=== robbiew is now known as robbiew-afk === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [02:01] when i try and ssh into box with public key encryption auth.log says Error attempting to add filename encryption key to user session keyring; rc = [1]. What do I need to change? [02:33] anyone aware of a decent app to graph cpu usage, network traffic and disk io? [02:36] billybigrigger: gkrellm if you want on screen graphs; mrtg or similar things using rrdtool if you want longer term trends and graphs on web pages... [02:37] billybigrigger: cricket or cacti too, for the web-based type of monitoring... [02:38] billybigrigger: munin - is in main since hardy [02:39] billybigrigger: cacti is in universe while cricket is dead upstream [03:02] billybigrigger: hobbit (now xymon) [03:07] cacti looks nice, just a little big more than what i need [03:21] mathiaz: Is cricket dead enough we want it removed? [03:22] ScottK: yeah - seems like it [03:22] mathiaz: Would you please file a removal bug then? [03:23] ScottK: yeah - that's one of the next step [03:23] ScottK: first we discuss it [03:23] Thanks. [03:23] mathiaz: Didn't we just do that? [03:23] ScottK: and then we take all appropriate actions [03:23] My threshold for removals is pretty low. [03:23] ScottK: we'll do a last round of requests for comments with the whole list [03:24] ScottK: I'm still working on potential packages to be moved out of main/universe [03:24] OK. Just finished my mail server spec. Hopefully ivoks can get a chance to look at it soon. [03:24] ScottK: cricket is in the list anyway [03:24] OK. Good. [03:24] I'm having a very hard time following that spec based on email. [03:33] !ops [03:33] Help! Channel emergency! soren, lamont, mathiaz or tom [03:34] whatchasay: Whats up? [03:34] !ops [03:34] peace dog [03:34] whatchasay: Why are you doing that? [03:35] lovely.. [03:45] ... === mushroomtwo is now known as mushroomblue [07:58] hey guys, I fubar'd my sudoers file on a remote server and I can no longer run sudo, I can't use su because there is no root password, does anyone know how else I can get a root shell? [08:03] jetole: can you reboot single user mode and access the serial console? [08:10] is there a way for me log into my friend's computer and have him watch the commands that i type into his terminal ? cuz i want to show him some stuff. [08:11] screen -x [08:11] quizme: shared screen session is the way to go, or use vnc for graphical sharing [08:11] shared screen session sounds good [08:11] how do i do that ? [08:12] what does he need to do [08:12] he is at home [08:12] quizme: ubuntuforums are great for this: http://ubuntuforums.org/showthread.php?t=299286 [08:13] thanks [09:04] i'm trying to forward messages from port 9000 on my server to port 80 on my localhost. Does anybody know how to construct that ssh command? [09:04] quizme: tried man ssh? [09:04] ssh -gNR 127.0.0.1:80:thirdreplicator.com:9000 dev@thirdreplicator.com <--- i tried that [09:04] i tried that [09:04] you're missing a -L infront of the 127 [09:05] oh [09:05] i need -L and -R ? [09:05] ssh -gNR -L 127.0.0.1:80:thirdreplicator.com:9000 dev@thirdreplicator.com [09:05] ? [09:06] you just want -N -L 80:thirdreplicator.com:9000 [09:06] what about -g ? [09:07] i'm typing this locally [09:07] not on the server [09:07] quizme: if you want to know more, you should really read a howto, like this: http://www.debianadmin.com/howto-use-ssh-local-and-remote-port-forwarding.html [09:07] google's your friend [09:08] ssh -N -L 80:thirdreplicator.com:9000 dev@thirdreplicator.com [09:08] Privileged ports can only be forwarded by root. [09:08] i have been googling for hours [09:08] and manning for hours [09:08] that's why i'm here [09:08] you didn't type 'ssh port forwarding howto' then [09:08] quizme: you can forward only non-privileged ports as a normal user [09:08] so, use 1080 instead for example [09:08] google is not my friend. [09:09] he is my enemy at this point [09:09] there's bing ;) [09:09] lol [09:09] take a look at the link i gave you, it walks you through step by step [09:09] if you still can't make it work, feel free to ask here [09:10] thanks [09:10] reading.. [09:10] quizme: "ssh -NL 8080:127.0.0.1:80 fs" connects 127.0.0.1:80 on fs to 8080 on the ssh client. [09:11] quizme: I suspect you just got the 80 and 9000 the wrong way around [09:12] oh [09:12] yeah probably [09:13] and i don't know the difference between -L and -R [09:13] let me try [09:14] quizme: -L connects a local port to a remote port, -R connects a remote port to a local port. [09:14] quizme: you almost always want -L [09:15] are you assuming this command is run on the server or on my laptop ? [09:15] quizme: laptop [09:15] ok [09:15] that's what i'm assuming [09:16] e.g. ssh -fNL 8080:127.0.0.1:80 www.foo.com && sensible-browser http://localhost [09:17] maybe i should explain what i am trying to do [09:17] i'm trying to suck down messages sent to port 9000 on my server down to my localhost's port 80 (apache) server. [09:18] quizme: for that, you want -R [09:18] ok.. hehe [09:18] kane, I already went to the data center and modified the kernel line to have init=/bin/bash [09:18] back already [09:19] jetole: IME "single" or "rescue" is less hassle (if they work) [09:19] twb, yeah I didn't try rescue cause I was kinda under the suspicion that it would need a root passphrase which there isn't one [09:20] jetole: Ubuntu doesn't ask [09:20] you can always get away with single [09:20] if you dont know the root pw [09:20] kwork: no, on a normal system single will still require you to enter the root password [09:20] ssh -NR thirdreplicator.com:9000:127.0.0.1:80 dev@thirdreplicator.com [09:20] does that look right ? [09:20] twb well for my server thats cool [09:21] kwork: Ubuntu is weird in that it doesn't [09:21] they are all in a locked rack [09:21] twb, hmmmz im pretty sure you can get away without root on debian awell [09:21] It annoys me, even though I know that if they have physical access you're screwed in other ways. [09:21] twb, i remember doing smt like that [09:21] kwork: if root's password is the null password (not the same as NO password), then Debian's single will say "hit enter for a maintenance shell" instead of "enter root password for a maintenance shell" [09:22] but maybe you needed cd for it [09:22] twb thanks! [09:22] does anyone know how I can setup open-iscsi to map to a specific disk on each boot or a static path to access it by? [09:22] oh wait [09:22] kwork: yes, you can also do "rescue" from a d-i CD [09:22] * jetole looks at uuid [09:22] kwork: d-i rescue doesn't require a root password, on ubuntu or debian [09:22] twb, basicaly if i can chroot into the system i should be able to change the pw right ? [09:22] twb: it worked! [09:22] jetole: /dev/disk/by-uuid? [09:23] thats what I am thinking [09:23] jetole: run vol_id on the device name you already know [09:23] I see the UUID there and I am assuming they consistantly map to the same iscsi drives on each boot [09:23] twb: I don't have vol_id on ubuntu server 9.10 [09:23] jetole: it's part of udev! [09:24] jetole: even 8.04 has it [09:25] twb: is it a bin? volname is the only thing bash tab completes starting with vol and `which` comes back empty [09:25] * jetole googles it and looks for a man page so I at least know what it did [09:26] ah [09:26] jetole: are you still in init=/bin/bash? [09:26] oh no [09:26] jetole: vol_id should be in /sbin/ [09:26] I went to the data center and am now back at my office [09:27] twb, bash won't tab complete it for "vol" and which doesn't return anything [09:27] Shrug [09:29] oh shit [09:29] /dev/disk/by-path/ [09:29] that shows the full iqn names [09:30] that is something better since I have vm booting off iscsi [09:31] Shrug === joseph_ is now known as crohakon [11:44] hello to all. is here somebody with experince hot to install andconfigure red5 [11:55] Hi all, where are samba passwords usually managed? [12:02] jussi01: that depends how you configure samba [12:03] RoyK: hrm, well thats frustrating as Ive no idea how the person before me configured it. [12:05] jussi01: just look in smb.conf [12:05] it's pretty self-explainatory after having read through that and its comments [12:07] right, ive just been reading man pages, I can change a logged in users password with smbpasswd but how do I list all of the users? [12:11] /3 [12:17] Nevermind, I got it figured. :) === chuck_ is now known as zul [13:01] morning === rgreening_ is now known as rgreening [13:11] New bug: #481292 in ntp (main) "often see 'starting/stopping ntp server' note before xsplash (dup-of: 489585)" [Low,Incomplete] https://launchpad.net/bugs/481292 [13:42] Is there any easy way to have all my logs in one central location? [13:42] syslog central server ? [13:42] and all servers sending syslog to that box [13:43] nifty - thanks [13:47] New bug: #484698 in ntp (main) "ntp package should not install a drift file" [Wishlist,Triaged] https://launchpad.net/bugs/484698 [13:51] kwork: That looks amazingly simple - http://news.softpedia.com/news/Setting-Up-a-Central-Syslog-Server-44063.shtml [13:51] yeah followed the same tutorial some days ago [13:51] works like a charm :) [13:52] :D [13:52] okey actualy lies [13:52] or atleast karmic has rsyslogd [13:52] but its really similar [13:58] I love ufw + apparmor + denyhosts + central logging [13:58] don't have the logging server just yet though [13:58] kwork: where will the logs be stored? [14:02] MTecknology, you define file per host [14:03] (ufw in lucid will ship an rsyslog configuration) [14:04] ok, thanks [14:06] nijaba, or anyone else maybe can answer [14:06] i'm under the impression that backports do not get "official canonical support" for the lifetime of normal support [14:06] is that correct? [14:06] smoser: correct on backport support [14:07] thanks [14:11] smoser: Generally if there's a problem with a backport, we just update it with a newer backport to fix the problem. [14:19] hello to all ! anybody here how can help me with virtual hosting ? === robbiew-afk is now known as robbiew === dendrobates is now known as dendro-afk [15:23] xperia: the question seems to be missing from the backlogs [15:26] MTecknology: have solved it thank you a lot ! === hggdh_ is now known as hggdh === u0324_ is now known as wbrb [16:20] Hello, i'm using racoon to establish ipsec tunnels..can some one tell me how to remove a SA manullly... [16:20] I nknow I can use racoonctl to remove isakmp sa'...based on peer address... [16:20] jjohansen: ping [16:20] but this doesn't seem to work with SA's.... [16:21] Also, I've found it very difficult to find any documentation on ipsec-tools and racoon...am I using something tht is archaic?...wht do ppl usually go for?...OpenSwan? [16:25] hmm..does anybody work on ipsec here? [16:28] What's the proper way to prevent "localhost [127.0.0.1]" mentionings in outgoing mail with postfix ? [16:42] CyberSnooP: Why do you care? [16:43] Mail I'm sending gets immediately marked as spam. [16:43] (I've just started sending registration confirmation mails to users) [16:44] My SPF-records are okay, reverse DNS is checked and lot's of servers seem happy (like gmail). But Hotmail and some universities immediately throw away the message [16:44] (without anybody marking it as junk, as it's the first time we mail them.. new server, new website etc..) [16:44] So, I've read that spam-scanners care about "localhost" mentionings [16:49] ScottK: Does that make any sense or does it make clear that I shouldn't run a mail-server at all :P [16:50] You can remove them with Postfix header checks, but be careful as it's done with regular expression matching, so it's easy remove more than you want [16:50] I think it's unlikely to help, but I've heard other people give similar theories. [16:50] People do weird stuff to try to filter spam, so who knows. [16:54] !ufw [16:54] Ubuntu, like any other linux distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command (see https://help.ubuntu.com/community/Uncomplicated_Firewall_ufw), or 'iptables' (https://help.ubuntu.com/community/IptablesHowTo). GUI applications such as Firestarter/Gufw (Gnome) or Guarddog (KDE) also exist [16:54] Is there a way to hold a package at a specific version, so that when apt checks for updates, it ignores updates to that particular package? [16:55] adurity: apt-get {hold,unhold} [16:55] thank you! [16:55] :) [16:58] hey guys im just wondering [16:58] with ufw is there a way i can allow access on a range of ports [16:59] eagles0513875: you'd need to specify each individually [16:59] MTecknology, even better, I found the Forbid option [16:59] MTecknology: actually it depends on the version [17:00] eagles0513875: what version of ufw? [17:00] jdstrand: 0.29 [17:00] the server is running karmic [17:00] eagles0513875: yes, ufw supports multiport rules [17:01] jdstrand: oh.. nifty [17:01] how do i do that im follwoing the ufw link the bot provides [17:01] eagles0513875: eg: ufw allow proto tcp from any to any port 80,443,8080:8090 [17:01] https://help.ubuntu.com/community/UFW?action=show&redirect=Uncomplicated_Firewall_ufw [17:01] eagles0513875: it's in the man page [17:01] so basically sudo ufw allow 6000-7000 [17:01] eagles0513875: man 8 ufw [17:02] eagles0513875: you must use the extended syntax [17:02] ScottK: header_checks succeded in removing the header. But at least hotmail still doesn't seem to like my e-mails (and they don't say why) [17:02] eagles0513875: eg: [17:02] ufw allow to any port 6000-7000 [17:03] CyberSnooP: Hotmail is very random. No one outside Hotmail really knows how it works, AFAIK. [17:03] MTecknology, eagles0513875: the ufw features list can be seen here: https://wiki.ubuntu.com/UncomplicatedFirewall#Features [17:03] Yeah, well I hope other mail-servers will start to work due to this change at least. [17:04] Thanks for the tip anyway :) [17:06] jdstrand: i did like the example you gave me but its saying bad syntax in regards to 6000-7000 [17:07] eagles0513875: oops [17:07] ufw allow to any port 6000:7000 proto tcp [17:07] eagles0513875: ^ [17:07] jdstrand: ahhh ok ty [17:07] eagles0513875: assuming you want tcp... [17:07] sry for the 20 questions im green when it comes to ufw [17:07] ya === aubre is now known as aubre_afk [17:41] Having trouble getting Postfix+Dovecot to listen on port 25.. SSL and TLS say hello fine, but basic SMTP is totally nonresponsive... anybody run into this before? [17:42] could it be that your ISP is blocking it? [17:42] mgpcoe: that's usually the issue [17:43] lamont: Thought that, but I tried SSHing to an outside server and going in that way. [17:43] lamont: Same result, and I'm sure I've been able to get in on port 25 from that server in the past. [17:44] Oh, FFS, when I tried doing it from the server, using the public IP I got right in.. this just became a whole other problem, I think. [17:46] Does Hardy do any filtering on 25 by default? [17:46] ufw might, but installing postfix should open that [17:47] what does lsof -ni :25 have to tell us (as root) [17:48] lamont: Gives me two lines, one on IPv4, one on IPv6, both NODE: TCP and NAME: *:smtp (LISTEN) [17:48] lamont: And they're both running as root, if that helps; command is `master' [17:56] master = postfix [17:57] mgpcoe, iptables blocking it? [17:59] and (just for completeness...) does the IP you're trying and failing to connect to exist on the machine, or somewhere else (I hate it when I do that) [17:59] billybigrigger: I'm not sure; how would I find out? Last time I tried listing anything with iptables, I couldn't make heads or tails of the information. [18:00] lamont: Yeah, usually I just enter the domain and let it resolve itself. IP matches all the way across the board. [18:01] and "ip route get $IP" points where you think it should? (lo, I expect..) [18:01] mgpcoe: iptables -t nat -nvL; iptables -nvL [18:02] and simplest to toss that output into paste.ubuntu.com [18:02] lamont: ip route tells me "local IP.IP.IP.IP dev lo src IP.IP.IP.IP" [18:04] lamont: http://paste.ubuntu.com/333984/ [18:06] mgpcoe: so what that says is you have no iptables rules, and are using the default (accept) for everything [18:06] which then gets to "what command are you using to talk to it?" [18:07] Right now, just telnet x.x.x.x 25 [18:08] I just did a fresh insta and configure of pure-ftpd and am unable to logon, here is the output: http://pastebin.com/d4eb60235 [18:08] lamont: which merrily reports "trying x.x.x.x..." and never gets there. I'm tailing /var/log/mail.log on the server and it never even reports the attempt. [18:09] mgpcoe: so... "tcpdump -ni lo port 25" as root and then telnet to the IP... [18:10] should show the normal SYN SYN+ACK ACK - and at that point, I suspect that postfix is trying to resolve your source IP and is failing miserably - lets look at /var/log/mail.log, and /var/spool/postfix/etc/resolv.conf and see if they tell us anything useful [18:10] and, (seriously), see if leaving it alone for 5 minutes makes a difference at all === chuck_ is now known as zul [18:11] lamont: Doesn't show a thing... I'm starting to wonder if the external server I'm using to access port 25 is crippled on that port too.. [18:12] well, if you're talking on lo, you should see yoursefl [18:12] Aha, righto. One second. [18:12] There it is. [18:13] lamont: When I connect from the server itself, it doesn't have an issue [18:14] lamont: Problem is I need to be able to connect to this thing from the cloud, with smtp auth.. and Evolution and Thunderbird won't even connect. [18:14] mgpcoe: Use Port 587 (submission) [18:18] ScottK: I do, and SMTPS for dumber clients, but when Evolution can't even figure out what auth mechanisms are supported, even I know there's something Wrong. [18:19] You're mixing different problems then. [18:19] Do you need port 25 or do you need MUA's to be able to submit? [18:21] the cloud blocks port 25, so that spammers don't spam from the cloud. [18:21] ScottK: Well, I'm trying to set up an SMTP server for a business client so that they can send email from their domain. The server's a virtual host somewhere in, I don't know, Texas, so in order to let my client use the server for their outgoing mail, but not let just anyone do it, I'm trying to set up authenticated SMTP. I can get into it with 465 and 587, and they appropriately bitch about it, but it looks like [18:22] like most ISPs, outbound port 25 gets blocked... enable submission (587) and use that [18:22] (and by bitch about it, I mean they give me the relay access denied message, as they should) [18:25] If I start opening ssh to certain IP's with ufw; am I safe to assume anything not in the ip ranges given will be blocked; or like hand written iptables, do I need to specify a default reject ? [18:26] MTecknology: man ufw. You get to choose. sudo ufw default deny incoming # is probably what you want. [18:26] exit [18:26] oops :P [18:27] jmarsden|work: thanks :) [18:28] MTecknology: You're welcome... but try to get in the habit of reading the man page *before* asking on IRC :) [18:29] jjohansen: ping when you are around I got a kernel package question for you [18:29] I have a ppp0 device connected to a server. When running iptables -t nat -A PREROUTING -i ppp0 -j accept ; it gives no hits for packets accepted even though I can see packets coming in through tcpdump -i ppp0. This is very confusing because I'm trying to dnat the incoming packets but the nat table doesnt seem to see them [18:30] lamont: I'm starting to wonder if it might be worth it to just gun all the email set it up and do it again from scratch. I've been working from, like, six different tutorials because nothing's been able to get it completely set up... [18:30] zul: whats the question? [18:31] jjohansen: im suppose to be reviewing an asterisk MIR and it depends on a couple of kernel-packages such as zaptel is there a linux-restricted-modules package for lucid anymore or is all dkms? [18:31] mgpcoe: delivering to port 25 from the cloud is a non-starter. figuring out whether or not the ISP blocks outbound to port 25 is the first step of any such attempt [18:31] zul: all dkms [18:32] jjohansen: crap [18:32] jjohansen: ok thanks ;) [18:32] yeah, its a pain [18:33] have you tried asterisk at all? Do we need to up the kernel Hz for it? [18:33] no i havent i dont have a landline [18:33] hehe me neither [18:34] lamont: I'm 99% certain that in one of the business partners' case it does, but I don't know what ISP the other uses. I figure, if Gmail and my old university can get it set up that I can use their outgoing servers instead my ISP's, it's not out of the realm of possibility for me to set the same thing up... Apparently it's just Really Exceedingly Difficult, or I'm missing something. [18:35] that's what god invented the submission port for. If you're an MTA, you use port 25, if you're submitting mail outbound, then you use submission. [18:36] New bug: #492026 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 (not installed) failed to install/upgrade: подпроцесс новый сценарий pre-installation возвратил код ошибки 1" [Undecided,New] https://launchpad.net/bugs/492026 [18:37] lamont: So, users from the Tubes would be connecting to submission rather than smtp, right? Do I have to specify to the clients that they need to use a different port? [18:37] yes, and yes. [18:38] at least, that's my expectation [18:38] and experience [18:38] afk [18:38] lamont: Oh, I was afraid of that... so Evolution's probably trying to make the auth mechanisms connection over smtp, because I never see that connection. [18:41] jjohansen, fyi [18:41] IMAGE aki-b8de3cd1 ubuntu-kernels-testing-us/ubuntu-lucid-i386-linux-image-2.6.31-302-ec2-v-2.6.31-302.7-kernel.img.manifest.xml [18:41] IMAGE aki-9436d4fd ubuntu-kernels-testing-us/ubuntu-lucid-i386-linux-image-2.6.32-300-ec2-v-2.6.32-300.1-kernel.img.manifest.xml [18:42] those went up last night, and the latest amis have them as their kenrel. just verified that [18:42] ami-4037d529 ubuntu-images-testing-us/ubuntu-lucid-daily-i386-server-20091203.manifest.xml [18:42] boots fine [18:42] nice :) [18:44] hm.. my aki pastes above were supposed to be i386 and amd64, not old i386 and new i386, but you get the picture. the -2.6.32-300 kernels are up there now. [18:44] smoser: The S3 "location" is "us-west-1" for AMIs in the "us-west-1" EC2 region. This means we chose a suboptimal (inconsistent) naming scheme for the us-east-1 buckets, but life goes one. [18:45] this is released information ? link ? [18:45] Yep, very little fanfare [18:45] does suck that i chose sub-optimal naming :-( [18:45] kirkland: whody! [18:45] come si come ca [18:46] kirkland: did you write up a wiki page with minimal configuration for UEC systems? [18:46] smoser: Oh, by the way, boot from EBS also launched :) [18:46] where do you see such things? [18:47] http://developer.amazonwebservices.com/connect/ann.jspa?annID=537 [18:47] http://aws.typepad.com/aws/2009/12/expanding-the-aws-footprint.html === dendro-afk is now known as dendrobates [18:48] http://aws.amazon.com/about-aws/whats-new/ [18:49] thanks. hmm... now, i wonder what we do about naming [18:49] should i say all new stuff goes into newly named buckets? or new region stuff goes into newly named buckets. [18:54] mathiaz: what do you mean by minimal configuration? [18:54] kirkland: things like RAM, CPU, disk sapce [18:54] kirkland: *space* [18:54] mathiaz: yeah! [18:55] hmm, with ldap, everything is so complicated now :( how do I add a new schema? [18:55] mathiaz: all of them are under https://help.ubuntu.com/community/UEC [18:55] on 9.10 it's quite crazy [18:55] mathiaz: you're looking for https://help.ubuntu.com/community/UEC/SystemRequirements [18:55] kirkland: I'm writing up the hardware requirement for UEC testing [18:55] root volumen on ebs is very interesting.... i wonder jjohansen if you could hibernate [18:55] and resume from hibernation on ebs volume [18:56] kirkland: ty [18:56] mathiaz: no problem; feel free to update that page if you have any other suggestions [18:56] hrmm, that would be interesting. I haven't looked into ebs at all but as long as it could be mounted early it should be possible [18:56] mathiaz: this was intended as a rough guide for our users [18:58] smoser: I don't think hibernation is an option for the new "stop" state on EC2. It is possible to do things like change the kernel associated with the instance while it is stopped. [18:59] well, yes, but if you didn't change the kernel, you could presumably resume from hibernate [18:59] smoser: "stop" is a shutdown [18:59] change kernel or do other things to the volume that would result in inconsistent state for resume [19:00] hm.. yeah, but if started from user space [19:01] smoser: I recommend the new buckets be named the same as the existing ones, replacing "us" with "us-west-1" and I recommend grabbing them quickly. [19:01] i think i might own them already [19:03] erichammond, http://paste.ubuntu.com/334039/ [19:03] /wg 1 [19:03] http://paste.ubuntu.com/334040/ is the complete list of canonical owned buckets [19:04] my land grab paid off [19:04] smoser: I wouldn't change the existing "us" ones to "us-east-1". It gets confusing to have multiple buckets for a single region. [19:06] I've been reading up on remote rsyslog but I'm seeing that the information is passed in clear text and there's no method to actually prevent these messages from being altered [19:06] erichammond, yeah, i think you'reright. i think we'll stay "consistent" in that the naming convention is - [19:06] for a region [19:10] smoser: I'm going to be mostly unavailable for the next 6-10 hours, but if you have any quick questions about migration, feel free to give me a call on my cell. [19:10] bug 492037 [19:10] Launchpad bug 492037 in ubuntu "Migrate Ubuntu AMIs to us-west-1 region" [Undecided,New] https://launchpad.net/bugs/492037 [19:11] nice. thanks, erichammond (the bug). [19:12] smoser: I'd recommend dropping whatever else you were doing today and performing the migration. EC2 customers are now waiting on *you* to use the new region that Amazon has released. Welcome to EC2 AMI support and maintenance :) [19:12] :) [19:12] i dont know.. its kind of nice to have people wait on me. makes me feel powerful [19:12] crazy chicano === RoAk is now known as RoAkSoAx === hggdh_ is now known as hggdh [19:19] kirkland: could you have a quick look at https://wiki.ubuntu.com/UECTesting - in the Test/Demo Plan section [19:19] mathiaz: sure [19:19] kirkland: does the hardware requirements and network topology requirements look sane/comprehensible? [19:23] mathiaz: yeah, totally [19:24] mathiaz: you should be able to get up to 4 small guests on each of the NCs [19:24] mathiaz: and host a decent number of images [19:24] kirkland: hm - 4 guests per NCs - that's 8 guests max [19:24] kirkland: I'd rather have 8 GB minimum then [19:25] kirkland: to max out at 16 guests [19:26] mathiaz: well you might be able to get away with 256MB guests [19:26] mathiaz: you'll also need to tweak the eucalyptus.conf to allow for more than one vm per cpu core [19:27] kirkland: well - considering that we wanna test the default configuration, I'd rather increase the RAM [19:27] mathiaz: fair enough [19:28] kirkland: more than one vm per cpu core -> does this mean that there should be at least 8 cores on the NCs? [19:28] kirkland: to be able to run up to 8 VMs? [19:28] mathiaz: well, the default configuration is only 1 VM per core [19:28] mathiaz: so 8 cores would give you up to 8 vm's [19:29] kirkland: hm - so the limiting factor here is the number of core, not the amount of RAM? [19:29] kirkland: a small guest is 1 core + 512 M of RAM? [19:33] mathiaz: it's both [19:34] mathiaz: you know how ec2 has various different machine types? -t m1.small or -t c1.medium, etc? [19:34] * mathiaz nods [19:34] mathiaz: in the ec2 world, the machine types that start with "m" are "memory" rich machines [19:34] mathiaz: and the "c" ones are "cpu" rich machines [19:34] (kind of) [19:34] mathiaz: but Amazon gets to decide what those machine type/sizes are [19:35] mathiaz: one of the advantages of running your own cloud is that YOU get to decide how big the machine types are [19:35] mathiaz: with UEC, you can make any of your machine types any size you want [19:35] mathiaz: it's in the web interface, on the configuration tab [19:35] kirkland: ok - so what are the default machine types? [19:35] mathiaz: there are defaults, of course, but you can trivially change those [19:35] kirkland: ok - so what are the default machine types in UEC? [19:35] mathiaz: let me check ... [19:37] mathiaz: http://rookery.canonical.com/~kirkland/screenshot.png [19:40] mathiaz: those are the defaults; you see how easy it is for an admin to change though ... [19:41] kirkland: great - thanks [19:41] mathiaz: i'm trying to find where the config is to change the allowed vm's per core [19:48] are there any lucid server iso's available yet? [19:49] RoAkSoAx: there was for a while, but they're broken now [19:49] RoAkSoAx: the last good one I have was from 27 Nov [19:51]