/srv/irclogs.ubuntu.com/2009/12/03/#ubuntu-server.txt

=== robbiew is now known as robbiew-afk
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
Rascal999when i try and ssh into box with public key encryption auth.log says Error attempting to add filename encryption key to user session keyring; rc = [1]. What do I need to change?02:01
billybigriggeranyone aware of a decent app to graph cpu usage, network traffic and disk io?02:33
jmarsdenbillybigrigger: gkrellm if you want on screen graphs; mrtg or similar things using rrdtool if you want longer term trends and graphs on web pages...02:36
jmarsdenbillybigrigger: cricket or cacti too, for the web-based type of monitoring...02:37
mathiazbillybigrigger: munin - is in main since hardy02:38
mathiazbillybigrigger: cacti is in universe while cricket is dead  upstream02:39
benediktbillybigrigger: hobbit (now xymon)03:02
billybigriggercacti looks nice, just a little big more than what i need03:07
ScottKmathiaz: Is cricket dead enough we want it removed?03:21
mathiazScottK: yeah - seems like it03:22
ScottKmathiaz: Would you please file a removal bug then?03:22
mathiazScottK: yeah - that's one of the next step03:23
mathiazScottK: first we discuss it03:23
ScottKThanks.03:23
ScottKmathiaz: Didn't we just do that?03:23
mathiazScottK: and then we take all appropriate actions03:23
ScottKMy threshold for removals is pretty low.03:23
mathiazScottK: we'll do a last round of requests for comments with the whole list03:23
mathiazScottK: I'm still working on potential packages to be moved out of main/universe03:24
ScottKOK.  Just finished my mail server spec.  Hopefully ivoks can get a chance to look at it soon.03:24
mathiazScottK: cricket is in the list anyway03:24
ScottKOK.  Good.03:24
ScottKI'm having a very hard time following that spec based on email.03:24
whatchasay!ops03:33
ubottuHelp! Channel emergency! soren, lamont, mathiaz or tom03:33
Piciwhatchasay: Whats up?03:34
whatchasay!ops03:34
whatchasaypeace dog03:34
Piciwhatchasay: Why are you doing that?03:34
MTecknologylovely..03:35
Eloff...03:45
=== mushroomtwo is now known as mushroomblue
jetolehey guys, I fubar'd my sudoers file on a remote server and I can no longer run sudo, I can't use su because there is no root password, does anyone know how else I can get a root shell?07:58
kane_jetole: can you reboot single user mode and access the serial console?08:03
quizmeis there a way for me log into my friend's computer and have him watch the commands that i type into his terminal ?  cuz i want to show him some stuff.08:10
arjscreen -x08:11
kane_quizme: shared screen session is the way to go, or use vnc for graphical sharing08:11
quizmeshared screen session sounds good08:11
quizmehow do i do that ?08:11
quizmewhat does he need to do08:12
quizmehe is at home08:12
kane_quizme: ubuntuforums are great for this: http://ubuntuforums.org/showthread.php?t=29928608:12
quizmethanks08:13
quizmei'm trying to forward messages from port 9000 on my server to port 80 on my localhost.  Does anybody know how to construct that ssh command?09:04
kane_quizme: tried man ssh?09:04
quizmessh -gNR 127.0.0.1:80:thirdreplicator.com:9000 dev@thirdreplicator.com  <---  i tried that09:04
quizmei tried that09:04
kane_you're missing a -L infront of the 12709:04
quizmeoh09:05
quizmei need -L and -R ?09:05
quizmessh -gNR -L 127.0.0.1:80:thirdreplicator.com:9000 dev@thirdreplicator.com09:05
quizme?09:05
kane_you just want -N -L 80:thirdreplicator.com:900009:06
quizmewhat about -g ?09:06
quizmei'm typing this locally09:07
quizmenot on the server09:07
kane_quizme: if you want to know more, you should really read a howto, like this: http://www.debianadmin.com/howto-use-ssh-local-and-remote-port-forwarding.html09:07
kane_google's your friend09:07
quizmessh -N -L 80:thirdreplicator.com:9000 dev@thirdreplicator.com09:08
quizmePrivileged ports can only be forwarded by root.09:08
quizmei have been googling for hours09:08
quizmeand manning for hours09:08
quizmethat's why i'm here09:08
kane_you didn't type 'ssh port forwarding howto' then09:08
kane_quizme: you can forward only non-privileged ports as a normal user09:08
kane_so, use 1080 instead for example09:08
quizmegoogle is not my friend.09:08
quizmehe is my enemy at this point09:09
kane_there's bing ;)09:09
quizmelol09:09
kane_take a look at the link i gave you, it walks you through step by step09:09
kane_if you still can't make it work, feel free to ask here09:09
quizmethanks09:10
quizmereading..09:10
twbquizme: "ssh -NL 8080:127.0.0.1:80 fs" connects 127.0.0.1:80 on fs to 8080 on the ssh client.09:10
twbquizme: I suspect you just got the 80 and 9000 the wrong way around09:11
quizmeoh09:12
quizmeyeah probably09:12
quizmeand i don't know the difference between -L and -R09:13
quizmelet me try09:13
twbquizme: -L connects a local port to a remote port, -R connects a remote port to a local port.09:14
twbquizme: you almost always want -L09:14
quizmeare you assuming this command is run on the server or on my laptop ?09:15
twbquizme: laptop09:15
quizmeok09:15
quizmethat's what i'm assuming09:15
twbe.g. ssh -fNL 8080:127.0.0.1:80 www.foo.com && sensible-browser http://localhost09:16
quizmemaybe i should explain what i am trying to do09:17
quizmei'm trying to suck down messages sent to port 9000 on my server down to my localhost's port 80 (apache) server.09:17
twbquizme: for that, you want -R09:18
quizmeok.. hehe09:18
jetolekane, I already went to the data center and modified the kernel line to have init=/bin/bash09:18
jetoleback already09:18
twbjetole: IME "single" or "rescue" is less hassle (if they work)09:19
jetoletwb, yeah I didn't try rescue cause I was kinda under the suspicion that it would need a root passphrase which there isn't one09:19
twbjetole: Ubuntu doesn't ask09:20
kworkyou can always get away with single09:20
kworkif you dont know the root pw09:20
twbkwork: no, on a normal system single will still require you to enter the root password09:20
quizmessh -NR thirdreplicator.com:9000:127.0.0.1:80 dev@thirdreplicator.com09:20
quizmedoes that look right ?09:20
jetoletwb well for my server thats cool09:20
twbkwork: Ubuntu is weird in that it doesn't09:21
jetolethey are all in a locked rack09:21
kworktwb,  hmmmz im pretty sure you can get away without root on debian awell09:21
twbIt annoys me, even though I know that if they have physical access you're screwed in other ways.09:21
kworktwb,  i remember doing smt like that09:21
twbkwork: if root's password is the null password (not the same as NO password), then Debian's single will say "hit enter for a maintenance shell" instead of "enter root password for a maintenance shell"09:21
kworkbut maybe you needed cd for it09:22
quizmetwb thanks!09:22
jetoledoes anyone know how I can setup open-iscsi to map to a specific disk on each boot or a static path to access it by?09:22
jetoleoh wait09:22
twbkwork: yes, you can also do "rescue" from a d-i CD09:22
* jetole looks at uuid09:22
twbkwork: d-i rescue doesn't require a root password, on ubuntu or debian09:22
kworktwb,  basicaly if i can chroot into the system i should be able to change the pw right ?09:22
quizmetwb: it worked!09:22
twbjetole: /dev/disk/by-uuid?09:22
jetolethats what I am thinking09:23
twbjetole: run vol_id on the device name you already know09:23
jetoleI see the UUID there and I am assuming they consistantly map to the same iscsi drives on each boot09:23
jetoletwb: I don't have vol_id on ubuntu server 9.1009:23
twbjetole: it's part of udev!09:23
twbjetole: even 8.04 has it09:24
jetoletwb: is it a bin? volname is the only thing bash tab completes starting with vol and `which` comes back empty09:25
* jetole googles it and looks for a man page so I at least know what it did09:25
jetoleah09:26
twbjetole: are you still in init=/bin/bash?09:26
jetoleoh no09:26
twbjetole: vol_id should be in /sbin/09:26
jetoleI went to the data center and am now back at my office09:26
jetoletwb, bash won't tab complete it for "vol" and which doesn't return anything09:27
twbShrug09:27
jetoleoh shit09:29
jetole/dev/disk/by-path/09:29
jetolethat shows the full iqn names09:29
jetolethat is something better since I have vm booting off iscsi09:30
twbShrug09:31
=== joseph_ is now known as crohakon
xperiahello to all. is here somebody with experince hot to install andconfigure red511:44
jussi01Hi all, where are samba passwords usually managed?11:55
RoyKjussi01: that depends how you configure samba12:02
jussi01RoyK: hrm, well thats frustrating as Ive no idea how the person before me configured it.12:03
RoyKjussi01: just look in smb.conf12:05
RoyKit's pretty self-explainatory after having read through that and its comments12:05
jussi01right, ive just been reading man pages, I can change a logged in users password with smbpasswd but how do I list all of the users?12:07
Daviey /312:11
jussi01Nevermind, I got it figured.  :)12:17
=== chuck_ is now known as zul
zulmorning13:01
=== rgreening_ is now known as rgreening
uvirtbotNew bug: #481292 in ntp (main) "often see 'starting/stopping ntp server' note before xsplash (dup-of: 489585)" [Low,Incomplete] https://launchpad.net/bugs/48129213:11
MTecknologyIs there any easy way to have all my logs in one central location?13:42
kworksyslog central server ?13:42
kworkand all servers sending syslog to that box13:42
MTecknologynifty - thanks13:43
uvirtbotNew bug: #484698 in ntp (main) "ntp package should not install a drift file" [Wishlist,Triaged] https://launchpad.net/bugs/48469813:47
MTecknologykwork: That looks amazingly simple - http://news.softpedia.com/news/Setting-Up-a-Central-Syslog-Server-44063.shtml13:51
kworkyeah followed the same tutorial some days ago13:51
kworkworks like a charm :)13:51
MTecknology:D13:52
kworkokey actualy lies13:52
kworkor atleast karmic has rsyslogd13:52
kworkbut its really similar13:52
MTecknologyI love  ufw + apparmor + denyhosts + central logging13:58
MTecknologydon't have the logging server just yet though13:58
MTecknologykwork: where will the logs be stored?13:58
kworkMTecknology,  you define file per host14:02
jdstrand(ufw in lucid will ship an rsyslog configuration)14:03
MTecknologyok, thanks14:04
smosernijaba, or anyone else maybe can answer14:06
smoseri'm under the impression that backports do not get "official canonical support" for the lifetime of normal support14:06
smoseris that correct?14:06
nijabasmoser: correct on backport support14:06
smoserthanks14:07
ScottKsmoser: Generally if there's a problem with a backport, we just update it with a newer backport to fix the problem.14:11
xperiahello to all ! anybody here how can help me with virtual hosting ?14:19
=== robbiew-afk is now known as robbiew
=== dendrobates is now known as dendro-afk
MTecknologyxperia: the question seems to be missing from the backlogs15:23
xperiaMTecknology: have solved it thank you a lot !15:26
=== hggdh_ is now known as hggdh
=== u0324_ is now known as wbrb
ragsHello, i'm using racoon to establish ipsec tunnels..can some one tell me how to remove a SA manullly...16:20
ragsI nknow I can use racoonctl to remove isakmp sa'...based on peer address...16:20
zuljjohansen: ping16:20
ragsbut this doesn't seem to work with SA's....16:20
ragsAlso, I've found it very difficult to find any documentation on ipsec-tools and racoon...am I using something tht is archaic?...wht do ppl usually go for?...OpenSwan?16:21
ragshmm..does anybody work on ipsec here?16:25
CyberSnooPWhat's the proper way to prevent "localhost [127.0.0.1]" mentionings in outgoing mail with postfix ?16:28
ScottKCyberSnooP: Why do you care?16:42
CyberSnooPMail I'm sending gets immediately marked as spam.16:43
CyberSnooP(I've just started sending registration confirmation mails to users)16:43
CyberSnooPMy SPF-records are okay, reverse DNS is checked and lot's of servers seem happy (like gmail). But Hotmail and some universities immediately throw away the message16:44
CyberSnooP(without anybody marking it as junk, as it's the first time we mail them.. new server, new website etc..)16:44
CyberSnooPSo, I've read that spam-scanners care about "localhost" mentionings16:44
CyberSnooPScottK: Does that make any sense or does it make clear that I shouldn't run a mail-server at all :P16:49
ScottKYou can remove them with Postfix header checks, but be careful as it's done with regular expression matching, so it's easy remove more than you want16:50
ScottKI think it's unlikely to help, but I've heard other people give similar theories.16:50
ScottKPeople do weird stuff to try to filter spam, so who knows.16:50
eagles0513875!ufw16:54
ubottuUbuntu, like any other linux  distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command (see https://help.ubuntu.com/community/Uncomplicated_Firewall_ufw), or 'iptables' (https://help.ubuntu.com/community/IptablesHowTo). GUI applications such as Firestarter/Gufw (Gnome) or Guarddog (KDE) also exist16:54
adurityIs there a way to hold a package at a specific version, so that when apt checks for updates, it ignores updates to that particular package?16:54
MTecknologyadurity: apt-get {hold,unhold}16:55
aduritythank you!16:55
MTecknology:)16:55
eagles0513875hey guys im just wondering16:58
eagles0513875with ufw is there a way i can allow access on a range of ports16:58
MTecknologyeagles0513875: you'd need to specify each individually16:59
adurityMTecknology, even better, I found the Forbid option16:59
jdstrandMTecknology: actually it depends on the version16:59
jdstrandeagles0513875: what version of ufw?17:00
eagles0513875jdstrand: 0.2917:00
eagles0513875the server is running karmic17:00
jdstrandeagles0513875: yes, ufw supports multiport rules17:00
MTecknologyjdstrand: oh.. nifty17:01
eagles0513875how do i do that im follwoing the ufw link the bot provides17:01
jdstrandeagles0513875: eg: ufw allow proto tcp from any to any port 80,443,8080:809017:01
eagles0513875https://help.ubuntu.com/community/UFW?action=show&redirect=Uncomplicated_Firewall_ufw17:01
jdstrandeagles0513875: it's in the man page17:01
eagles0513875so basically sudo ufw allow 6000-700017:01
jdstrandeagles0513875: man 8 ufw17:01
jdstrandeagles0513875: you must use the extended syntax17:02
CyberSnooPScottK: header_checks succeded in removing the header. But at least hotmail still doesn't seem to like my e-mails (and they don't say why)17:02
jdstrandeagles0513875: eg:17:02
jdstrandufw allow to any port 6000-700017:02
ScottKCyberSnooP: Hotmail is very random.  No one outside Hotmail really knows how it works, AFAIK.17:03
jdstrandMTecknology, eagles0513875: the ufw features list can be seen here: https://wiki.ubuntu.com/UncomplicatedFirewall#Features17:03
CyberSnooPYeah, well I hope other mail-servers will start to work due to this change at least.17:03
CyberSnooPThanks for the tip anyway :)17:04
eagles0513875jdstrand: i did like the example you gave me but its saying bad syntax in regards to 6000-700017:06
jdstrandeagles0513875: oops17:07
jdstrandufw allow to any port 6000:7000 proto tcp17:07
jdstrandeagles0513875: ^17:07
eagles0513875jdstrand: ahhh ok ty17:07
jdstrandeagles0513875: assuming you want tcp...17:07
eagles0513875sry for the 20 questions im green when it comes to ufw17:07
eagles0513875ya17:07
=== aubre is now known as aubre_afk
mgpcoeHaving trouble getting Postfix+Dovecot to listen on port 25.. SSL and TLS say hello fine, but basic SMTP is totally nonresponsive... anybody run into this before?17:41
lamontcould it be that your ISP is blocking it?17:42
lamontmgpcoe: that's usually the issue17:42
mgpcoelamont: Thought that, but I tried SSHing to an outside server and going in that way.17:43
mgpcoelamont: Same result, and I'm sure I've been able to get in on port 25 from that server in the past.17:43
mgpcoeOh, FFS, when I tried doing it from the server, using the public IP I got right in.. this just became a whole other problem, I think.17:44
mgpcoeDoes Hardy do any filtering on 25 by default?17:46
lamontufw might, but installing postfix should open that17:46
lamontwhat does lsof -ni :25 have to tell us (as root)17:47
mgpcoelamont: Gives me two lines, one on IPv4, one on IPv6, both NODE: TCP and NAME: *:smtp (LISTEN)17:48
mgpcoelamont: And they're both running as root, if that helps; command is `master'17:48
billybigriggermaster = postfix17:56
billybigriggermgpcoe, iptables blocking it?17:57
lamontand (just for completeness...) does the IP you're trying and failing to connect to exist on the machine, or somewhere else  (I hate it when I do that)17:59
mgpcoebillybigrigger: I'm not sure; how would I find out? Last time I tried listing anything with iptables, I couldn't make heads or tails of the information.17:59
mgpcoelamont: Yeah, usually I just enter the domain and let it resolve itself. IP matches all the way across the board.18:00
lamontand "ip route get $IP" points where you think it should?  (lo, I expect..)18:01
lamontmgpcoe: iptables -t nat -nvL; iptables -nvL18:01
lamontand simplest to toss that output into paste.ubuntu.com18:02
mgpcoelamont: ip route tells me "local IP.IP.IP.IP dev lo  src IP.IP.IP.IP"18:02
mgpcoelamont: http://paste.ubuntu.com/333984/18:04
lamontmgpcoe: so what that says is you have no iptables rules, and are using the default (accept) for everything18:06
lamontwhich then gets to "what command are you using to talk to it?"18:06
mgpcoeRight now, just telnet x.x.x.x 2518:07
VaineDragonI just did a fresh insta and configure of pure-ftpd and am unable to logon, here is the output: http://pastebin.com/d4eb6023518:08
mgpcoelamont: which merrily reports "trying x.x.x.x..." and never gets there. I'm tailing /var/log/mail.log on the server and it never even reports the attempt.18:08
lamontmgpcoe: so... "tcpdump -ni lo port 25" as root and then telnet to the IP...18:09
lamontshould show the normal SYN SYN+ACK ACK - and at that point, I suspect that postfix is trying to resolve your source IP and is failing miserably - lets look at /var/log/mail.log, and /var/spool/postfix/etc/resolv.conf and see if they tell us anything useful18:10
lamontand, (seriously), see if leaving it alone for 5 minutes makes a difference at all18:10
=== chuck_ is now known as zul
mgpcoelamont: Doesn't show a thing... I'm starting to wonder if the external server I'm using to access port 25 is crippled on that port too..18:11
lamontwell, if you're talking on lo, you should see yoursefl18:12
mgpcoeAha, righto. One second.18:12
mgpcoeThere it is.18:12
mgpcoelamont: When I connect from the server itself, it doesn't have an issue18:13
mgpcoelamont: Problem is I need to be able to connect to this thing from the cloud, with smtp auth.. and Evolution and Thunderbird won't even connect.18:14
ScottKmgpcoe: Use Port 587 (submission)18:14
mgpcoeScottK: I do, and SMTPS for dumber clients, but when Evolution can't even figure out what auth mechanisms are supported, even I know there's something Wrong.18:18
ScottKYou're mixing different problems then.18:19
ScottKDo you need port 25 or do you need MUA's to be able to submit?18:19
lamontthe cloud blocks port 25, so that spammers don't spam from the cloud.18:21
mgpcoeScottK: Well, I'm trying to set up an SMTP server for a business client so that they can send email from their domain. The server's a virtual host somewhere in, I don't know, Texas, so in order to let my client use the server for their outgoing mail, but not let just anyone do it, I'm trying to set up authenticated SMTP. I can get into it with 465 and 587, and they appropriately bitch about it, but it looks like 18:21
lamontlike most ISPs, outbound port 25 gets blocked... enable submission (587) and use that18:22
mgpcoe(and by bitch about it, I mean they give me the relay access denied message, as they should)18:22
MTecknologyIf I start opening ssh to certain IP's with ufw; am I safe to assume anything not in the ip ranges given will be blocked; or like hand written iptables, do I need to specify a default reject ?18:25
jmarsden|workMTecknology: man ufw.  You get to choose.  sudo ufw default deny incoming    # is probably what you want.18:26
BeardedChimpexit18:26
BeardedChimpoops :P18:26
MTecknologyjmarsden|work: thanks :)18:27
jmarsden|workMTecknology: You're welcome... but try to get in the habit of reading the man page *before* asking on IRC :)18:28
zuljjohansen: ping when you are around I got a kernel package question for you18:29
BeardedChimpI have a ppp0 device connected to a server. When running iptables -t nat -A PREROUTING -i ppp0 -j accept ; it gives no hits for packets accepted even though I can see packets coming in through tcpdump -i ppp0. This is very confusing because I'm trying to dnat the incoming packets but the nat table doesnt seem to see them18:29
mgpcoelamont: I'm starting to wonder if it might be worth it to just gun all the email set it up and do it again from scratch. I've been working from, like, six different tutorials because nothing's been able to get it completely set up...18:30
jjohansenzul: whats the question?18:30
zuljjohansen: im suppose to be reviewing an asterisk MIR and it depends on a couple of kernel-packages such as zaptel is there a linux-restricted-modules package for lucid anymore or is all dkms?18:31
lamontmgpcoe: delivering to port 25 from the cloud is a non-starter.  figuring out whether or not the ISP blocks outbound to port 25 is the first step of any such attempt18:31
jjohansenzul: all dkms18:31
zuljjohansen: crap18:32
zuljjohansen: ok thanks ;)18:32
jjohansenyeah, its a pain18:32
jjohansenhave you tried asterisk at all?  Do we need to up the kernel Hz for it?18:33
zulno i havent i dont have a landline18:33
jjohansenhehe me neither18:33
mgpcoelamont: I'm 99% certain that in one of the business partners' case it does, but I don't know what ISP the other uses. I figure, if Gmail and my old university can get it set up that I can use their outgoing servers instead my ISP's, it's not out of the realm of possibility for me to set the same thing up... Apparently it's just Really Exceedingly Difficult, or I'm missing something.18:34
lamontthat's what god invented the submission port for.  If you're an MTA, you use port 25, if you're submitting mail outbound, then you use submission.18:35
uvirtbotNew bug: #492026 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 (not installed) failed to install/upgrade: подпроцесс новый сценарий pre-installation возвратил код ошибки 1" [Undecided,New] https://launchpad.net/bugs/49202618:36
mgpcoelamont: So, users from the Tubes would be connecting to submission rather than smtp, right? Do I have to specify to the clients that they need to use a different port?18:37
lamontyes, and yes.18:37
lamontat least, that's my expectation18:38
lamontand experience18:38
lamontafk18:38
mgpcoelamont: Oh, I was afraid of that... so Evolution's probably trying to make the auth mechanisms connection over smtp, because I never see that connection.18:38
smoserjjohansen, fyi18:41
smoserIMAGE aki-b8de3cd1   ubuntu-kernels-testing-us/ubuntu-lucid-i386-linux-image-2.6.31-302-ec2-v-2.6.31-302.7-kernel.img.manifest.xml18:41
smoserIMAGE aki-9436d4fd   ubuntu-kernels-testing-us/ubuntu-lucid-i386-linux-image-2.6.32-300-ec2-v-2.6.32-300.1-kernel.img.manifest.xml18:41
smoserthose went up last night, and the latest amis have them as their kenrel. just verified that18:42
smoserami-4037d529   ubuntu-images-testing-us/ubuntu-lucid-daily-i386-server-20091203.manifest.xml18:42
smoserboots fine18:42
jjohansennice :)18:42
smoserhm.. my aki pastes above were supposed to be i386 and amd64, not old i386 and new i386, but you get the picture. the -2.6.32-300 kernels are up there now.18:44
erichammondsmoser: The S3 "location" is "us-west-1" for AMIs in the "us-west-1" EC2 region.  This means we chose a suboptimal (inconsistent) naming scheme for the us-east-1 buckets, but life goes one.18:44
smoserthis is released information ? link ?18:45
erichammondYep, very little fanfare18:45
smoserdoes suck that i chose sub-optimal naming :-(18:45
mathiazkirkland: whody!18:45
zulcome si come ca18:45
mathiazkirkland: did you write up a wiki page with minimal configuration for UEC systems?18:46
erichammondsmoser: Oh, by the way, boot from EBS also launched :)18:46
smoserwhere do you see such things?18:46
erichammondhttp://developer.amazonwebservices.com/connect/ann.jspa?annID=53718:47
erichammondhttp://aws.typepad.com/aws/2009/12/expanding-the-aws-footprint.html18:47
=== dendro-afk is now known as dendrobates
smoserhttp://aws.amazon.com/about-aws/whats-new/18:48
smoserthanks. hmm... now, i wonder what we do about naming18:49
smosershould i say all new stuff goes into newly named buckets? or new region stuff goes into newly named buckets.18:49
kirklandmathiaz: what do you mean by minimal configuration?18:54
mathiazkirkland: things like RAM, CPU, disk sapce18:54
mathiazkirkland: *space*18:54
kirklandmathiaz: yeah!18:54
Aisonhmm, with ldap, everything is so complicated now :( how do I add a new schema?18:55
kirklandmathiaz: all of them are under https://help.ubuntu.com/community/UEC18:55
Aisonon 9.10 it's quite crazy18:55
kirklandmathiaz: you're looking for https://help.ubuntu.com/community/UEC/SystemRequirements18:55
mathiazkirkland: I'm writing up the hardware requirement for UEC testing18:55
smoserroot volumen on ebs is very interesting.... i wonder jjohansen if you could hibernate18:55
smoserand resume from hibernation on ebs volume18:55
mathiazkirkland: ty18:56
kirklandmathiaz: no problem; feel free to update that page if you have any other suggestions18:56
jjohansenhrmm, that would be interesting.  I haven't looked into ebs at all but as long as it could be mounted early it should be possible18:56
kirklandmathiaz: this was intended as a rough guide for our users18:56
erichammondsmoser: I don't think hibernation is an option for the new "stop" state on EC2.  It is possible to do things like change the kernel associated with the instance while it is stopped.18:58
smoserwell, yes, but if you didn't change the kernel, you could presumably resume from hibernate18:59
erichammondsmoser: "stop" is a shutdown18:59
smoserchange kernel or do other things to the volume that would result in inconsistent state for resume18:59
smoserhm.. yeah, but if started from user space19:00
erichammondsmoser: I recommend the new buckets be named the same as the existing ones, replacing "us" with "us-west-1" and I recommend grabbing them quickly.19:01
smoseri think i might own them already19:01
smosererichammond, http://paste.ubuntu.com/334039/19:03
neonfreon /wg 119:03
smoserhttp://paste.ubuntu.com/334040/ is the complete list of canonical owned buckets19:03
smosermy land grab paid off19:04
erichammondsmoser: I wouldn't change the existing "us" ones to "us-east-1".  It gets confusing to have multiple buckets for a single region.19:04
MTecknologyI've been reading up on remote rsyslog but I'm seeing that the information is passed in clear text and there's no method to actually prevent these messages from being altered19:06
smosererichammond, yeah, i think you'reright.  i think we'll stay "consistent" in that the naming convention is <basename>-<S3_LOCATION>19:06
smoserfor a region19:06
erichammondsmoser: I'm going to be mostly unavailable for the next 6-10 hours, but if you have any quick questions about migration, feel free to give me a call on my cell.19:10
erichammondbug 49203719:10
uvirtbotLaunchpad bug 492037 in ubuntu "Migrate Ubuntu AMIs to us-west-1 region" [Undecided,New] https://launchpad.net/bugs/49203719:10
smosernice. thanks, erichammond (the bug).19:11
erichammondsmoser: I'd recommend dropping whatever else you were doing today and performing the migration.  EC2 customers are now waiting on *you* to use the new region that Amazon has released.  Welcome to EC2 AMI support and maintenance :)19:12
smoser:)19:12
smoseri dont know.. its kind of nice to have people wait on me. makes me feel powerful19:12
zulcrazy chicano19:12
=== RoAk is now known as RoAkSoAx
=== hggdh_ is now known as hggdh
mathiazkirkland: could you have a quick look at https://wiki.ubuntu.com/UECTesting - in the Test/Demo Plan section19:19
kirklandmathiaz: sure19:19
mathiazkirkland: does the hardware requirements and network topology requirements look sane/comprehensible?19:19
kirklandmathiaz: yeah, totally19:23
kirklandmathiaz: you should be able to get up to 4 small guests on each of the NCs19:24
kirklandmathiaz: and host a decent number of images19:24
mathiazkirkland: hm - 4 guests per NCs - that's 8 guests max19:24
mathiazkirkland: I'd rather have 8 GB minimum then19:24
mathiazkirkland: to max out at 16 guests19:25
kirklandmathiaz: well you might be able to get away with 256MB guests19:26
kirklandmathiaz: you'll also need to tweak the eucalyptus.conf to allow for more than one vm per cpu core19:26
mathiazkirkland: well - considering that we wanna test the default configuration, I'd rather increase the RAM19:27
kirklandmathiaz: fair enough19:27
mathiazkirkland: more than one vm per cpu core -> does this mean that there should be at least 8 cores on the NCs?19:28
mathiazkirkland: to be able to run up to 8 VMs?19:28
kirklandmathiaz: well, the default configuration is only 1 VM per core19:28
kirklandmathiaz: so 8 cores would give you up to 8 vm's19:28
mathiazkirkland: hm - so the limiting factor here is the number of core, not the amount of RAM?19:29
mathiazkirkland: a small guest is 1 core + 512 M of RAM?19:29
kirklandmathiaz: it's both19:33
kirklandmathiaz: you know how ec2 has various different machine types?  -t m1.small or -t c1.medium, etc?19:34
* mathiaz nods19:34
kirklandmathiaz: in the ec2 world, the machine types that start with "m" are "memory" rich machines19:34
kirklandmathiaz: and the "c" ones are "cpu" rich machines19:34
kirkland(kind of)19:34
kirklandmathiaz: but Amazon gets to decide what those machine type/sizes are19:34
kirklandmathiaz: one of the advantages of running your own cloud is that YOU get to decide how big the machine types are19:35
kirklandmathiaz: with UEC, you can make any of your machine types any size you want19:35
kirklandmathiaz: it's in the web interface, on the configuration tab19:35
mathiazkirkland: ok - so what are the default machine types?19:35
kirklandmathiaz: there are defaults, of course, but you can trivially change those19:35
mathiazkirkland: ok - so what are the default machine types in UEC?19:35
kirklandmathiaz: let me check ...19:35
kirklandmathiaz: http://rookery.canonical.com/~kirkland/screenshot.png19:37
kirklandmathiaz: those are the defaults; you see how easy it is for an admin to change though ...19:40
mathiazkirkland: great - thanks19:41
kirklandmathiaz: i'm trying to find where the config is to change the allowed vm's per core19:41
RoAkSoAxare there any lucid server iso's available yet?19:48
kirklandRoAkSoAx: there was for a while, but they're broken now19:49
kirklandRoAkSoAx: the last good one I have was from 27 Nov19:49
RoAkSoAxkirkland, is there a place where I can get it?19:51
RoAkSoAxsince I cannot seem to find any in19:51
RoAkSoAxthe website19:51
majukHey guys. I'm having an issue with networking. My server has 2 1g/s NICs and is connected to a 1g/s switch and a 100mb/s router that routes the rest of the hosts. The switch also connects the main T1 gateway. The problem is, it seems the server is using the router as a gateway as my entire network caps out at 100kb/s, including the server.19:52
kirklandRoAkSoAx: you can download from me, if you like19:54
majukAnyone have any ideas on how to diagnose that this is actually the problem? tracepaths show the server hitting the T1 gateway first, so it looks like it's functioning correctly, but I should be able to get more than 100k/s or at LEAST 100k/s on the server AND through the router to the other hosts.19:54
kirklandRoAkSoAx: in the mean time, you should bug cjwatson or someone in ubuntu-devel about getting the daily server iso's fixed19:54
=== chuck_ is now known as zul
RoAkSoAxkirkland, I'll bug them then19:55
kirklandRoAkSoAx: cjwatson may be gone for the day, poke slangasek19:55
RoAkSoAxok will do :)19:56
* majuk cries19:57
mathiazkirkland: seems that 8 cores + 4 RAM is enough max out both RAM and nb of cores20:02
mathiazkirkland: about disk space - the capacity defined in the type is how much space is allocated to the guest?20:02
mathiazkirkland: does this take into account the cache image?20:02
kirklandmathiaz: no, it does not20:03
kirklandmathiaz: eucalyptus can be a pig about disk space, i learned20:03
kirklandmathiaz: back in the jaunty cycle, i was trying to use a 32GB SSD in one of my NCs20:03
kirklandmathiaz: i never could get an instance to launch, failed for strange, non-exception-handled reasons20:04
mathiazkirkland: right - I remember20:04
mathiazkirkland: now how much space is needed by the image cache?20:04
mathiazkirkland: I guess it depends on the image20:04
kirklandright, exactly20:04
kirklandmathiaz: and how many different images you're talking about20:04
kirklandmathiaz: each image will be cached once20:05
kirklandmathiaz: if you only have 1 image, then the requirement isn't very high20:05
kirklandmathiaz: and you can clear that cache at any time20:05
mathiazkirkland: yeah - according to my calculs, I can run up to 8 guests on one NC20:05
kirklandmathiaz: will just take longer each time you start a non-cached image20:05
mathiazkirkland: which means up to 8 different images20:05
mathiazkirkland: would 20 Gb / image cache be a good approximation?20:06
kirklandyeah, that should be safe20:06
mathiazkirkland: that would mean at least 160 GB for image caching on each NC20:06
kirklandmathiaz: our images are pretty small, now20:06
kirklandmathiaz: like under 1GB compressed20:06
mathiazkirkland: what is used on the NC - raw or qcow2?20:07
kirklandmathiaz: oh, no, you're way over shooting20:07
azteechmajuk, if memory each connection will only be as fast as the slowest connection on your network - because you are using a 100mb/s router - the network most likely will never go faster. you need to upgrade to a router that is capable of running the gigabit speed.20:07
kirklandmathiaz: the cache is just the bare image itself20:07
mathiazkirkland: oh ok - so 5 GB /image cache?20:07
kirklandmathiaz: let me check my NC20:07
mathiazkirkland: isn't the NC cpying the image at some point?20:08
azteechmajuk, meant to say if memory servers me correctly20:08
kirklandmathiaz: yes, to run the image20:08
kirklandmathiaz: the cache, though, as I understand it, is just the local, master copy of the image20:08
majukHmmmm.... so you mean since the 100mb/s router is connected through the gig switch, the gig switch will only run at 100mb/s speeds?20:08
mathiazkirkland: and that gets copy for each instance20:08
majukazteech! ^^20:09
mathiazkirkland: and there is also another file allocated for each type of instance (capacity)20:09
kirklandmathiaz: http://pastebin.ubuntu.com/334084/20:09
kirklandmathiaz: this node has run 2 different images (emi's)20:10
kirklandmathiaz: each of which is ~564M cached20:10
azteechmajuk, that is what I am saying.20:10
mathiazkirkland: what's in the emi-* directories?20:10
kirklandmathiaz: after the *instance* is terminated, eucalyptus cleans up the backing disk image20:10
kirklandmathiaz: -rw-r--r-- 1 eucalyptus eucalyptus 2.1G 2009-11-24 21:30 disk20:11
kirkland-rw-r--r-- 1 eucalyptus eucalyptus 5.9K 2009-11-24 21:31 disk-digest20:11
kirklandmathiaz: where those are sparse files20:11
kirklandmathiaz: do you want access to my NC to poke around?20:11
mathiazkirkland: right - and these are m1.small?20:12
mathiazkirkland: oh yeah - if possible20:12
mathiazkirkland: that would be easier I guess20:12
majukazteech! Alright, thanks man20:15
azteechmajuk, yw20:16
kirklandsmoser: yo20:28
kirklandsmoser: mathiaz has a question for you about uec vs. ec220:28
mathiazsmoser: yeah - seems that on UEC, there isn't any local storage in instances20:28
mathiazsmoser: IIRC on EC2 you get some scratch space on /mnt (like 100s of GB)20:29
mathiazsmoser: it seems that UEC doesn't provide that20:29
smosermathiaz, not true20:29
smoser:)20:29
smoserhold on20:30
* mathiaz stops breathing20:30
=== aubre_afk is now known as aubre
aubremathiaz: on my extra large instance I have around 17gb in /mnt20:32
mathiazaubre: on EC2?20:32
aubredoh20:32
aubrenope20:33
aubretalking UEC20:33
mathiazaubre: is /mnt a separate partition?20:33
mathiazaubre: does it use another disk?20:33
mathiazaubre: what's the kvm command on the NC?20:33
aubremathiaz: it is /dev/sda220:33
aubremathiaz: and I didn't have to do anything to make it happen, it was automatically there when I created the instance20:34
aubremathiaz: I am using the 64-bit img from the store btw20:34
mathiazaubre: right - extra large gives you 20 Gb by default20:34
=== CyberSnooP_ is now known as CyberSnooP
aubremathiaz: on ec2, doesn't what you put in /mnt go away when you close the image?20:35
mathiazaubre: yes - that's correct - it's just scratch space20:36
mathiazaubre: I don't seem to have that on my UEC instances though20:36
aubremathiaz: what size are you using?20:36
kirklandmathiaz: you're running c1.medium20:36
kirklandmathiaz: which is only a 5G instance20:36
mathiazkirkland: right - so I see a /dev/sda2 in the instance20:36
mathiazkirkland: but it's not mounted by default in the image20:36
aubremathiaz: hmm20:37
smoserok. i'm back.20:37
aubremathiaz: so it may be a function of which image you are using?20:37
mathiazkirkland: on the NC side, it's just one big 5Gb file20:37
aubremathiaz: so you could just fdisk it and mount it on your own20:37
smosereuca-describe-availability-zones verbose20:37
mathiazaubre: right20:37
smoserthat tells you how much "disk" you have20:37
smoserif your root filesystem uses all of that "disk" you dont get any more. whatever you dont use goes in /dev/sda220:38
aubremathiaz: try the images from the store, mine automagically mounted /dev/sda2 to /mnt20:38
smoserthats basically the case.20:38
smoserit "shoudl work".20:38
mathiazsmoser: ok - seems like this is what I get indeed20:39
mathiazsmoser: (except that sda2 is not mounted on /mnt by default)20:39
mathiazkirkland: which emi- were you using?20:39
smosermathiaz, what is the image ? the released karmic should do that.20:39
smoserthe lucid probably has issues (mountall)20:39
smoseror could have issues20:39
aubresmoser: mathiaz my released karmic automounts20:40
mathiazsmoser: that being said - I thought that on EC2 the scratch space on /mnt was much bigger20:40
smoseron ec2 it is.20:40
smoser160G20:40
mathiazsmoser: and euca-describe-instances verbose on EC2 would show a disk space of 160?20:40
aubresmoser: on all instance sizes?20:40
smoserhttp://aws.amazon.com/ec2/instance-types/20:40
smosereuca-describe-instances verbose is a euca specific tool20:41
smosersince you can configure your eucalyptus sizes20:41
smoseryou cannot do so for ec2 . you get what they say.20:41
mathiazsmoser: right - gotcha20:41
mathiazsmoser: so everything looks good to me.20:41
mathiazsmoser: except that the emi I'm using doesn't mount sda2 - I don't which image is actually used though20:42
smoserhttp://docs.amazonwebservices.com/AWSEC2/latest/DeveloperGuide/concepts-amis-and-instances.html#instance-types has real info on what you get on ec220:43
smosermathiaz, the rc karmic images i think had issues with that. i dont really recall, but released karmic shoudl work20:44
smoserand obviously we need to make lucid work20:44
marks256when Newegg says that piece of hardware (RAID controller) is supported under "Linux (RedHat, SuSE, Debian, Mandrake, TurboLinux, CentOS, etc.)" does that "etc" include Ubuntu? I believe ubuntu is based on Debian...20:50
ScottKUbuntu is based on Debian.20:59
ScottKThe kernels are not the same however, so it's not guaranteed to be close enough.20:59
ScottKEtc probably would include Ubuntu, but no way to know for sure.20:59
marks256ScottK, i asked on #ubuntu and everyone who replied said it should work. Thanks anyway :)21:02
MTecknologyI did this 'ufw allow proto tcp from 138.247.0.0/16 to any port 22' and now trying to make an ssh connection to my server isn't working. I did default deny as well.  My IP starts with 138.24721:16
MTecknologyMaybe it's not ufw; I'm getting this error "ssh_exchange_identification: Connection closed by remote host"21:19
MTecknologynevermind... hosts.deny21:22
unit3I'm having some weird issues with LVM on one of my servers, and some of the /dev/vg/lv links are missing.21:46
unit3they exist under /dev/mapper/whatever, but all the references in config files and stuff point to the other paths.21:46
unit3is there an easy way to get udev to recreate those paths?21:46
Aisondamn, after some uptime, I get an endless lop of these messages: Dec  3 22:47:32 mediaserv kernel: [  387.818430] saa7146: interrupt_hw(): warning: interrupt enabled, but not handled properly.(0xe7fcfbb7)21:49
Aisonboth cores are used 100%21:49
Aisonthe machine is almost not reacting21:49
unit3that's a video capture card, right?21:49
Aisonyes21:49
unit3Sounds like the driver for that is buggy. can you rmmod saa7146?21:50
unit3and if so, do things even out?21:51
Aisontrying, each keystroke takes 10 seconds ;)21:51
unit3heheh oh man, that's really messed.21:51
Aisonit's not the first time, it happens all the time ;)21:52
Aisonbefore with gentoo, now with ubuntu server21:52
unit3oh man, that's harsh. definitely a bug with that kernel module then.21:52
unit3File it on launchpad, they'll forward it upstream.21:52
unit3also, you may wish to load the module with the saa7146_debug parameter set to something > 0. That way, it should log more info about why it's dying to syslog, give you more to report.21:53
Aisonsec... I'm also ask #linuxtv, I know some guys there21:53
unit3Sure. Really sounds like a driver bug to me though, so I'm not sure there's much they'll be able to do, unless there's a different driver for that card.21:53
Hypnozanyone know how to make apt-get install nis silent (prompts for domain name currently), for use during like an unattended pxe install?23:05
billybigrigger-qq23:09
billybigriggerHypnoz, simple apt-get help shows that23:10
billybigrigger-qq No output except for errors23:10
billybigrigger-y  Assume Yes to all queries and do not prompt23:10
=== dendrobates is now known as dendro-afk
Hypnoz-y I believe is only to accept the install, not for the queries the packages prompt during their install23:16
Hypnozapt-get -y install nis  didn't work, it still prompted for a domain name23:23
Hypnozwill try -qq23:23
Hypnozstill prompts for a domain name23:23
dinger1986hello does anyone have experience of hylafax?23:30
=== dendro-afk is now known as dendrobates
=== mylogic_ is now known as mylogic
xperiahello to all. i have just successful installed red5 on my server and have now a qustion about the protocol rmtp23:39
xperiaif i do in the browser "http://mywebserver.com" it works everything like expected23:39
xperiabut if i do "rmtp://mywebserver.com" i am getting rmtp protocol not registered23:40
xperiamy question is what could be the problem ?23:40
xperiado i need to put some new lines on my bind name server for this special protocol. i suppose no as i dont has anything to do with domain names or i am wrong ?23:41
unit3rmtp is a protocol for multimedia apps. Generally web browsers don't speak rmtp.23:44
unit3what are you trying to do, exactly?23:44
xperianeed to test if my new installed red5 flash media server works good. tested some demos but all freeze my webbrowser or dont do anything till yet23:45
unit3so you've got some web pages with flash apps that are configured to point at your red5 install, then?23:46
xperiathe port 1935 for rmtp is openend on my router23:46
xperiatill yet i just try only the demos unit3 in the next day i will try to adopt my flash apps to use my new red5 server23:47
unit3ok, so you've got some demo flash apps in a web page configured to point at your red5 server?23:47
xperiaunit3: yes here is the link http://wificom.ch:5080/23:47
xperiasorry:  http://wificom.ch:5080/demos23:48
xperiathe bandwidth test application freeze my browser23:48
xperiathe chat application dont do anything. dont know why23:49
xperiaand the port testing application fails !23:49
unit3right, I see that.23:49
sysErroRI have openssl installed on my vps, and I compiled an IRCd with ssl support, yet, it can't find openSSL, can anyone help me?23:49
unit3xperia: this looks like a red5 configuration issue, but I don't know a ton about red5. you'd probably have better luck asking on their support forums or irc channel, since this doesn't seem to be a problem with your actual ubuntu server install.23:50
unit3I mean, your install is there, it's reachable, and it's complaining about stuff. That seems like a configuration issue with red5.23:50
xperiaunit3: thank you for your helpfull tips. have asked here to veryfie if something is wrong with my server. will join red5 irc chanell but this people arent very helpfull23:52
unit3yeah, I think your server's fine, this looks like a red5 configuration issue.23:52
unit3port 1935 is open, so the port tester should work, but it isn't. to me that says there's extra access controls on the red5 side blocking the connection.23:53
unit3but again, never setup red5 myself, so I'm not really certain.23:53
=== robbiew is now known as robbiew-afk
mathiazkane_: hi - is https://wiki.ubuntu.com/UECTesting - Topologies section enough to keep the ball rolling for getting the hardware?23:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!