10/serverguide/C/openldap-server.html18:45
=== KronicKoH is now known as RussellAlan
Aisonwith sudo dpkg-reconfigure slapd I can't set the default suffix :(  I also can't set the manager password18:51
Aisonbrb, reboot, back soon ;)18:55
tuxcrafterhi all19:07
tuxcrafteryesterday i updated my server to ubuntu 9.1019:07
tuxcrafterand i had a mediawiki install19:07
tuxcrafterand now it is gone19:07
tuxcrafterit is asking me to setup the wiki first19:08
tuxcrafteri am so afraid i am lossing all the data19:08
Aisonre19:08
Aisonback to my question ;)  with sudo dpkg-reconfigure slapd I can't set the directory or ldap manager password :(19:12
tuxcrafteri do got daily mysql dumps of the media wiki19:12
ahasenackAison: in karmic, there is no such password anymore in the default tree19:12
ahasenackAison: using -H ldapi:// -Y EXTERNAL in your ldap* command-line tools is enough to become the rootdn19:13
adurityI need to update the ESM firmware on a Dell PowerEdge server.  Does anyone have experience doing this under Ubuntu?19:13
ahasenackAison: there is a regexp in the config mapping that form of local authentication to the directory administrator user19:13
Aisonk19:13
ahasenackAison: try "ldapwhoami -H ldapi:/// -Y EXTERNAL"19:13
ahasenackAison: it will tell you that you are cn=localroot,cn=config IIRC, which is the rootdn19:14
Aisonok, yes19:14
Aisoneg. there's a sample ldapsearch call to view the tree19:14
Aisonldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase={1}hdb19:14
Aisonthere a password is requested....19:15
ahasenackbecause you added -W19:22
ahasenackis that in the doc?19:23
Aisonyes19:23
ahasenackugh, then it's wrong19:23
Aisonit's copy&past from https://help.ubuntu.com/9.10/serverguide/C/openldap-server.html19:23
ahasenackreplace all authentication options with "-H ldapi:/// -Y EXTERNAL"19:23
ahasenackand the commands should work locally, when run on the same server19:23
ahasenackso, drop -x -D -W -w19:23
Aisonthe doc also tells me that "sudo dpkg-reconfigure slapd" let me configure the default suffix19:23
Aisonbut I cant19:24
ahasenacknote it's a bare bones tree, so you will eventually want to add something to it, like users and so, so at some point you will be using -D, -W, etc19:24
ahasenackyeah, looks like it's outdated then19:24
Aisonwell, it also tells me, that the suffix is taken from the FQDN19:24
Aisonbut I don't remember that i've ever set the FQDN at installation19:25
ahasenackthere is no suffix yet19:25
ahasenackit's from the older distros documentation19:26
ahasenackin 9.10 it's really bare bones, just a bare cn=config database19:26
ahasenackif you want a script to populate it, you can check out launchpad.net/openldap-dit19:26
ahasenackalthough it highlighted a bug in openldap, let me commit a workaround19:26
ahasenackhmm19:28
Aisonon the old distribution I used mysql for users and such, but now I changed to ubuntu (also changed my RAID device, raised raid capacity to 8TB, etc....)19:30
Aisonand I would like to use ldap ;) so far, everything works nice19:31
Aisonbind setup was easy, etc..19:31
uvirtbotNew bug: #491271 in samba (main) "testparm changes syntax" [Low,Incomplete] https://launchpad.net/bugs/49127119:37
mathiazAison: the ldap section of the ubuntu server guide in 9.10 hasn't been updated to match the new slapd configuration19:55
mathiazAison: most of the ldif files are good, but the command won't work, and you'd have to create a default database/tree as well.19:55
ahasenackmathiaz: how does its updating work? Is it a wiki, does a diff need to be pasted in some LP ticket, or just a discussion in the mailing list?19:56
mathiazahasenack: the server guide is actually a bzr branch and a package19:57
ahasenackhmm19:57
mathiazahasenack: so the update uses the standard SRU process19:57
ahasenackmathiaz: what's the branch?19:57
mathiazahasenack: https://wiki.ubuntu.com/ServerTeam/KnowledgeBase#Documentor%20resources19:57
mathiazsommer: lp:ubuntu-docs19:57
mathiazsommer: ?19:57
mathiazahasenack: ^^19:57
Aisonmathiaz, too bad :)  i'm new to ldap, so it's not that easy for me ;)19:58
ivoksit's quite easy once you understand it19:58
ivoks....once...19:58
mathiazahasenack: I meant to write a blog post about using slapd in Karmic19:58
ahasenackcof cof19:58
mathiazivoks: a couple of days ago you mentioned that we switch to MariaDB - why?19:58
ivoksmathiaz: they listen19:59
ivoksmathiaz: we had a bug in mysql for ages19:59
ivoksreported a year ago19:59
ivoksuntil uds and meeting with mneptok, nothing moved19:59
RoAkivoks, should corosync be merged from debian/testing or should we just work on the packages provided by madkiss?19:59
ivoksthen in two days all was resolved :)19:59
ivoksRoAk: i haven't looked at merges yet; i plan to do that this night20:00
ivoksmathiaz: they have newer stuff20:00
mathiazivoks: well - there are plenty of bugs - I'd rather not base such a decision because 1 bug was fixed promptly20:00
ahasenackmariadb is a mysql fork or what?20:00
mathiazahasenack: yes20:01
RoAkivoks, ok I was planing on grab the packages of Madkiss and recompile them for ubuntu. He has also made available packages for karmic in his repo20:01
ivoksmathiaz: of course, but as i said, they have newer featuers20:01
ivoksfeatures20:01
ivoksonce 5.1 is released, i'll do some testing and if everything goes as advertised, i'll replace mysql with mariadb on my servers20:02
mathiazivoks: right - the maria db engine, a few other patches?20:02
=== RoAk is now known as RoAkSoAx
mathiazivoks: I think that's perfectly reasonalbe20:02
ivoksmathiaz: it's mysql 5.6 + patches20:02
mathiazivoks: 5.6? IIRC they're merging from 5.120:02
ivoksso mariadb 5.1 is at the same level as mysql 5.620:02
mathiazivoks: my understanding was that MariaDB 5.1 is 5.1 + patches20:03
ivokstrue20:03
ivoksbut those patches come from 5.620:03
ivoksnot all, of course20:04
ivoksanyway, once it is released, i'll test it20:04
mathiazivoks: I think we should make it as easy as possible for people to experiment with mariadb20:04
ivoksand, if you are interested, i could provide some analysis20:04
ahasenackmathiaz: I branched that url, but I don't see a file related to openldap in it20:04
mathiazsommer: ^^ - could you ahasenack with the server guide? I haven't looked at it lately20:05
mathiazivoks: I'm always interested in such analysis20:05
mathiazivoks: the main issue for now is that haven't released anything20:05
ahasenackhmm, found it20:05
ahasenacknetwork-auth.xml20:05
ivoksmathiaz: correct20:05
mathiazivoks: which is a bit annoying for the LTS20:05
ivoksof course20:06
mathiazivoks: there was a discussion about MariaDB during the last UDS - were in there?20:06
ivoksyes it was20:06
ivoksi was20:06
mathiazivoks: ok - I think that what mark suggested in the end is the best option for LTS20:06
ivoksimho, having mariadb at least in universe would be very smart thing to do20:07
* mathiaz agrees20:07
ahasenackthe branch is already more up-to-date than the published page20:07
ivokswho knows what could happen to mysql and having a fail over would be awesome20:07
ivoksin universe, but very well maintained20:07
mathiazahasenack: bug 46368420:08
uvirtbotLaunchpad bug 463684 in ubuntu-docs "openldap sections in ubuntu server guide not updated for packages in karmic" [Medium,Triaged] https://launchpad.net/bugs/46368420:08
enquoraI have an Asus EEE box with 8.04lts on it that I want to upgrade to 9.04 server. do-release-upgrade complains that no upgrade is available and booting from external CD fails when installer can't locate driver for external drive. any suggestions?20:14
enquoraSorry, want to upgrade to 9.10 server20:14
ivoksfirst of all20:15
ivoksyou can't do 8.04 -> 9.0420:15
ivoksyou have to do 8.04 -> 8.10 -> 9.04 -> 9.1020:15
enquoraI know that20:15
ivoksor wait for 8.04 -> 10.0420:15
ivoksnow, by default, only upgrades from LTS to LTS are enabled in LTS releases20:16
enquoraI assumed that when I saw 'no upgrade available'20:16
enquoraIs there a way to over-ride that?20:16
ivoksif you want to update to non-LTS, you have to edit /etc/update-manager/release-upgrades20:16
ivoksPrompt=normal20:16
enquoraivoks: I see the setting. Thks.20:18
ivoksnp20:19
=== dendrobates is now known as dendro-afk
Aisonuhm, what is recommended as ldap web frontend20:24
ivoksas in management?20:25
Aisonsomething like phpldapadmin20:26
AisonI just tried this, but no chance ;)20:26
ivoksmy preference is apache directory studio20:26
ivoksit's not web based20:27
Aisonwell, if it's not webbased, that's ok als20:27
Aisonalso20:27
ivoksthen go for it20:27
ivoksit rocks.20:27
ivokshttp://directory.apache.org/studio/20:28
mneptokivoks / mathiaz: FYI, i'll be talking to Norbert Tretkowski (Debian MySQL packager) about MariaDB packages for Debian. so hopefully Lucid can inherit universe packages directly from Debian.20:28
* mneptok and nobse have a call scheduled for this weekend20:29
Aisonthx20:29
Aisonbut first I need somehow to setup my ldap20:29
Aisonthat crap is not working ;)20:29
mathiazmneptok: great - that's the best option IMO20:29
ivokslearn it20:29
Aisonthe docs of 9.10 aren't really up to date20:29
Aison:(20:29
mathiazAison: true - any help in updating them is welcome20:30
ahasenackAison: would you like to try the openldap-dit script?20:30
Aisonahasenack, well, if that helps, why not ;)20:30
mneptokmathiaz: also, i pointed bytee (Colin Charles) in your direction as regards AppArmor profiling for MariaDB. if he has questions, he might poke you.20:30
ivoks'what is dit?'20:30
ivoks:D20:30
Aisonahasenack, since my ldap is empty anyway, I can't damage much20:30
ahasenackAison: it's supposed to be run right after installing the karmic slapd package20:30
Aisonok, so I reset my small changes, sec...20:31
ivokshm, i could give that a try :)20:31
ivoksand probably provide patches for email services :D20:31
ahasenackAison: people.canonical.com/~andreas/openldap-dit-0.20.tar.gz20:31
Aisonok, and now?20:32
ahasenackAison: after opening the tarball, run "sudo make install" and then as root "/usr/share/slapd/openldap-dit-setup.sh" and answer the two questions20:32
ahasenack(I never tried "sudo /usr/share/slapd/openldap-dit-setup.sh" now that I think about it, but should work)20:32
ivoksmneptok: there's a new patch for croatian collation in mysql 6.020:32
ivoksmneptok: it should be merged20:33
ivoksmneptok: i'll file a bug or reopen the old one20:34
Aisonahasenack, ok, finished20:35
Aisonno error so far ;)20:35
mneptokivoks: perfect20:35
ahasenackAison: I need to leave for about 30min, but will be back20:35
Aisonok, cu20:35
ahasenackAison: now just use that admin dn as the root one20:35
mneptokivoks: bump the old bug. if there's no reaction within 24h, i'll start screaming.20:35
Aisonok20:36
ahasenackAison: it installed a basic tree with people and group locations20:36
ahasenackbbl20:36
=== ahasenack is now known as ahasenack-away
ivoksmneptok: :)20:36
kirklandmathiaz: ping20:37
kirklandmathiaz: re: uec-testing20:37
mneptokivoks: some people in the US have learned that solving problems in the Balkans before they grow too large is a good idea.  ;)20:37
* mneptok giggles20:37
ivokshahaha20:37
kirklandmathiaz: " * Eucalyptus to make their stress test suite publicly available: TODO"20:37
MTecknologyYou guys have any experience with uptrack?20:37
kirklandmathiaz: can we mark that DONE, now that we have the tests from nurmi?  or is that not "public" enough?20:38
* mathiaz o^14 kirkland 20:38
MTecknology!info python-yaml20:38
ubottupython-yaml (source: pyyaml): YAML parser and emitter for Python. In component universe, is optional. Version 3.09-1 (karmic), package size 162 kB, installed size 728 kB20:38
* kirkland tries to figure that one out ...20:38
mathiazkirkland: hm - for the scope of uec-testing I think so20:38
mathiazkirkland: making them public means putting a license on it20:38
mathiazkirkland: so that they could be included in the packages20:38
kirklandmathiaz:20:39
kirkland * Obtain the Eucalyptus test suite: DONE20:39
kirkland * Eucalyptus to make their stress test suite publicly available: TODO20:39
mathiazkirkland: seems like a good plan20:39
kirklandmathiaz: okay, can we take a quick look at https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-uec-testing together?20:40
ivoksmneptok: such a small area and so much problems :)20:40
mathiazkirkland: sure20:40
kirklandmathiaz: i think you went over the work-items and split a few up20:40
mathiazkirkland: yes20:40
kirklandmathiaz: mdz asked me to go over these and carve up any that are more than a day or two worth of effort20:40
mathiazkirkland: right - jos pinged me earlier as well20:41
mathiazkirkland: 10:47 <jib> i think the main thing missing is the plan for the eucalyptus test integration. could you please amend that?20:41
kirklandmathiaz: i'm looking at the tests from nurmi right now20:41
mathiazkirkland: right - these are stress testing20:41
kirklandmathiaz: right ... so these would run on one machine (through testbox), and point at an existing cloud setup20:41
kirklandmathiaz: getting the cloud setup itself is outside of the scope of checkbox, AFAICT20:42
MTecknology!search jps20:42
ubottuFound:20:42
mathiazkirkland: yes20:42
mathiazkirkland: and I wouldn't integrate with checkbox yet20:42
mathiazkirkland: that was my main update to the WI20:42
kirklandmathiaz: cool20:42
mathiazkirkland: checkbox doesn't have the concept of running tests spanning multiple systems20:43
kirklandmathiaz: right20:43
kirklandmathiaz: okay so looking at the work items for those that might take >2 days ...20:43
kirkland * Automate the installation of UEC for the different topologies on the assigned hardware: TODO20:43
kirklandmathiaz: ^ could be complex20:43
mathiazkirkland: well - I was thinking about preseeding20:43
kirklandmathiaz: but that really just depends on how many and how complex the topologies might be20:44
mathiazkirkland: and may be throw some puppet in there20:44
mathiazkirkland: right - I have to loook into that20:44
kirklandmathiaz: sure ...  if we're talking about 3-4 reasonable topologies, i think that's 2 days worth of work20:44
mathiazkirkland: but maximum 6 physical machines?20:44
mathiazkirkland: oh right20:44
mathiazkirkland: I see what you mean20:44
mathiazkirkland: let me look up the different topologies20:45
kirkland * Automate the installation of UEC for the 3-4 different topologies on the assigned hardware: TODO20:45
kirklandmathiaz: i scoped it like that ^20:45
mathiazkirkland: well - I'd split in one WI per topologie20:45
kirklandmathiaz: right!20:46
kirklandmathiaz: do you want to agree on a few topologies right now?20:46
kirklandmathiaz: i think that's one of the TODO items :-)20:46
kirklandmathiaz: i'm not sure who needs to sign off on that .... though20:46
mathiazkirkland: yes - ttx already defined them actually20:46
mathiazkirkland: mdz told me so20:46
kirklandmathiaz: oh?  where?20:46
mathiazkirkland: I'm looking for the spec right now20:46
mathiazkirkland: the intstaller improvmeent20:47
kirklandmathiaz: url?20:47
kirklandmathiaz:  * Define a comprehensive, finite list of topologies to be tested: TODO20:47
kirklandmathiaz: you can mark that DONE, then ;-)20:47
mathiazkirkland: :) - that's the one I'm searching for20:47
mathiazkirkland: https://wiki.ubuntu.com/FoundationsTeam/UECInstallerEnhancement20:48
mathiazkirkland: https://blueprints.launchpad.net/ubuntu/+spec/foundations-lucid-uec-installer-enhancement20:48
kirklandmathiaz: cool, i'm subscribed now, wasn't before20:48
mathiazkirkland: since this is the work to be done in the installer - it makes sense to prepare a test plan for these topolobies20:49
kirklandmathiaz: ack20:49
mathiazkirkland: there is also https://blueprints.launchpad.net/ubuntu/+spec/server-lucid-euca-remote-autoregister20:50
kirklandmathiaz: that looks like 5 different topologies20:51
kirklandmathiaz: are those the 5?20:51
mathiazkirkland: where do you see 5 topologies?20:51
kirklandmathiaz: https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-euca-remote-autoregister/20:51
kirklandmathiaz: grep "("20:52
mathiazkirkland: same as https://wiki.ubuntu.com/EucalyptusRemoteAutoRegistration - Test/Demo plan section?20:52
kirklandmathiaz: hmm, 3 of them are the same, never mind20:52
kirklandmathiaz: okay, well, there's 5 there too20:53
mathiazkirkland: yes20:53
mathiazkirkland: so that 5 WI20:54
Aisonivoks, this apache directory editor is really nice :D20:54
Aisonthx20:54
kirklandmathiaz: the separate networks ... is that something you can automate?20:55
mathiazkirkland: you mean - (CC2+SC2 will be registered manually)?20:56
mathiazkirkland: I think what needs to be tested here is manual entry of IP - ie not using avahi20:56
kirklandmathiaz: http://pastebin.ubuntu.com/333382/20:56
kirklandmathiaz: how does that look?20:56
kirklandmathiaz: i split that 1 item up like that20:56
mathiazkirkland: looks good to me20:57
kirklandmathiaz: refresh https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-uec-testing20:57
kirklandmathiaz:  * Enable Eucalyptus upstream test suite: TODO20:58
kirklandmathiaz: that looks like the hardest / most ambiguous remaining item20:58
kirklandmathiaz: otherwise, I think it looks okay now20:58
mathiazkirkland: hm - we're not testing "three adjacent networks" and "two remote networks (CC2+SC2 will be registered manually) "?20:59
mathiazkirkland: last two test cases from https://wiki.ubuntu.com/EucalyptusRemoteAutoRegistration?20:59
mathiazkirkland: upstream test suite - right - I don't know how hard it is20:59
kane_kirkland, mathiaz if that's any more than 1-2 days of work, we'll want to split that out. and i'm trusting at least one of you's seen the code & test suite in question?20:59
kirklandmathiaz: that's what i was asking you before ... i don't think that's going to be easy to automate the testing of20:59
mathiazkirkland: I just remember dan mentioning they had a test suite20:59
kirklandkane_: both of us have the tarball, i'm looking at it now21:00
kirklandkane_: neither of us have run it though21:00
mathiazkirkland: I've actually run it21:00
mathiazkirkland: it requires some small changes21:00
* kirkland bites his tongue21:00
mathiazkirkland: but overall it works21:00
ivoksAison: great21:01
kirklandmathiaz: kane_: okay, in that case, I think everything remaining in that spec is less than 1-2 days work21:01
Aisonivoks, what's the difference between New Entry and New Context Entry?21:01
mathiazkane_: what did you mean exactly with 10:47 <jib> i think the main thing missing is the plan for the eucalyptus test integration. could you please amend that?21:01
ivoksAison: you are using it on 9.10? 32 or 64 bit?21:02
kirklandmathiaz: kane_: Drafting -> Review now21:02
=== ahasenack-away is now known as ahasenack
* ahasenack is back21:02
mathiazkane_: one of the WI in the blueprint is to actually write up the plan for integration testing21:02
Aisonwell, the ldap server runs on 64bit 9.1021:02
mathiazkane_: and then another WI is to automate that plan21:03
kane_mathiaz: it was specifically " * Enable Eucalyptus upstream test suite: TODO"21:03
mathiazkane_: ah ok.21:03
ivoksAison: i'm asking about apache dir.?21:03
mathiazkane_: I'd defer that to kirkland  - it's a packaging WI21:03
kane_which could be anything from 'add line to shell script' to 'massive refactoring required to work'21:03
mathiazkane_: right - may be we should first investigate the feasility of it21:04
kirklandmathiaz: kane_: I don't think it's going to be possible to enable the tests that I've seen in the package build, as they have to be run against a real live cloud on your network21:04
kane_mathiaz: that'd be great, or at least document the uncertainty there21:04
Aisonivoks, gentoo ;) 64bit21:04
mathiazkane_: hm - well - if it's possible to do it21:04
=== dendro-afk is now known as dendrobates
kirklandmathiaz: kane_: that's different than, say, the perl binary testing 64-bit floating arithmetic against itself21:04
kane_understood21:05
mathiazkirkland: right - I have no clue about what dan was refering to as their test suite21:05
mathiazkirkland: I thought it was a kind of API unit testing suite21:05
kane_so, let's figure out what we're dealing with and what it would take for us to " * Enable Eucalyptus upstream test suite: TODO"21:05
kirklandmathiaz: kane_: in my opinion, that item is either not a packaging one, or should be dropped altogether21:05
mathiazkirkland: I don't think he was refering to the stress testing scripts I send you21:05
kirklandhmm, okay21:05
kirklandthen we need to ask them that tomorrow, kane_21:06
kane_well, we have a very strong wish to enable upstream tests in our processes, so let's figure out what's needed21:06
mathiazkirkland: I thought there was a test suite similar to the mysql/openldap test suite21:06
kane_kirkland: ok, then let's add that to list if it isn't already on mdz's mail21:06
mathiazkirkland: may be we should first talk to upstream about what kind of test suite they have (1 WI)21:06
mathiazkirkland: and then enable the one that makes sense in the build (1 WI)21:06
kirklandmathiaz: agreed; i'm working with nurmi right now21:07
kirklandmathiaz: i'll ask him about it shortly21:07
kirklandmathiaz: right now, we're reviewing eucalyptus/debian/patches/*21:07
kane_mathiaz, kirkland: if you guys can demistify that bullet point for me, i'm happy to have it in review21:07
kirklandkane_: k21:07
kane_if that takes a call with Euca, then so be it. earlier is better though.21:07
mathiazkirkland: yeah - it may well turned out that I misunderstood what dan was saying21:08
mathiazkirkland: kane_: this WI is based on one sentence that dan said when we were in Austin talking about the stress test scripts21:08
mathiazkirkland: "we also have a test suite we run against the internal API/components..." something like that - that's what I remember21:09
MTecknologyI want to run Apache on my website but I want it to only run as the httpd user (www-data). It seems that it's default is to run as root...21:11
kane_mathiaz, kirkland: updated the spec to reflect the above point, just for record keeping purposes21:11
MTecknologyAm I right or wrong on that? If I'm right; how do I change that without breaking anything?21:12
ScottKkane_: It might be nice if you sent a mail to the ubuntu-server mailing list introducing yourself.21:12
kane_MTecknology: the parent process runs as root, and then drops privs afaik21:12
kane_ScottK: good point, thanks21:12
kirklandkane_: ack, cheers21:12
MTecknologykane_: /var/www and /var/www/* are owned by root:root21:13
MTecknologykane_: I guess a fun way to test that would be to make a simple php script that writes to a file that's 700 root:root and 700 www-data:www-data21:16
smoserjjohansen, so the lucid ec2 kernel is in archive...21:17
ivoksurgh... hate windows21:17
smoserbut linux-image-ec2 seems to still depend on linux-image-2.6.31-302-ec2,21:17
smoserso i wont pick up the kernels in nightly builds.21:17
smoserhello mr erichammond21:17
mathiazkirkland: anything else on the /server-lucid-uec-testing spec?21:19
kirklandmathiaz: i don't think so21:20
kirklandmathiaz:  i marked it for review21:20
kirklandmathiaz: i need to get back with you when i understand the different test suites dan and eucalyptus have21:20
mathiazkirkland: ok21:21
kirklandsoren: around?21:22
sorensmoser: I've figured out why /dev might be nuked by vmbuilder cleaning up.21:22
kirklandsoren: question about this commit: http://bazaar.launchpad.net/~ubuntu-core-dev/eucalyptus/ubuntu/revision/543#debian/patches/04-axis2c-1.6.0-rampart-1.3.0.patch21:22
sorenkirkland: Oui, oui.21:22
kane_MTecknology: ps aux|grep apache will show you the children run with www-data privs. apache default installation comes with nothing more than an index.html that says 'it works'21:22
kirklandsoren: i'm curious why a new aclocal.m4 file was added to that patch21:23
MTecknologykane_: I just tested with php too :P21:23
MTecknologykane_: thanks21:23
kane_np21:23
sorenkirkland: I don't see the string "aclocal" anywhere on that page?21:23
sorenkirkland: Ah, sorry. My bad.21:24
kirklandsoren: see debian/patches/05-axis-alternative-repository.patch21:24
smosersoren, thats good.21:24
sorenkirkland: For PKG_CHECK_MODULES, I think.21:24
smoserif your box is hosed, you can get it back with udevadm trigger21:24
sorenkirkland: ..but why it's not in /04-axis2c-1.6.0-rampart-1.3.0.patch instead... I don't know.21:25
kirklandsoren: hrm, yeah, i think it might make more sense there21:25
sorensmoser: It's not. I was just looking at the code and realised where it might go wrong.21:25
* soren is about to call it a day21:26
* soren does so21:30
MTecknologyWould there be any issue in changing www-data shell to bash; or is there a chance that could hurt performance?21:30
MTecknologyI only ask because I intend to only modify web data as that user from now on21:30
MTecknologyI have a feeling that'll fix a lot of issues I've been having with Apache; but if it's at the cost of performance - I can get used to dash or w/e it uses -- or perhaps I should ask #httpd21:32
jjohansensmoser: https://edge.launchpad.net/ubuntu/+source/linux-ec221:34
jjohansensmoser: but there is still some meta packaging work to be done so that updates can happen21:34
smoserjjohansen, hm...21:36
jjohansenyeah its not ideal, but I thought it best to let you guys know as soon as it hit the archive instead of waiting until the meta packaging was updated21:37
smoserah. ok. so it will happen.21:38
smoserand the karmic dailies will just pick it up and publish it when it appears there.21:38
smoserjjohansen, we're ramdisk free riht now with the -3121:39
jjohansenreally? nice21:39
jjohansenThen we should be able to be with -32 too21:39
smoseryeah, so hope that the -32 still boot :)21:39
smoseri tested boot to mount root on kvm, uec and ec2 with the 20091201 images.21:40
jjohansenhehe it better, I did smoke testing of both i386 x86_64 before handing it to andy21:40
jjohansenand then I did it again with his ppa21:40
smoseryou're the ubuntu-server kernel person, right?21:40
jjohansenyep21:40
smoserso this would fall on your lap eventually...21:40
smoserif we're thinking we want to be ramdisk free as much as possible for virtual systems.21:41
jjohansenhrmm, I suppose21:41
smoseri dont know what extra hard ware support would need to be turned to 'y' in the kernel to support microsoft and/or vmware vms without ramdisk21:41
smoservirtualbox obviously another one. i've not tested that.21:42
jjohansenugh, me neither21:42
smoseri do think its reasonable (given the fairly small amount of hardware) that -virtual would support just about everything21:42
jjohansenyeah it should21:42
jjohansenwell within reason21:43
jjohansenthere is some strange stuff out there21:43
sbeattiesmoser|jjohansen: if you've got kernels that need testing in virtualbox or vmware esx, I can help out.21:46
jjohansensbeattie: thanks, basically we need to step through and test booting sans initramfs21:48
jjohansenhitting as many platforms as possible21:48
smosersbeattie, well... yeah. http://uec-images.ubuntu.com/lucid/current/unpacked/21:48
smoseryou can just grab the lucid-uec-{i386|amd64}-vmlinuz-virtual kernel there and try it.21:49
smoseryou should be able to moutn root filesystems on an existing image.21:49
smoserthe images there are'nt terribly friendly today to environments other than UEC or ec2, but we're working on that.21:50
Aisonre22:09
Aisonwhy do I have to add organizationalUnit for posixGroup entry?22:09
Aisonelse it's not accepted22:09
kirklandmathiaz: okay, i confirmed with nurmi that these tests are not all of the tests they are planning to give us22:24
kirklandmathiaz: he said we'd talk more about the test suites in tomorrow's meeting with Eucalyptus22:25
mathiazkirkland: ok22:25
mathiazkirkland: so far we only have the stress tests right?22:25
kirklandmathiaz: right22:26
kirklandmathiaz: they have a functional suite too22:26
mathiazkirkland: that's probably what dan was refering to22:26
mathiazkirkland: and I though about enabling it in the build (if possible)22:26
kirklandmathiaz: if possible -> sure22:28
sbeattiejjohansen|smoser: one issue with virtualbox is that it can (and in newer versions defaults to) use a virtual e1000 nic.22:28
jjohansenhrmm vmware has that as an option too22:29
jjohansenthough it defaults to its lance or vmxnet22:30
MTecknologyWhat's the 'correct' way to set my hostname? I tried to do   123.123.123.123  server.domain.com     server   in /etc/hosts but that didn't seem to change anything22:33
baccenfutterMTecknology: also edit /etc/hostname22:33
MTecknologyoh. thanks22:33
jmarsden|workMTecknology: hostname -F22:34
baccenfutteror that22:34
baccenfutterwhich does the same22:34
MTecknologythanks22:34
MTecknologyactually /etc/hostname doesn't exist..22:35
sbeattiejjohansen: vbox also supports pcnet interfaces22:35
MTecknologythere we go - thanks :D22:37
jjohansensbeattie: thanks, that is good to know22:41
Aisonargh, i'm getting crazy ;) ldap nss is working now, but so far no chance for samba22:44
=== dendrobates is now known as dendro-afk
uvirtbotNew bug: #491623 in nmap (main) "ndiff crashes when its called with not nmap files" [Undecided,New] https://launchpad.net/bugs/49162322:51
Mike_lifeguardApache's error logs show lots of IPs trying to access stuff that doesn't exist (/var/www/mysql, /var/www/pma, /var/www/mysqladmin, /var/www/phpadmin etc) - I guess those are looking for something to try to break into? In any case, is there a way to get rid of them? Should I not worry about it?23:01
uvirtbotNew bug: #491639 in mysql-dfsg-5.1 (main) "instalation fail in folder "" [Undecided,New] https://launchpad.net/bugs/49163923:06
=== dendro-afk is now known as dendrobates
=== erichammond1 is now known as erichammond
baccenfutteranybody happen to have a nice pic of system respond times23:37
baccenfutterlike a visualization or anything fancy you could put in a presentation23:38

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!