/srv/irclogs.ubuntu.com/2010/01/04/#ubuntu-server.txt

bmunatI use postfix and amavis and have been getting cron emails from my backup machines erroneously labeled as spam. I've added the sender addresses to 51-whitelist with a value of -15.0, but this seems to be ignored. Does anyone know how I get amavis to use the sender whitelist in 51-whitelist?00:27
ScottKbmunat: Just out of curiousity, why 51-whitelist instead of 50-user?00:41
bmunathmm, I think something (tutorial, etc.) told me to do it that way00:44
bmunatguess I could try putting the map in 50-user00:44
ScottKI'm pretty sure it won't matter, just curious.00:48
ScottKbmunat: Would you pastebin your 51-whitelist?00:49
bmunatargh, it keeps saying it tripped the spam filter... will try pastie00:52
bmunathttp://pastie.org/76547600:52
bmunati'm not super-great with perl syntax... maybe I'm missing something. though amavis starts up, so I don't think I have a syntax error00:53
bmunatdo you know if matching a whitelist entry should make the spam headers not be added to the mail?00:54
bmunatcuz after moving the contents of 51-whitelist into 50-user, I still see spam headers on a test mail from my backup machine00:54
ScottKbmunat: Look at lines 145 - 155 of 20-user.  What you have there is incomplete.00:57
bmunatScottK: 20-debian_defaults you mean?00:58
ScottKbmunat: Yes.  Sorry.00:58
bmunatahhh... I need to replace the entire data structure00:58
bmunatduh, that makes sense00:59
ScottKDon't forget you'll need some more bits at the end too.01:00
bmunatyeah, got them... and a new test email from the backup machine still has the spam headers, but the score is much lower (close to -15, which is what I set it to), so it appears to be working01:05
bmunatthank you so much for your help01:05
ScottKbmunat: You're welcome.01:05
zzz2009?02:51
=== zzz2009 is now known as jla
jlatest02:56
jmarsdenjla: This is a channel for Ubuntu server support, not testing IRC... do you have a specific question about Ubuntu server?02:56
jlaSorry, I thought my client had died02:57
jlaat the moment just lurking02:57
jmarsdenjla: /ping is the way to check if you are still talking to the IRC server...02:58
jlathanks02:58
jmarsdenYou're welcome.02:58
jlai do have a ? why are so many of the config files for things like amavis split up into so many bits02:59
bmunatso the updates can replace standard files03:00
bmunatand leave your customized files03:00
ScottKjla: The amavis thing really confused me at first, but now I really like it.03:01
ScottKIf it was all one big config file, when you changed anything, you'd almost certainly end up having to sort out maintainer changes versus yours on upgrades.  The way they waterfall if you've set something specific you want, maintainer config changes won't affect that.03:02
jlaI have been trying to setup amavis/clamav/spamassassin and I am finding the chopped up files annoying, eg I thought i had config'd not to quarantine anything only to find a whole bunch of files in thq spamass qu directory. I didn't even look just deleted the whole damn thing03:02
jlabacj in 503:03
bmunatoh yeah... my quaratine dir was several gigs before i noticed it was doing that :-(03:03
bmunati just added a weekly cron job to delete everything over a week old03:04
bmunattho I've never actually had to retrieve something from quarantine....03:04
ScottKjla: I believe that the setup in the Ubuntu server guide works reasonably well.  Even if it's not ideal for you, it's a good basis to start from.03:06
bmunatthis may be more of a mysql question, but I'm trying to get rid of the logrotate errors for the mysql logs on an ubuntu system (i.e. http://www.lornajane.net/posts/2008/Logrotate-Error-on-Ubuntu) and even though i've added the user to mysql i still get the logrotate errors...03:08
jlanot sure I agree, i think they are far too loose on things like spam/virii etc. we work on the basis that if it even smell like spam... discard it. why waste resources both human and electonic03:08
bmunati even did "GRANT ALL ON *.* TO 'debian-sys-maint'@'localhost' IDENTIFIED BY PASSWORD 'foo'" and flushed privileges.... and the debian-sys-maint user still can't connect03:09
jlaWhen I first started looking for a server distro I liked the sound of ubuntu, but the more I try to admin it the less enamored I am03:10
jlaThe quarrantine (sp) example, why should bmunat have to run a cron job to clean it up, why not let the admin decide if they want to qu stuff or not.03:16
HFSPLUSUBUNTU AND LINUX ARE CANCER IN A SENSE IF YOU USE IT YOUR BODY WILL GET SEPSIS AND YOU WILL GET CANCER EVERYWHERE IN YOUR BODY\03:28
HFSPLUS!ops03:28
ubottuHelp! Channel emergency! soren, lamont, mathiaz or tom03:28
HFSPLUS!staff'03:29
HFSPLUS!staff03:29
ubottuHey nalioth, jenda, rob, SportChick, seanw, Dave2, Christel, tomaw, Gary, PriceChild, niko or stew, I could use a bit of your time :)03:29
jlaScottK: I can see some of the reason for separating some items, but they seem to have added things like whitelist in out of the way places.03:30
ScottKjla: Don't worry about it.  Put your own whitely in 50-user and it wil over-ride the maintainers.03:31
=== Mike||gone is now known as Mike_lifeguard
jlaScottK: I guess so, but not having all the default config in one place makes trying to determine what needs to be over-ridden a pain03:39
jtajijla: this is how Debian does it03:40
jtajiit does make life easier once you understand the system03:40
jlajtaji: I not sure about that. the example I have been using is amavis-new quarantine directory, I don't want it or need it. if it smells like spam/virii we don't accept it, but the amavis setup from debian/ubuntu seems to work on the basis that spam should br delivered if not to the recipient then some where else why!!!!!03:45
jlaSpam should be dumped asap, not delivered03:47
jlaenough of my rantings03:48
jlaback tolurking03:48
jtajihehe.. tis ok03:49
jtajiyou certainly can't make everybody happy with defaults, either03:50
qman__I really like the way config files are split up, it's one of the more important reasons I use ubuntu04:10
qman__rather than one massive unmaintainable file, it's grouped logically04:10
qman__and you can still search for a directive with a grep -R if you don't know where it is04:11
jlaqman: I might agree if all the config files were in one place, again the example of amavis, most of the config files are in /etc/amavis, however at least two files are in /usr/shared/amavis/conf.d.04:34
jlaqman: if it were only amavis I might just mutter under my breath, however there are many packages that have been messed about. this creates problems most importantly it is difficult to get support from the developers. and documentation provided by the developers no longer applies04:36
=== Mike_lifeguard is now known as Mike||gone
jtajijla: you mean /etc/amavis/conf.d/04:50
jtajioh I see them04:51
jtajihttp://packages.ubuntu.com/karmic/all/amavisd-new/filelist04:52
jtajiI don't use it or have it installed to check.. but I'd assume those two aren't read in, and are meant to be copied into /etc/amavis/conf.d/ if desired, but aren't by default for some reason04:53
jtajiI suspect that's the case, or a bug should be filed, because all system config files go in /etc, period04:54
qman__yeah04:58
jlajtaji: they are read, the second turns off the various checks which are then turned on or not in 15-content_filter_mod. The fact that they are hidden and not in /etc/amavis/conf.d really worries me. What else are they hiding, if they don't respect total transparency we might as well stay with M$ and their tricks.04:59
jlajtaji: the stuff in /var.... is not an accident04:59
jtajinow you're just being silly, it's clearly transparent as you've found it05:01
jmarsdenjla: For full transparency, as always, the best documentation is the source code.  If you 100% need to, read it.  Then ask Microsoft to do let you read theirs, and see how far you get.05:02
jtajiand as for amavis defaults, as far as I know it's more common to not drop email into /dev/null, but rather to quarantine05:02
jlaI only found it by accident, when something did not make sense, so i went looking.05:03
jlajamrsden: reading the code is fine, if you are a programmer, however how many server admins are programmers and would understand the source? as to M$ that was my point.05:07
twbjmarsden: if you pay Microsoft enough -- if, for example, you're a multinational or a G8 government, you can sometimes get access to the source.05:07
jmarsdentwb: True, but neither jla nor I are likely to meet those criteria.05:07
twbJust mentioning it for completeness :-)05:07
jlajtaji: why expend time and resources on things like spam and virii. we are seriously considering requiring pre-registration in order to send us email.05:09
jmarsdenjla: At minimum, a good sysadmin understands the software packaging system that his systems use, and so can quickly and easily see where any given package puts its files.  If that's not enough for you, which apparently it isn't or you wouldn't be complaining about amavis, then... time to read the source.05:10
jtajijla: fair enough, I'm just not sure your organization's requirements are in the majority05:10
jlajmarsden: my concern is that in several cases I have found that there appears to be an attempt hid some of the files involved in packages I wish to use. i other cases the packages have been modified in ways that the original developers do not support, which can lead to other problems.05:13
jmarsdenjla: Hidden files?  That dpkg -L PACKAGENAME does not show?  Really?05:13
jmarsdenOr that you cannot see from looking at the source package if you care enough about the details to do that?  Are these "hidden" files not mentioned anywhere at all in the package documentation?05:15
* jmarsden installs amavis in a VM to check on this claim for himself...05:15
jtajijla: bottom line, FHS states that /usr/share/ hierarchy is for architecture independent data, so if those files aren't intended to be modified, then it might be the right spot05:16
jtajibut sometimes it's a judgement call... and you might have found that different distros make different decisions sometimes05:16
jlajmarsden: I think you will find that at least acouple of files in amavis are not in the documentation and are not with the other config files.05:18
jmarsdenThe two files in /usr/share/amavis/conf.d/ are specifically not to be edited, as comments within them state.  So they are architechure-independent data files, and so are in a perfectly reasonable location per the FHS.  As for being hidden -- they aren't hidden.  Their names do not start with a leading period, their perms allow everyone to read them, and dpkg -L avamis-new clearly lists them.05:23
jmarsdenLastly, they *are* mentioned in the documentation, see /usr/share/amavisd-new/README.Debian05:25
ruben23hi05:25
jmarsdenjla: As I said earlier: "a good sysadmin understands the software packaging system that his systems use, and so can quickly and easily see where any given package puts its files"05:26
jlajmarsden: the documentation for amavis-new is on the amavis-new web site, NOT on the debian site after all amavis-new is not devloped by debian, just A05:26
jmarsdenjla: The documentation foe the amavisd-new Debian package is on your system when you install that package.05:27
jmarsdenIf you want to install it from a source tarball and use the upstream web site docs, that is your choice.05:27
jlaas postfix is documented on the postfix web site. If you are not the developer then pissing arround with what you don't own is bad manners. If you want a change then you should suggest then to the develops, contibute the code but to crap on somnebody elses rug is not nice!05:29
jmarsdenjla: If you do not understand the value of a packaging system, use a distribution that does not use one.  If you use Ubuntu, a good sysadmin would understand the Ubuntu packaging system as part of their sysadmin responsibilities.05:31
jmarsdenBTW, the documentation for the Ubuntu postfix package is installed with it and more comes in the related postfix-doc package.05:32
jlajmarsden: we can argue this till the cows come home. I happen to think that the modification that debian/ubuntu make just make life more difficult not easier.05:37
JanCtwb: actually, even students can get access to a lot of Microsoft sourcecode if they need it for something study-related (& after signing a very strict NDA)05:38
JanCjla: <offtopic>"virii" is a non-existent word</offtopic>05:39
jmarsdenjla: Your claim that "the" documentation for a Ubuntu package which you just installed is by definition on the upstream web site is clearly inaccurate, and demonstrates a total misunderstanding of what a software package is, IMO.05:39
ScottKjla: I can understand feeling that way.  I thought so initially too.05:39
ScottKjmarsden: I think you're being a bit aggressive towards someone that is new here.05:40
JanCreading README.Debian is often a good start  ☺05:40
jmarsdenScottK: Probably.  He made a claim he can't substantiate regarding this whole issue of "hidden" files, comparison with MS, etc etc... I'm not sure that was the best way to start out as a newcomer, if such he is.05:41
JanCREADME.Debian (or README.Debian.gz) should explain Debian/Ubuntu-specific configuration stuff05:41
ScottKjmarsden: Certainly, but you've been around here long enough to know better.05:42
jmarsdenJanC: In the case being discussed, it does.  But it was claimed that this is not "the documentation".05:44
jlaI agree, however if I want to setup a package like amavis then I need to understand the full documentation, which is on the upstream site. in the case of postfix it is also available in the /var/doc... but that is not the case in all cases.05:44
JanCjmarsden: I can imagine not everybody new to Ubuntu/Debian doesn't know about that convention though05:44
JanCjla: if this sort of docs is missing from /usr/share/doc/<packagename>/ then that's a bug you should report05:45
jmarsdenJanC: Agreed.  There is a difference between coming asking for help, and coming in talking about "...  crap on somnebody elses rug ..."05:46
JanCwell, if you have been trying to fix things for hours, politeness sometimes has something to desire  ;)05:47
jlaScottK: i am/was migrating my severs from centos/fedora to ubuntu. we currently have a number of services among them postfix/dovecot with amavis-new/clamav/spamassassin/postgrey spam control.05:48
JanCI hope jla will remember to check those docs in the future  ☺05:48
ScottKjla: That's a good combination.05:49
jlajmarsden: I may have come on a little strong there.05:50
jmarsdenjla: Fair enough.05:51
jlaScottK: we have managed to get our spam level down to about 5%. we work on the basis "that if smells like spam we can it" nothing that gets spamassassin > 5 is accepted, no viruses are accept , even to quarantine, the risks of accidentally triggering are too great, particularly as the majority of downstream are windows.05:56
ScottKjla: One thing I think you will like about Ubuntu is that we actively maintain clamav so that the current release (once it's tested and reverse depends are updated if needed) is kept available for all supported releases.05:57
jlagetting late and my battery is low, so I had better exit stage right.06:02
kingmanorok i switched kernels somehow08:28
kingmanornow it says im running 2.6.31-16-generic-pae instead of 2.6.31-16-server08:29
kingmanorhow do i change it back08:29
thefishanyone know of a server info script that can output wiki markup? I used one ages ago that dumps mediawiki formatted server reports, just cant remember the name of it09:41
twbYou want to put server logs on a wiki?09:43
thefishtwb: i want to put server hardware and software info on a wiki, like a parsed output of hwinfo09:48
twbAh.09:57
twbI would just stick it in a PRE block, because I'm lazy09:58
J_Phi all10:23
J_Ppeople, I have a interesting problem here. df command show that are there space, but qhen I try create any dir show not space left...10:24
J_Plook http://dpaste.com/140854/10:26
jpdsJ_P: What does 'df -i' show?10:26
sorenJ_P: You're probably out of i-nodes. "df -i", like jpds suggests, will show you how many i-nodes (instead of space) are available.10:34
* jpds hugs soren.10:35
ttxsoren: o/10:35
J_Pjpds: sorry for long time, look there10:35
J_Phttp://dpaste.com/140856/10:35
jpdsYeah, you're out of inodes.10:36
J_Psoren: http://dpaste.com/140856/10:36
J_Pwhat is that? or why that?10:36
J_Pjpds: how I repair that?10:38
J_Pjpds: I would like have as reference the df -h correct..10:39
guntbertJ_P: you probably created *many* small files somewhere10:40
J_Pguntbert: humm.. I think yes. But not I. The ZoneMinder software that run on it..10:41
jpdsJ_P: http://www.linfo.org/inode.html10:41
J_Pjpds: yes10:47
J_PThere are two ways in which a filesystem can run out of space: it can consume all the space for adding new data (i.e., to existing files or to new files), or it can use up all the inodes. The latter can bring computer use to a sudden stop just as easily as can the former, because exhaustion of the inodes will prohibit the creation of additional files even if sufficient HDD space exists.10:47
J_Pwell, I think that solution is use less HD space..10:47
guntbertJ_P: you sulution would be to delete *many* files - its an inode problem and no space problem10:48
guntbert*your10:48
twbfind /home -xdev -size -2048c or something10:50
twb(I haven't been paying much attention.)10:50
tos_ok so USERS are able to CD wherever the hell they want in /etc/passwd and whatever, how can i keep them to /home only!?10:52
twbtos_: why does it matter?10:53
alex_jonipasswords are not stored in /etc/passwd, so you shouldn't worry about that10:56
twbalex_joni: unless you specifically force that ;-)10:59
twbWhich would be a dumb thing to do10:59
sorenttx: Hey, dude.10:59
ttxsoren: how was your holiday break ?10:59
sorenttx: My INBOX says "too long".11:00
ttxsoren: My burndown chart says "too flat" :)11:00
sorenttx: Yeah, that too. I had a /very/ short list of stuff I wanted to get done over the holidays. I haven't done anything.11:04
ttxsoren: that's good !11:04
sorenThat's a point of view :)11:04
twbI wanted to be left alone, and I got that for once11:06
twbsoren: http://www.structuredprocrastination.com/11:06
sorenFascinating11:08
sorentruly11:08
twbsoren: it advocates making sure your list of things to do is REALLY long11:08
sorencheck11:08
twbIf I was one of those GTD wankers, I'd tell you that it changed my life.  But it didn't, because I basically ignore the essay's advice.11:09
* soren is a GTD wanker11:09
twb:-)11:10
twbThey are never far away11:10
sorenMy favourite part of that essay is the photo with the caption: "Author practices jumping rope with seaweed while work awaits."11:10
twbI say this while making lunch at 10:20PM11:12
ScottKcemc: I think the issue you saw with spamasassin and amavisd-new was bug 502615.  I'm curious what you think of the proposed solution?11:19
uvirtbotLaunchpad bug 502615 in spamassassin "/etc/cron.daily/spamassassin should restart amavisd" [Undecided,New] https://launchpad.net/bugs/50261511:19
* soren lunches11:22
tos_ok what im trying to do is stop users from going to other directorys11:26
twbtos_: why?11:27
cemcScottK: that solution only works if sa-update is used from crontab, not when the spamassassin _package_ is updated. like you said, maybe not everyone is using sa-updates11:28
tos_twb... im just paranoid i guess11:29
ScottKcemc: OK.  I'm open to ideas then.11:29
twbtos_: then unplug your system and turn it off11:29
tos_yeah11:29
tos_good idea11:29
twbtos_: if you're concerned about security, you should start out by working out the attack vectors and then closing them down.11:29
twbYou don't start by picking a random thing to lock down, and trying to do it -- it's not a productive use of time.11:30
cemcScottK: maybe it should check in postinst if there's amavis with spamcheck running... ?11:38
ScottKcemc: I was thinking similarly.  The concern I have is if there is a performance impact on heavily loaded sites.  Not sure and not sure who to check with.11:39
cemcScottK: performance impact in what way? by restarting avamis?11:39
ScottKYes.11:40
ScottKIf you stop all the running processes on a fast moving site, is that going to be a problem.11:40
ScottKI'm guessing not since it's not like you're doing this every 5 minutes.11:40
ScottKI think it's more of a potential concern for the sa-update cron job.11:41
erichammondhttp://alestic.com/2010/01/vmbuilder-ebs-boot-ami11:42
erichammondfeedback welcomed11:42
twberichammond: you don't say what AMI and EBS stand for :P11:46
twbec2 makes me assume they're a eucalyptus thing11:47
erichammondtwb: Good point.  However, if somebody doesn't know what those mean, they are not the target audience of this article :)11:47
twbI figured :-)11:48
erichammondEC2 is a service run by Amazon which provides on-demand, self-service, pay-as-you-go computing infrastructure including virtual servers.11:50
erichammondEucalyptus implements something like EC2 but you run it on your own hardware.11:50
erichammondI use EC2 extensively.  I've never used Eucalyptus.11:51
erichammondWhen you start a virtual server on Amazon EC2 (or Eucalyptus for that matter, but I'll stop mentioning it) you need to tell it the Amazon machine image (AMI) which you want the server to run.11:52
erichammondThis determines the Linux distro (or OpenSolaris or Windows version) as well as what software is installed by default and how it is configured.11:53
erichammondThere are a number of publicly available AMIs which you can choose from, including Ubuntu ones built by the great folks on this channel.11:53
erichammondIn some situations, though, you may want to build your own custom AMIs which is what this article provides steps for advanced users to take and adapt.11:54
guntberterichammond: thx for the mini lecture - appreciated here :-)11:55
erichammondEBS is Amazon's Elastic Block Store which is persistent storage on EC2.  Instances run from normal (S3 based) AMIs lose everything stored on local disk when they are terminated.  Instances run from EBS boot AMIs have their root disk stored persistently and they can stop/start at will just like you would expect from a normal physical computer.11:56
erichammondI'm not sure if it's useful without me talking, but here is a presentation I gave about building custom AMIs for EC2 at OSCON 2009: http://oscon2009talk.notlong.com11:57
erichammondI will be updating the talk to use vmbuilder instead of ec2ubuntu-build-ami for presenting at the next venue which will have me.11:59
alonswartzHey folks, do you see any issues in deploying UEC on Amazon EC2?12:20
erichammondalonswartz: It won't work.12:27
alonswartzerichammond, could you explain why?12:28
erichammondalonswartz: There are VM experts on this channel.  I am not one of them.  All I know is that nobody has been able to get any second level VM working on top of of EC2's custom Xen framework and lived to tell the tale.12:31
erichammond(As it turns out I can be an EC2 expert without knowing much about VMs.  One of the beauties of EC2 is it hides (almost) all that stuff from you.)12:31
Aisoni'm using samba 3.4.0 server and on linux client 3.4.412:32
Aisonwhen copy big files, there are almost allways transmission errors. So when copy from client to server the resulting md5 sums of the copied files are almost allways different12:32
Aisonthis happens only with samba. I also used NFS or RSYNC and there were never errors so far12:32
alonswartzerichammond: I've been following alestic since its conception, you do great work!12:34
alonswartzit seems like an interesting project to get UEC running ontop of ec2, i'll give it a stab, but if those who have tried are willing to share their experience, that would be great12:35
pmatulisAison: character set issue?  just an idea12:38
Aisonpmatulis, don't think so. Do the characterset affect the content of the file?12:42
pmatulisAison: well you can configure samba for different character sets, so it must do something at that level12:44
pmatulisAison: check your smb.conf for character sets (man smb.conf)12:44
AisonI think that only affects the filenames12:44
pmatulisAison: like i said, just something to investigate (an idea)12:45
AisonI just noticed, that with windows clients, there are no errors ;)12:46
erichammondalonswartz: The people who have tried to run a VM on top of EC2 and failed over the last few years shared their experience on the EC2 forum: http://ec2forum.notlong.com12:51
erichammondIt doesn't have the best search engine, unfortunately12:51
alonswartzerichammond: thanks, i'll take a look12:52
=== freeflyi1g is now known as freeflying
=== cyphermox_ is now known as cyphermox
zulmorning13:31
pmatulismornin'13:31
uvirtbotNew bug: #498734 in samba (main) "nmbd stops randomly -> cannot access using hostname from Windows XP" [Low,Incomplete] https://launchpad.net/bugs/49873413:37
uvirtbotNew bug: #501364 in postfix (main) "Postfix not sending SMFIC_RCPT to milter, libmilter rejecting state transition" [Wishlist,Confirmed] https://launchpad.net/bugs/50136413:47
kirkland morning, server devs :-)13:48
jiboumansmorning kirkland13:49
=== zzz2009 is now known as jla
=== dendro-a` is now known as dendro-afk
smosergood morning / happy new year all.14:33
jibouman`morning smoser14:35
ivokssomeone knows; ppa build daemons can't access net during building?14:42
jpdsivoks: They can't.14:44
ivoksthat's bad... :/14:44
jpdsNo it isn't.14:44
zulhey smoser14:44
ivokswell, depends on point of view14:45
zulivoks: its just like the regular builds14:45
zulivoks: happy new year btw14:45
ttxsmoser: happy 2010 to you too !14:45
ivoksi have one source that uses network resource for building14:45
ivokszul: happy new year :)14:45
ivokshappy new 20101 everybody!14:45
ivokswarning: failed to load external entity "http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl"14:46
ttxivoks: then it's not fully reproducible, since it depends on "something else"14:46
ivoksi guess i should install docbook-xsl and use it instead of the network resource14:46
ttxivoks: I don't know... but it sounds like a good idea :)14:47
ScottKivoks: I'm curious for your opinion on what we should do about bug 50261514:54
uvirtbotLaunchpad bug 502615 in spamassassin "/etc/cron.daily/spamassassin should restart amavisd" [Undecided,New] https://launchpad.net/bugs/50261514:54
ivoksi'm wearing my cluster hat at the moment :)14:54
ivokswhy should it restart amavis?14:55
ivokshuh?14:55
ivoksamavis just uses spamassassin daemon14:55
ivoksit isn't aware of spamassassin rules14:55
ScottKOK, just comment in the bug then when you have a moment please.14:55
ivoksit just pases mail to spamassassin14:55
ivoksok14:55
=== robbiew_ is now known as robbiew
Jeeves_ivoks: Are you sure?15:02
Jeeves_I'm not :)15:02
ivoksi'm not; i didn't check15:02
ivoksbut if amavis calls spam client to check mail15:02
ivoksi don't see why it shuould be restarted15:03
ivoksit's like restarting firefox cause your apache now has PHP module :)15:03
ivoksor restarting amavis cause you have new clamav15:03
ivoksanyway, i'll take a look as soon as i finish cluster stuff15:04
baffleAnyone here familiar with NPIV? I have QLogic QLE2560 adapters and Brocade-switches with NPIV Enabled on the ports to the server. But /sys/class/fc_host/host3/max_npiv_vports is "0", and "echo '2100001b32fff001:2000001b32fff001' > /sys/class/fc_host/host3/vport_create" gives "write error: No space left on device"; I.e. no NPIV ports gets created. Ideas?15:06
baffle"port_type" is; NPort (fabric via point-to-point)15:07
baffleSo that should be correct..15:07
Zim_hello15:08
Zim_can anyone tell me how to go about having a CGI script run instead of index.html?15:09
MagicFabDavidLevin, hi15:13
MagicFab..and Welcome :D15:14
Zim_hi15:15
ivoksmathiaz: happy new year15:26
mathiazivoks: happy new year !15:26
mathiazivoks: how are you doing?15:26
ivoksgood, you?15:27
mathiazivoks: \o/15:28
ivoksjolly, eh? :D15:28
ivoksi have a workaround for NFS'd /home in 9.1015:28
ivoksinstead in /home, mount it in /media/home and then add mount -o bind /media/home /home to rc.local15:29
ivoks:D15:29
Jeeves_Zim_: Ehm, you'd have to set ExecCGI on that dir15:31
Zim_Jeeves: thanks for the pointer15:32
Jeeves_np!15:33
zulhi mathiaz15:33
Zim_Jeeves: Do i place the script in cgi-bin or the /var/www directory15:33
Jeeves_Zim_: That depends15:34
Jeeves_if you put it in the cgi-bin, your url looks differen15:34
Jeeves_+t15:34
Zim_Looks like I'll have rename the index.html to something else, plus change all the urls that link to it, and put the script in the www flder15:35
Jeeves_Uh, possibly15:36
mathiazzul: hi - what's the story about autofs?15:44
mathiazzul: is autofs 5 stable enough to be move to main in place of autofs 4?15:44
zulmathiaz: i think so both rhel and suse use it15:48
zulmathiaz: im gong to done the MIR request today15:49
mathiazkirkland: ttx: are the current lucid eucalyptus packages functional?15:56
mathiazkirkland: ttx: or should I stick to the alpha1?15:56
kirklandmathiaz: they should be functional15:57
kirklandmathiaz: i think we'd like to know if they're not :-)15:57
mathiazkirkland: ok - I'll test them15:57
jibouman`smoser: eta 3 mins15:57
ttxmathiaz: theer are a number of issues15:57
ttxmathiaz: like bug 49949115:58
uvirtbotLaunchpad bug 499491 in openvpn "tun module no longer automatically available (was: Euca 1.6.2 fails to boot an instance)" [High,Invalid] https://launchpad.net/bugs/49949115:58
zuljibouman` and ttx: when you got a sec can you comment on bug 49151015:58
uvirtbotLaunchpad bug 491510 in monit "MIR for monit." [Undecided,Incomplete] https://launchpad.net/bugs/49151015:58
Zim_folks, am I going nuts? I've just been told that there is not CGI language!?! I thought it was perl16:05
ScottKZim_: I do cgi in Python.16:05
Zim_*no not not16:05
ScottKcgi and programming language are reasonably orthogonal.16:06
Zim_ScottK: am i understanding correctly when Im thinking you write a python script, but save it as .cgi?16:07
ScottKIt was more complex than that, but yes.16:07
ScottKI also first set it up 5 years ago, so I don't recall the details.16:07
ttxcgi is an interface, not a language16:07
ttxa way to call programs from a web server.16:08
ograthats what the I stands for ;)16:08
ograin CGI :)16:08
ttxCGL ? :)16:08
ograhehe16:08
Zim_thanks chaps16:08
ttxzul: about bug 491510 -- you should check with the ubuntuone people16:10
uvirtbotLaunchpad bug 491510 in monit "MIR for monit." [Undecided,Incomplete] https://launchpad.net/bugs/49151016:10
ttxhow badly needed it is, and would it be server or clientside.16:10
zul*sigh* ok16:11
Jeeves_Hmmm16:12
Jeeves_Is there a channel about Launchpad/PPA on Freenode?16:13
PiciJeeves_: #launchpad16:14
Jeeves_I could've guessed that :)16:14
jlaScottK: a restart of amavis maybe needed in order to fix stale any stale sockets. If I remember correctly amavis uses the spamassissin socket and smtp protocol to pass email for checking. If you stop adn restart16:15
baffleIf anyone happends to google this: Brocade switches has to be in "Access Gateway Mode" to enable NPIV to hosts, even if you've set each port to "Enable NPIV". If it is not set up in such a way, max_npiv_vports is reported as 0. Using "Access Gateway Mode" disables all other normal switch features like zoning, so that kinda blows.16:15
ivoksjla: right, restarting amavis is pointless16:15
ScottKivoks: I think that's the opposite of what he said?16:15
jlaIf you restart spamassassin i think amavis will be using the "wrong" socket.16:15
ivoksthat's a bug in amavis16:16
ScottKDoes it eventually straighten itself out or does it last forever?16:16
ivoksi'll do some testing tomorrow16:17
ScottKThanks16:18
ivoksand hopefully start working on mail stack16:19
jlaHow that a bug, amavis picks up spamassassin's socket when it starts and keeps it open, you kill the sa the socket is now stale, a reload/restart fixes the problem16:19
kirklandttx: so eucalyptus.conf ....16:19
kirklandttx: to fix Bug #458211, i'd like to change the way its generated16:19
uvirtbotLaunchpad bug 458211 in eucalyptus "eucalyptus.conf, euca_conf is confusing and underdocumented" [Undecided,Confirmed] https://launchpad.net/bugs/45821116:20
kirklandttx: and fix and fix Bug #487275, too16:20
uvirtbotLaunchpad bug 487275 in eucalyptus "eucalyptus.conf should not be a conffile" [High,Triaged] https://launchpad.net/bugs/48727516:20
kirklandttx: i'd like to move all of the documentation into a manpage16:20
kirklandttx:  and generate the file such that it's not a conffile16:20
kirklandttx: and only write the pertinent parts to eucalyptus.conf16:20
ScottKivoks: If you start working on it, that's great.  I've had no time.  You might want to start with making the dovecot-postfix patch in dovecot apply so the package will build.16:21
kirklandttx: as the eucalyptus-nc's eucalyptus.conf (for instance) contains a bunch of cruft that's not pertinent to NCs16:21
ttxkirkland: you would generate it from user-configurable or state-driven bits ?16:21
ivoksScottK: yep...16:21
ttxs/or/and/16:21
ivokstake care... got to go now16:21
ttxkirkland: I have two issues with it currently16:22
jlaScottK: Again from memory the condition lasts until amavis is restarted. Also from memory you may also need a restart because amavis builds its own sa config dynamically16:22
ttxkirkland: one is the "non-pertinent" thing16:22
ttxkirkland: the other is the "let's make euca_conf rewrite parts of it" approach16:22
ScottKjla: Thanks.  I'll be interested to see what ivoks' testing produces.  He's pretty smart about this stuff.16:22
kirklandttx: i don't think i understand your question ...16:22
kirklandttx: user-configurable == debconf ?16:22
ttxkirkland: my question doesn't make sense, i'll rephrase16:23
ttxkirkland: what do you mean by "generate the file" ?16:23
kirklandttx: well, drop it from the files installed by the package16:24
kirklandttx: and generate it in the postinst, if it doesn't already exist16:24
kirklandttx: that was my initial thought16:24
kirklandttx: debconf'ing each of the items would be nice, i thought16:25
kirklandttx: since we already do some of them16:25
kirklandttx: and would put a prettier front end on it16:25
kirklandttx: make it far more usable16:25
ttxkirkland: one issue is that euca_conf rewrites eucalyptus.conf16:25
kirklandttx: though that's slightly more work that I'd want to commit to for a216:25
ttxkirkland: another way to do it would be to make eucalyptus.conf source several files, some of them user-configurable, some of them state-driven (like the NODES= line)16:26
kirklandttx: i think i like that idea ...  create a hierarchy of sourced files16:27
ttxand make sure euca_conf only messes with /var/lib/eucalyptus/configured_nodes and friends16:27
kirklandttx: we could install a "base" eucalyptus-base.conf with the common defaults16:27
ttxkirkland: ultimately I'd like the component registration process not require to run as root16:28
kirklandttx: then debconf could write eucalyptus-custom.conf16:28
kirklandttx: ah, debconf requires root, right16:28
ttxkirkland: at that point autoregistration through euca_conf needs to rewrite eucalyptus.conf16:28
=== mushroomb1ue is now known as mushroomblue
kirklandttx: right16:29
ttxkirkland: so all the registration tasks run as root, which is... scary.16:29
kirklandttx: okay, i'll think on this a little more, but I like the idea of a hierarchy of sourced files16:29
* ScottK looks at Bug #502071 and thinks "Not bad". Fixes uploaded, tested and relesead for production in two days on 5 releases.16:30
uvirtbotLaunchpad bug 502071 in spamassassin "FH_DATE_PAST_20XX scores on all mails dated 2010 or later" [High,Fix released] https://launchpad.net/bugs/50207116:30
kirklandttx: what about this ....16:30
kirklandttx: the package installs a base /etc/eucalyptus/eucalyptus.conf (as it does now)16:30
ttxkirkland: if we can change it so that euca_conf can run as "eucalyptus" it's slightly less scary.16:30
kirklandttx: and euca_conf reads that, then sources ~euclayptus/.eucalyptus.conf16:30
kirklandttx: and always writes to ~euclayptus/.eucalyptus.conf16:31
kirklandttx: right ... i'm just thinking how to make this look like every other normal program16:31
ttxkirkland: that would work... though it might be confusing16:32
kirklandttx: we'll have a root-administered global configuration file16:32
ttxthe beauty of it is taht you can almost keep the current one16:32
ttxhm, scratch that. We don't want to keep it :)16:33
kirklandttx: bbiab, on the phone with jibouman`16:34
ttxkirkland: yes, I was thinking about sourcing /var/lib/eucalyptus/configured_nodes at the end of /etc/eucalyptus/eucalyptus.conf, and have euca_conf only write to "configured_nodes"... whichj amounts to the same16:35
ttxkirkland: though our upstart scripts, I think, happily source eucalyptus.conf as root, istr16:36
ttxso escalation from eucalyptus to root would be pretty trivial.16:36
ttx(if not already)16:36
ttxkirkland: I think that security pass can be solved post-alpha2, I just mention it so that your design doesn't end up orthogonal to it.16:37
=== Mike||gone is now known as Mike_lifeguard
Mike_lifeguardHello. I wanted to check ssh keys with ssh-vulnkey, and I have installed openssh-blacklist and openssh-blacklist-extra. However, I still get one listed as unknown:16:59
Mike_lifeguard/home/alphos/.ssh/authorized_keys:2: Unknown (blacklist file not installed): RSA 1023 ad:01:41:d1:9e:0d:fe:c5:5f:13:91:7c:3f:8f:6c:8c /home/alphos/.ssh/authorized_keys16:59
Mike_lifeguardI see that the length is 1023 - that's wrong, isn't it? Should be 102417:00
bdebHey, I am having MPT Fusion problems, it this the place for questions?17:24
bdebI have an LSI p211-4i SAS controller.  lsiutils says that ' 0 MPT ports found'17:29
bdebthere is no ioc0 listed in /proc/mpt.  just a summary file and a verions file17:31
karmsthello everyone17:33
karmstI'm trying to find what the best way is to make incremental image backups of Ubuntu?17:34
karmstcan anyone help?17:35
bdebI use Bacula for backups.  www.bacula.org17:37
karmstis there anything to do live backups?17:37
karmstso you can be using the system and still get a full backup17:38
karmstLike a VSS?17:38
bdebI belive you would want to put you volumes on LVM.  Then you can snapshot them, mount the snapshots, and then back up.17:39
bdebThats how I backup Zimbra17:40
karmstah17:40
karmsthave you had to do a restore before using that method?17:41
karmstor a bare metal restore?17:41
bdebno i havent done a bare metal restore.  but I believe you can.17:41
karmstok17:44
karmstthank you17:44
smosermathiaz, ping19:00
mathiazsmoser: o/19:00
smoserhad you started any of the ec2-config "plugins"19:00
mathiazsmoser: zappy vew hii-ear!19:00
smoserwhy thank you sir. the same to you and yours19:00
* zul things mathiaz might still be drunk19:01
mathiazzul: it's been 4 days now19:01
mathiazsmoser: well - by plugins, you mean writting upstart jobs?19:01
zulwell you could have gone on a bender but anyways19:01
mathiazsmoser: if so - nope - not yet19:01
smoserthe closest i got to a mathiaz level bender was watching "hangover" the movie on new years eve :)19:01
smosermathiaz, right.19:01
zulsmoser: ill you my greyhound bender eventually19:02
smoserok, i didnt' htink so. zul is going to take a stab at those.19:02
mathiazsmoser: the main issue is reading the yaml config file19:02
smoser?19:02
mathiazsmoser: depending on when you run the upstart job, you may not have access to /usr yet19:02
mathiazsmoser: which means you may not be able to parse the yaml file19:02
mathiazsmoser: you basically need to be able to code: if the option apt-update is in the config file and is set to yes, run this upstart job19:03
mathiazsmoser: you basically need to be able to code: if the option apt-update is in the config file and is set to yes, run this *code*19:03
smosernot a worry. i know its a mess, but this is ec2-init. specific purpose, /usr == /19:03
mathiazsmoser: doing so in perl, python, ruby is easy19:04
mathiazsmoser: oh ok - so if we assume that /usr == /19:04
smoseri think to be reasonable at this point we have to assume that.19:04
mathiazsmoser: then all upstart jobs can depend on / being mounted19:04
smoseri think they can depend on /usr being mounted just as well19:05
mathiazsmoser: so writing an upstart job that check whether apt-update is set to yes is easy19:05
smoserdo you know in upstart, can you write "i depend on /usr" which will be synonomous with 'i depend on /' if /usr == / ?19:05
smosermathiaz, right, i know they're easy, just need to start knocking them off19:05
mathiazsmoser: yop19:06
mathiazsmoser: as far as /usr dependency I don't know19:06
mathiazsmoser: (my yop was for your call for starting to write them)19:06
smoserfwiw, we're no more broken than we were before.19:06
smoserec2-init was set to run long before /usr was guaranteed to be mounted19:07
smoserin karmic19:07
smoserand previous19:07
smoserthats not to say its not broken, but we've been broken in that assumption before.19:08
mathiazsmoser: oh - so we can write upstart jobs that start on started mountall = / and started cloud-config?19:08
smoserwell i think that you dont have to depend on mounted /19:08
zulso if i get this straight you have a python-yaml config file and you have a plugin in ec2-init that does stuff based on the config file right?19:08
smoseras cloud-config will not be emitted until that is the case19:09
smoseras it depends on it19:09
smoserzul, the plan is that we add these config parsers as upstart jobs19:09
mathiazsmoser: agreed19:09
mathiazzul: https://wiki.ubuntu.com/ServerLucidCloudConfig19:09
mathiazzul: the design section outlines the plan19:09
smoserright. mathiaz was helpful and wrote things down :)19:10
smoserso zul the idea is that each little config snippit has a corresponding upstart job19:10
smoserand it reads an environment variable that is set to say where the config file is. then, it reads its section, and responds accordingly19:10
zulso the upstart job tell ec2-init to do whatever?19:11
mathiazzul: not really19:11
mathiazzul: upstart jobs are independent of ec2-init19:11
zulok19:12
mathiazzul: they wait for the cloud-config event to be fired by ec2-init19:12
mathiazzul: and then they read the relevant configuration file19:12
mathiazzul: based on the content of the configuration file, they do whatever they need to19:12
zuli think I get it19:12
smoserright. its fairly simple design, mathiaz gets credit.19:13
mathiazzul: for example, apt_update upstart job checks if apt_update is set to true, if so it runs apt-get update19:13
zulso it cloud-config done?19:13
zuler...so is cloud-config done?19:13
smoserthe event, no. nothing is delivering that yet19:13
smoserbut that will be fired by ec2-init (which may/should be renamed)19:13
mathiazzul: you can start to write the upstart job though19:14
zulok19:14
smoserright.19:14
mathiazzul: what matters here is to agree on the configuration syntax19:14
mathiazzul: there is an example on the wiki page19:14
mathiazzul: and I've been discussing some part of it (the default for apt-update) with erichammond on ubuntu-cloud@19:14
zulso you need me to write the configuration files?19:14
=== Nafallo_ is now known as Nafallo
zulyeah im just going to the discussion now19:15
mathiazzul: I'd suggest you to write the upstart jobs19:15
mathiazzul: that will parse the configuation file19:15
mathiazzul: as the syntax and proposed configuration options are already laid out19:15
zulmathiaz: k19:15
mathiazzul: there is an example/reference configuration file at https://wiki.ubuntu.com/ServerLucidCloudConfig19:15
zulmathiaz: ok ill be bugging you guys alot then19:17
smoserthank you mathiaz zul19:17
kinja-sheepHello, I'm trying to use dnsmasq to create DNS caching. I got that one to work nicely. However, I'm struggling with DHCP server. I have a machine connected to the laptop (via router but in switch mode). What am I doing it wrong? It can't obtain an IP address.? :(19:26
kinja-sheepAny assistances would be nice. I'm still working on this one.19:27
naito_Hello .... Anyone with the clud running ?19:34
naito_I just installed Ubuntu Server 9.10 with Eucalyptus, and when i run "euca-describe-availability-zones verbose", it tells me that the max VMs that i can run are 0. Anyone had this problem ?19:36
keessoren: oops, I was in the wrong channel.  vmbuilder.  yup, added it everywhere needed.  still explodes.19:40
naito_Anyone ?19:41
sorenkees: traceback?19:41
keessoren: one sec19:42
keessoren:19:43
kees  File "/usr/lib/python2.6/dist-packages/VMBuilder/plugins/ubuntu/distro.py", line 118, in preflight_check19:43
kees    mod = __import__(modname, fromlist=[self.vm.suite])19:43
keesImportError: No module named lucid19:43
sorenkees: /usr/lib/python2.6/dist-packages/VMBuilder/plugins/ubuntu/lucid.py exists?19:44
keessoren: ah, craps.  I have it in /usr/share/pyshared/VMBuilder/plugins/ubuntu/lucid.py19:44
sorenkees: Yeah. Yay, pycentral.19:45
kees*facepalm*19:46
keesyeah, working now.  thanks.  :)19:46
keessoren: will you merge my branch for ext4 support and lucid guest support?  lp:~kees/vmbuilder/use-ext4/19:53
sorenkees: Not right now, but yes, sure.20:04
keessoren: ok20:05
=== robbiew is now known as robbiew-AF
=== robbiew-AF is now known as robbiew-afk
=== blue-frog_ is now known as blue-frog
=== mushroomb1ue is now known as mushroomblue
=== dendro-afk is now known as dendrobates
=== robbiew-afk is now known as robbiew
uvirtbotNew bug: #502855 in bind9 (main) "package gadmin-bind 0.2.3-5 failed to install/upgrade: problemi con le dipendenze - lasciato non configurato (dup-of: 437783)" [Undecided,Confirmed] https://launchpad.net/bugs/50285521:32
adacSome time ago I installed gnome desktop on my server and now I want to remove it again. How to do that? I tried sudo apt-get remove ubuntu-desktop but it seems that this package was not the one i installed back then...21:55
guntbertadac: that is only a meta package21:56
adacguntbert, how can I find out which one is the real one?21:56
guntbertadac: look at its dependecies - remove them21:56
adacguntbert, how do I find out the dependecies on command line?22:03
guntbertadac: apt-cache show <package> (its quite a lot :))22:04
adacguntbert, Ok! let's see if I get lucky :D22:05
mathiazkirkland: hi!22:07
mathiazkirkland: I'm trying to install UEC and the step to discover new nodes doesn't seem to work22:07
mathiazkirkland: sudo euca_conf --no-rsync --discover-nodes22:07
mathiazkirkland: http://paste.ubuntu.com/351456/22:07
kirklandmathiaz: hmm22:08
kirklandmathiaz: are your nodes broadcasting the avahi message?22:08
mathiazkirkland: well - there is an avahi-publish process running on the node22:09
mathiazkirkland: http://paste.ubuntu.com/351457/22:09
mathiazkirkland: hm - I've rebooted the CC22:10
mathiazkirkland: it finds a node now22:10
kirklandmathiaz: reboot was required?22:10
kirklandmathiaz: euca version?22:11
mathiazkirkland: it was a package installation22:11
mathiazkirkland: using the latest from lucid22:11
mathiazkirkland: now I get this: http://paste.ubuntu.com/351459/22:11
kirklandmathiaz: which is what?22:11
kirklandmathiaz: we have made a few uploads today22:11
mathiazkirkland: 1.6.2~bzr1120-0ubuntu122:11
jibouman`time to call it a night; see you guys tomorrow22:12
=== jibouman` is now known as jiboumans
kirklandjiboumans: later22:12
kirklandmathiaz: okay, thanks22:13
mathiazkirkland: well - it cannot find the node anymore now22:13
kirklandmathiaz: ?  it didn't, then it did, now it's not again?22:13
mathiazkirkland: it didn't, it rebooted, it did, it's not again22:14
mathiazkirkland: it == CC22:14
mathiazkirkland: the NC hasn't moved (and I haven't added it to the CC)22:14
mathiazkirkland: well - I've rebooted the CC - and the node can be discovered22:17
kirklandmathiaz: but only for a short while22:17
kirklandmathiaz: then it can't?22:17
mathiazkirkland: let me wait for the short while22:18
mathiazkirkland: the next issue is that it detected the ipv6 address22:18
mathiazkirkland: and then it fails to login if I try to add the node22:18
mathiazkirkland: http://paste.ubuntu.com/351462/22:19
mathiazkirkland: ok - and now the node cannot be discovered anymore22:19
kirklandmathiaz: hrm, that stinks22:22
mathiazkirkland: hm well. Seems like it's working now22:28
mathiazkirkland: I'm confused22:28
mathiazkirkland: but at least it seems that the CC is talking to the NC22:28
mathiazkirkland: now I can't get the credentials - http://paste.ubuntu.com/351469/22:28
kirklandmathiaz: is the web frontend running?22:29
mathiazkirkland: which process would it be?22:30
mathiazkirkland: I'm running CC+CLC+Walrus+SC on one machine22:30
kirklandmathiaz: apache listening on 8443, i think22:30
mathiazkirkland: yop - eucalyptus-cloud is listening on port 844322:31
kirklandmathiaz: hmm, then the cred download should work22:33
mathiazkirkland: reading through the log - I can see some jdbc connection errors22:34
mathiazkirkland: hm - it seems that eucalyptus-cloud is not answering to request22:47
mathiazkirkland: a wget on https://localhost:8443/register times out22:48
kirklandmathiaz: sorry, i'm hacking on the wsdl stubs atm22:52
kirklandmathiaz: let me get this handled, and i'll give you my full attention ;-)22:52
=== erichammond1 is now known as erichammond
=== alex88 is now known as alex88[sleep]
=== robbiew is now known as robbiew_

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!