=== KB1JWQ is now known as PFY [00:08] anyone here familiar with doing an install to a FC san? I need a bit of help [00:08] the installer seems to see the san when it scans the scsi system but it shows IO errors [00:08] any thoughts? [00:11] hello, i am missing the command add-apt-repository ... what package can this be found in? why don't I have it? [00:13] with uec where is the interface defined for dhcpd/dhclient? ive changed eucalyptus.conf to make hte privnet eth0 (rather than eth1), but after a restart its still using eth1 [00:24] stiv2k: it's in the 'python-software-properties' package [00:24] ty === PFY is now known as KB1JWQ [00:24] you can always search on packages.ubuntu.com for such things [00:26] anyone use their ubuntu server to play music via mpd locally? i'm having issues, and it's almost certainly because there's no sound drivers installed by default in ubuntu-server (i would assume) so what should i use? alsa? === libertiy|away is now known as libertiy [00:32] arrrghhh: Are you sure? My recent lucid server install which I very much never intentionally installed any audio software has a full ALSA stack loaded. [00:32] *on which* [00:33] arrrghhh: ALSA should be what to use, and the -server kernel should have audio drivers as you need that for e.g. asterix [00:33] Or screaming DC alarms, if you set it up that way :) [00:34] hrm. it's a lucid server install, i have no alsamixer. [00:34] plus mpd has an alsa input configured, but i can't get it to even start playing anything. [00:34] alsamixer is an application... [00:35] i just want mpd to play music. i also made an assumption about alsa. how can i tell if it's installed (properly) or not? this is a fresh install. [00:35] arrrghhh: Try just running alsamixer [00:36] hrm. it's a lucid server install, i have no alsamixer. [00:36] If it doesn't work, install alsa-utils. [00:36] the mpd user should be in the 'audio' group [00:36] Or install command-not-found, which will notify you of what you need to install when you don't have something. [00:36] yea, i can install that. not sure if i needed/wanted to go that way. [00:36] persia, thanks for the tip! [00:36] JanC, i'll check the permissions of my user... it's either me or root running mpd i believe. s/b me. [00:37] mpd runs as user 'mpd' by default [00:38] also, make sure it's configured correctly [00:38] JanC, even from the init script? [00:38] arrrghhh: the init script should run it as user mpd [00:38] thats' the default at least [00:39] ok. is there a command to see what user is in which groups? [00:39] wait... i think i have a solution der. [00:40] alright. there is an mpd user, and he is a member of the "audio" group. [00:41] !topic [00:41] Please read the channel topic whenever you enter, as it contains important information. To view it at any time after joining, simply type /topic [00:41] so, no problem for mpd to access the audio devices [00:41] JanC, how can i tell if alsa is functioning? should i just install alsa-utils? [00:41] that's a good option [00:42] maybe the audio cahnnel is just muted ;) [00:42] k. my user is not a member of the audio group. [00:42] that's what i'm hoping :D [00:42] alsa-utils also intsalled alsa-base and linux-sound-base. [00:43] hi, forgot to install lamp stack during server install on karmic, ca i install it directly from install cd..this computer do not have internet access.. [00:44] "cannot open mixer: No such file or directory" - after i try to run "alsamixer"... [00:44] der. sudo, sorry. [00:47] hi, forgot to install lamp stack during server install on karmic, can i install it directly from install cd?..this computer do not have internet access.. === libertiy is now known as libertiy|away [00:47] jongbergs, why did you just resend that? [00:48] i don't see why you want a LAMP stack on a machine that has no internet. i don't think you can install it from the CD w/o a fresh install, but i'm not positive. === RoAkSoAx_ is now known as andreserl [00:57] * flyback uses the remote bmc he enabled on a problemsome server at work, to remotely power cycle and save the day :) === RoAkSoAx_ is now known as andreserl === dendro-afk is now known as dendrobates === libertiy|away is now known as libertiy [01:22] New bug: #544545 in rng-tools (universe) "rngd doesn't start automatically" [Undecided,New] https://launchpad.net/bugs/544545 [01:24] This really isn't a new bug. [01:27] alrighty all. now alsamixer is installed, all the volumes were set at a minimum. i turned them all up, and mpd still does not play... i guess it could be the conf file for MPD? i'm pretty much using the defaults, i know it comes with an "example" output that uses alsa. [01:28] i restarted services and eventually the box to see if that would make a difference, unfortunately it did not. === libertiy is now known as libertiy|away === libertiy|away is now known as libertiy [01:35] hrm i also seem to have a problem with one of my init scripts. it's pretty stupid simple, i've never really designed a startup script... but when i run the startup script by hand, it works (sudo /etc/init.d/keepass start). if i restart the machine, it looks like keepass is running, but i can't hit the weppage. if i kill the PID and start the script by hand after a reboot, it works [01:36] webpage* === rgreening_ is now known as rgreening === libertiy is now known as libertiy|away === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [01:59] hey all, I've been working on a product that allows for real-time, brandable, communities to be created on the web and I was curious if you guys would like to take a look at what we have to offer. We've been working with a lot of communities on IRC and Freenode to get their feedback. [02:01] Gla: Ubuntu has a massive web presence. What extra features would you imagine would be considered beneficial? [02:01] would you mind if I sent you the link persia? [02:02] I'd rather you told me about it. [02:02] And in-channel, where it's logged and others can comment. [02:02] gla: ever heard about launchpad? [02:02] we add the ability for you to have real-time threaded conversations like that of Google Wave but much more simplistic === libertiy|away is now known as libertiy [02:03] gla: ever heard about launchpad? [02:03] yes [02:03] ok. [02:03] though we're focused on the real-time communications piece of a community [02:03] I'm not sure we'd want that. We already have too many communications media, most of which are threaded. [02:06] gla: anyway, feel free to offer your technology to canonical/launchpad people :) [02:06] * domas whistles [02:06] domas: Why them instead of us? [02:07] alrighty, will do [02:07] I've actually been in talks with partnering with canonical, simply seeing some community feedback before hand [02:08] I suspect the part of the community that hangs out on IRC probabyl isn't looking for a web thingy to replace IRC. [02:09] ScottK: yea I'm starting to think that [02:09] getting like 0 adoption from this [02:09] while when I show non-irc users they love it [02:09] =) [02:09] so, it's really fucking interesting the psychology behind it [02:10] persia: because they're ones building communication at large? :) [02:10] !ohmy [02:10] Please remember that all Ubuntu IRC channels share the same attitude of providing friendly and polite interaction with all users of all ages and cultures. Basically, this means no foul language and no abuse towards others. [02:10] persia: for all the web-presence :) [02:10] oops, sorry! [02:10] domas: Well, bits of it. freenode should be thanked, and we do use mailing lists sometimes :) [02:10] persia: oh yes ;-) [02:11] * ScottK has tried web based alternatives to IRC and universally found them inferior in any way they were different. [02:11] Gla: I suspect it's a tools thing. There's a bit of a barrier to entry for IRC, but once folks have become accustomed to using it as a tool, other things seem somehow less simple. [02:11] I think this is true. [02:11] yea [02:11] * persia has gone to some lengths to merge most non-irc realtime communications into IRC [02:12] IRC can sit in background, you can sit in multiple talks, you can re-enter communication at will, etc [02:12] in the grand scheme of things IRC is a REALLY small community [02:12] Gla: undoubtably. [02:12] gla: in the grand scheme of things people use facebook ;-p [02:12] yea [02:12] but we still thought it would be the best place to start [02:12] starting to think that's very incorrect [02:13] From an Ubuntu community perspective, Ubuntu Forums is probably a better place to start. [02:13] so it sounds [02:13] And extra points for having an IRC gateway :) [02:13] thanks [02:13] how'd you know? we closed it [02:14] Oh :( [02:14] sign up page? [02:14] :)) [02:14] New bug: #253895 in kerberos-configs (main) "upgrading to 8.10" [Undecided,Confirmed] https://launchpad.net/bugs/253895 [02:14] we were using Freenode Auth at first [02:14] then they got pissed [02:14] shut us down [02:14] use fbconnect! [02:14] * domas giggles [02:14] No. [02:15] Best to discuss things in advance so infrastructure providers don't get annoyed. [02:16] Doesn't surprise me they got pissed. [02:16] Web forums are just NNTP for people too stupid to configure a newsreader. [02:16] No. [02:17] They offer a couple features NNTP doesn't (like avatars, "beans" (or equivalent), etc.) === libertiy is now known as libertiy|away [02:18] xfaces? ;-) [02:18] But yeah, I'll grant you that. The short story is that they're features *I* don't use, so I dismiss them. [02:19] twb: OK. Your mission, if you choose to accept it, is to write NNTP plugins for the top three forum engines in Ubuntu. [02:19] =) [02:19] I might do that if I routinely found discussion on forums useful. [02:20] The forum threads that google takes me to (for Ubuntu or otherwise) tend to be pretty vacuous. [02:21] I haven't had an ubuntu question answered by a forum :( [02:22] I've actually found some good answers on the forums for PEBKAC issues. [02:25] twb: I think that's about par for the course. [02:41] how would i completely block all network activity? would ufw deny outgoing, and ufw deny incoming completely block all network activity [02:42] ubuntu: "sudo stop networking"? [02:43] Dropping all packets in INPUT and OUTPUT wouldn't affect routing (the FORWARD chain). [02:43] Note: you *really* don't want to do such things on a remote machine. [02:57] ubuntu: the ufw stuff would work generally, but there are several things you'd need to do to stop all networking via iptables [02:57] ubuntu: you'd want to make sure net/ipv4/ip_forward was set to 0 [02:58] ubuntu: and you'd want to adjust /etc/ufw/before.rules to not allow the stuff it does (eg, multicast, dhcp and some other stuff) [02:58] ubuntu: the best thing to do is bring down the interface: eg 'sudo ifdown eth0' [02:58] ubuntu: obviously, don't do that remotely [02:59] so i'm tryin to get mpd to play music thru my ubuntu-server... it keeps crashing everytime i try to play a file, and i'm not assuming it's lack of codecs. i don't think ubuntu-restricted-extras is a good package to install on my server, i just need mp3 and aac (m4a) support... [03:01] ubuntu: with ufw> that of course is in addition to setting the default policy to deny for incoming and outgoing and enabling ufw [03:01] (like you said) [03:01] That or unplug the network cable. [03:02] that works too :) [03:02] quite well actually [03:02] Sometimes hardware solutions are the best. [03:02] :) [03:02] Backhoe through the fibre [03:02] That's just a specific implementation of unplug the network cable. === libertiy|away is now known as libertiy [03:03] You would think in a facility that doesn't allow cellphones, they'd use shielding to block the signal, wouldn't you? [03:04] If they did, there'd be no need to prohibit them [03:04] Sorry, I was thinking about the wifi case, and wandered into a rant about DoJ [03:04] ScottK: multiple layers of security [03:08] anyone use mpd with ubuntu-server? [03:08] I do not [03:09] arrrghhh: if it is crashing, there is surely a bug [03:09] i had it working previously, but i decided to wipe my server and start fresh. i can't get it working now. [03:09] well i was thinking alsa at first, then mpd configuration, then i thought codces, but i'm pretty sure i just installed the correct codecs so i'm not sure where to turn now. [03:11] sorry, I've got nothing :( [03:11] * jdstrand wanders off [03:11] lol thanks [03:13] does one need to rerun GRUB after editing GPT ? [03:15] That would depend how you edited it. [03:15] I would say generally no (assuming grub 2). [03:15] don't you need to run "update-grub2"? [03:16] mmmm, the evil thing I did was creating a filesystem at different offset with same UUID (but that wasn't / or /boot) [03:16] That just updates the cfg file to point to the current kernels [03:16] server didn't boot afterwards :) [03:16] domas: you should NEVER have two filesystems with the same UUID (well, except LVM snapshots) [03:16] twb: well, I dropped old partition, created new one, then assigned same UUID via xfs_admin [03:17] So there was only one filesystem that that UUID at boot time? [03:17] yep [03:17] Hmm, I'm surprised that didn't Just Work [03:17] there was unreferenced space between two partitions that could have had partition header [03:17] I'm not sure if it is related [03:17] I have these six-core opterons that have miserable failures with karmic [03:17] You could easily fix that by zeroing those blocks. === libertiy is now known as libertiy|away [03:19] mhm [03:20] * domas reboots [03:22] ok, it didn't boot [03:22] so no mpd users? does anyone play musically locally from their server? or even an httpd stream? === libertiy|away is now known as libertiy [03:23] reinstall takes nearly 10 minutes [03:23] arrrghhh: what was the actual problem? [03:23] domas: why don't you boot a live CD and just fix grub? [03:24] fresh install and i can't get mpd to play music. crashes everytime i try. at first it was showing volume n/a, but i changed mpd.conf to make the alsa config more basic, and now volume shows 100%. [03:24] twb: reinstall = Ctrl+N :) [03:24] twb: using live-cd requires flying to datacenter [03:24] or using java-UI remotely with some CD emulation [03:24] or building network recovery image [03:24] Ugh [03:25] and while this server is being reinstalled, I can break another one [03:25] :) [03:25] Just assign the live CD .iso to the second SCSI LUN [03:25] qemu -curses -hda foo.img -hdb rescue.iso or similar. [03:25] don't use virtualization [03:26] Oh, just those bloody KVM-over-IP things? [03:26] ssh server.mgmt; start /SP/console [03:26] Ah, serial-over-IP. MUCH nicer [03:26] yup [03:27] I got a sheevaplug (OMAP-in-a-box) a while back, and I was pleasantly surprised that it's ttyUSB0 connector Just WorkedTM [03:28] saw some sheevaplugs around :) [03:28] Mine's running buildbot :-) [03:28] hah! [03:29] with distcc to all the computers connected to powergrid? [03:29] oh and i also thought it could be codecs. i didn't install ubuntu-restricted-extras, i just want music... so i think i installed the proper gstreamer & faac codecs for mp3 & aac playback... [03:29] Catches pesky x86isms. [03:29] arrrghhh: "crashes" as in segfaults? [03:30] twb, well i'll be in ncmpc, and as soon as i hit "enter" on a song to play it, the connection is immediately lost, and when i check if mpd is running, it is not... i'm not getting errors in /var/log/mpd/mpd.log, wouldn't it show a segfault there? [03:30] 437 seconds since kernel boot, install done [03:30] * domas waits for reboot [03:31] hey since i installed codecs i have new errors in mpd.log!! [03:31] arrrghhh: not necessarily. dmesg(1) often reports segfaults. [03:31] mpd isn't modular, so I don't know what you mean by "install codecs". [03:31] mpd[5406] general protection ip:b6e841b5 sp:b5369850 error:0 in libavcodec.so.52.20.1 [03:31] mpd will have a strict Depends: on the decoder libraries it can use. [03:33] hrm. where is the depends list? i was hoping dependencies would've been taken care of by the initial install [03:34] meh, sucky part of these uninstalls is that we get ssh warnings [03:34] there's one quick fix [03:34] use same key each time :) [03:34] domas: ssh-add -R 10.0.0.1; ssh -oStrictHostKeyChecking=no 10.0.0.1 [03:35] Hmm, not -R [03:35] twb: we use puppet to distribute ssh keys too [03:35] but have to re-authenticate puppet too [03:35] oh well :) [03:36] There was a way to tell ssh to remove entries from the host key list [03:36] If you want to be REALLY naughty, ssh -oUserKnownHostsFile=/dev/null [03:37] Ah, ssh-keygen -R 10.0.0.1 [03:37] meh, hardy has 0.97 grub [03:38] * domas runs update-grub [03:38] Does GRUB Legacy support GPT at all? [03:38] I always forget [03:38] well, it boots with installer-built GPT [03:38] Shrug; OK. [03:38] so, partially, yes [03:39] the odd part is that I don't even get grub menu === libertiy is now known as libertiy|away [03:40] ok, let's check if it boots now :) [03:41] crap [03:41] does not [03:42] Are you doing the install with -- console=ttyS0? [03:42] Otherwise it won't propagate that into the grub config. [03:42] menu.lst has 'serial' line [03:42] hmmm [03:43] jdstrand, ok and how do i disable all network interfaces [03:45] ubuntu you can restart networking if you have that file configured [03:45] /etc/network/interfaces [03:52] twb, so any ideas? I'm out. I'm not sure how I got it working previously, other than I used pulse before. I'd rather use alsa, pulse was a pain and I think the reason mpd stopped working on my previous install. [03:53] Is pulseaudio installed? [03:53] twb, no, i'm tryin to do it with just alsa... is that not possible? [03:53] Are you working with a single, known-good audio file? [03:53] It certainly *used to* work with plain alsa; last time I used mpd, pulseaudio didn't exist. [03:54] i can focus on one file [03:54] yea, i like the concept of pulse but the implementation seems... poor. [03:54] or perhaps i'm not leveraging it properly, which is entirely possible as well. [03:55] Assuming that pulse is just esd2, I really don't see the point. Anything intel-hda based probably has hardware mixing. [03:55] (i had to do horrible, horrible things to get it to run as a daemon/init script. i guess that's "not recommended", it's supposed to be session-based) [03:55] do you know any online service that tests personal proxies? [03:55] rafaelsoaresbr: personal proxies of what? [03:55] yea, i like the idea of network audio that's relatively angnostic. [03:55] i couldn't get it to work tho [03:56] twb, I want to test my proxy server [03:56] rafaelsoaresbr: what kind of proxy? [03:56] twb, squid [03:56] So an HTTP proxy. [03:56] rafaelsoaresbr: What do you want to test about it? [03:57] twb, I've activated authentication [03:58] twb, so I want to known if was working [03:58] That doesn't require anything special on the server side. [04:04] arrrghhh, i want to completely disable interfaces, i nano that interfaces file and it says aouto lo [04:04] iface lo inet loopback [04:05] so that's your loopback [04:05] if you do "ifconfig" what do you get? pastebin it pls. [04:05] The loopback interface is needed for some things (e.g. portmapper). [04:05] then why are my wlan and ethernet active if not listed [04:05] ifconfig is deprecated; you should use "ip addr". [04:05] it is? [04:05] ubuntu: probably because you installed NetworkManager [04:06] ubuntu: did you install this server using the Server install CD, or the Desktop install CD? [04:06] on a server install? interesting. [04:06] arrrghhh: I always blame NM until I see evidence to the contrary. [04:06] i like the output of "ip addr" much better. [04:06] twb, probably a good idea. [04:06] ahh twb sorry i am on a desktop atm i want to make an encrypted system on my laptop that has no internet connection so im asking ahead of time [04:06] twb: update-grub didn't help, grub-install did [04:07] soooo, parted corrupts grub on GPT [04:07] good to know [04:07] domas: well, yeah; update-grub writes menu.lst; grub-install writes the MBR [04:07] hehe, so I figured [04:07] But I don't know why parted would "corrupt" grub. [04:07] It might be that grub legacy on GPT does a lilo style "just remember the block offset" instead of actually grokking the GPT layout. [04:08] domas: It *can* work (e.g. some forms of the parted based installer work). gdisk may be more suitable for some of your tasks. [04:08] this way the only way files come on and off are via disks so no way to hack my personal files [04:08] persia: I've never heard of gdisk. Is it a GUI for something? [04:08] twb, so i'm guessing you're not a mpd guru... how about codecs? i don't really think installing ubuntu-restricted-extras is a good solution for just music playback... [04:08] twb: It's fdisk for GPT (in lucid) [04:08] i figured the server side would know more about blocking network interfaces and ufw [04:08] persia: well, parted works, as long as you rewrite MBR record afterwards [04:08] twb, http://pastebin.com/r23gAqT7 That's my squid.conf. take a look at lines 21-25, 54 and 56. how does it looks like? [04:08] persia: hmm, why not GNU fdisk/cfdisk, which back onto libparted? [04:09] ubuntu, disconnect the cable turn off the wlan switch. nothin better. [04:09] * persia points at random upstreams vaguely [04:09] but i am going to use the same laptop to acess the net via live cds [04:10] twb: parted can be made to work (and several bugs were fixed in the lucid cycle, letting me install a previously uninstallable machine), but there remain some. [04:10] Shrug. Fair enough. [04:10] then i can reboot and acess my files on a crypt with no network ifs [04:10] I couldn't get GPT to work without EFI, and I don't have a crapbook. [04:11] persia: parted works [04:11] =) [04:11] persia: just GRUB doesn't work afterwards parted works [04:11] anyway, one mystery less [04:11] heh. Yeah. [04:11] Well, sometimes. [04:11] you can reinstall GRUB [04:11] My experience is that grub works after parted works *unless* I use LVM. [04:11] no LVM here [04:11] GPT though [04:12] Dunno then. worked for me. [04:12] * persia just want through the guided install on the installer [04:12] hehe [04:12] how can I get aligned partitions with installer? :) [04:12] (thats the only reason I'm doing this post-install partition magic now) [04:13] My experience is that grub works until it doesn't, and then I have to spend three hours on the phone with some poor bugger who can barely speak english trying to get him to burn and boot a live CD [04:13] :) [04:13] Which is why I use extlinux for most deployments. [04:14] domas: Use the lucid installer? I beleive it aligns paritions by default. [04:14] persia: ah, great [04:14] I'll give lucid a try once it is released :)) [04:14] too lazy to setup netboot imagesnow [04:14] libparted 2.2 will warn about unaligned partitions, too. [04:14] yeah, I've looked at fresh parted source [04:14] it aligns at 1MB boundary if you ask it to [04:14] RC comes out on the 22nd, which is today for some folks. May as well give it a try if you're doing a new install anyway. [04:14] Though I couldn't work out how to say "great, then please pick the nearest aligned block" [04:15] pity though that you can't specify custom alignment [04:15] unless you want to hack libparted, of course [04:15] or calculator and 'unit b' [04:15] Yeah [04:16] I was trying to align on my 128kB erase blocks, which is easy with GPT but a massive pain with msdos disk labels [04:21] 15% performance improvement after aligning on 256k stripes [04:21] \o/ [04:22] so does anyone use ubuntu-server to play audio out of the local soundcard? [04:25] domas: did you actually measure that? [04:25] mpd[6156] general protection ip:b6ff71b5 sp:b54dc850 error:0 in libavcodec.so.52.20.1 - those are the errors i'm getting when mpd crashes [04:26] twb: yes [04:26] domas: with what, Coker's bonnie++? [04:26] twb: ~/raidbench.c [04:26] Hm. [04:26] I have a tool that does not have any command line options [04:26] and I edit source [04:27] to do what I want it to do [04:27] :) [04:27] Is it public code? [04:27] now it is: http://p.defau.lt/?Z_lDclYEgquRx64Hhcdz2Q [04:27] this is uniform-random-load-tester [04:27] for apples-to-apples comparisons [04:28] Ah, so you're testing without the filesystem layer? [04:28] similar results are with filesystem layer [04:28] I was just too lazy to format filesystem with correct alignment options [04:28] Nod. [04:28] twb: I had 'align your filesystems' on my mysqlconf slides :) [04:29] http://docs.google.com/present/view?id=dgjzt2ms_40gjxrjkdx \o/ [04:29] slides 4/5 are db-agnostic [04:29] Bleh, doesn't work in w3m. [04:30] :))) [04:30] there's pdf export there [04:30] Not in w3m [04:30] http://docs.google.com/present/export?format=pdf&up=1&bg=1&inline=0&id=dgjzt2ms_40gjxrjkdx¬es=0 [04:30] haha [04:30] there is... [04:31] http://pastebin.com/QbDaGRcq <-- what I see [04:31] 'view together' ? [04:31] people should start using real browsers [04:32] Oh, right. [04:32] I was looking for something with "PDF" in it. [04:33] IMO "real" doesn't equate to "attempts to reinvent NeWS on top of HTTP" [04:33] well, browser is not just about HTTP, is it? :) [04:43] oh dear [04:43] what did I do wrong when I got 15% difference [04:43] so aplay makes horrible sounds from the sound card... i'm guessing audio works then? [04:44] domas: have you tried bonnie++? [04:44] I hate it when this happens [04:44] arrrghhh: are you playing a wav file? [04:44] twb: hehe, I don't want to initialize 2TB arena with bonnie :))) [04:44] domas: OK :-) [04:44] twb, it was an mp3 [04:44] arrrghhh: what evidence do you have that aplay works with MP3s? [04:44] i just wanted to see if i could get any sound at all [04:45] it sounded like my speakers were shredding themselves haha [04:45] so mplayer can handle this mp3, i get audio... it says thru alsa :D yay! so the issue is indeed with mpd. [04:47] New bug: #568223 in mysql-dfsg-5.0 (universe) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10.3 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/568223 [04:55] damnit, what did I do to get >10% difference [04:55] I want that NUMBER back!!! === dendrobates is now known as dendro-afk [06:40] I'm installing Ubuntu Server, and I set up a raid 5 array. After reboot, the raid5 array says it's resyncing, and since the three disks are 1TB, it's taking forever. Is it natural for it to be auto-resyncing right after RAID/FS creation? [06:40] Yes. [06:40] Assuming you mean md raid [06:45] yes [06:46] why? If the raid and FS are new, why is it trying to sync data that isn't really there? [06:46] When an array is first created and assembled, it will do an initial sync [06:46] The data *is* there, it's just not meaningful data [06:46] Since the md layer doesn't know what data the filesystem considers meaningful or not, it has no choice but to sync it all [06:47] twb, ah, the raid and the fs don't communicate. [06:47] AFAIK, that is correct [06:47] If you want that, you might investigate btrfs or zfs; they do some md/lvm stuff internally. [06:47] And I assume I shouldn't mess with the raid until the sync is done? [06:47] aka write data to it [06:48] lukehasnoname: it doesn't matter, but a reboot will cause it to re-start the sync [06:48] It's perfectly OK to write data during the sync [06:49] mk [06:53] sigh, when will btrfs support parity raids?! [06:54] Probably when it's production-ready :-P === rafaelsoaresbr_ is now known as rafaelsoaresbr [09:08] with uec where is the interface defined for dhcpd/dhclient? ive changed eucalyptus.conf to make hte privnet eth0 (rather than eth1), but after a restart its still using eth1 === cs278| is now known as cs278|work [09:15] hi everyone hi anyone knows a good howto on how to setuo mailservero on ubuntu? [09:17] <_ruben> libertiy: check the server guide on help.ubuntu.com [09:18] is there some automated postfix installer that sets things up ? [09:18] <_ruben> "things" ? [09:18] i dont feel like digging realy deep into the mailserver stuff i just need a solution for my webserver to host some mailbox [09:18] something like qmail toaster [09:19] i dont want to spend a whole day installing the mailserver [09:19] <_ruben> there a mailserver task available that sets up postfix+dovecot (and possibly more) [09:19] thats what i need indeed ialso need devecot [09:20] imap and perhaps and a easy way to manage mail accounts on the terminal [09:20] preferrable with some scripts so you dont have to messa around in the config files everytime for a simple change in username or password [09:20] <_ruben> ebox might have support for postfix and/or dovecot [09:21] ebox? [09:22] <_ruben> !ebox [09:22] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [09:22] i have an ubuntu server already its a vps so i cnanot reinstall it [09:22] You can reinstall some VPSs without telling the owner [09:22] Assuming it's full virtualization, you simply do something like preseeding and kexecing the netinst d-i kernel and ramdisk. [09:23] hmm looks like nice that ebox [09:23] only i run ruby on rails and have specialised deployment tools installed so thats not an option alhough i appreciate the suggestions [09:23] atmail seems nice, but it costs money [09:24] i love linux and i love system adminstration, i love to know all the details but at this point i dont just have the time to digg in really really deep [09:24] It's that ignorance that keeps the flame alive [09:24] so perhaps theres an easy mailserver build on postfix that simplifys the installation [09:24] hehe no its really true ;) [09:24] If you knew sysadm you wouldn't like it [09:25] It's like sausages [09:26] People say things like "it'll cost to much to deploy SSL, just use unencrypted LDAP" or "can't you just write a cron job to restart the daemon every hour?" [09:27] hmm i see no other option just than to get some howto's and install postfix with devocot [09:28] postfix has debconf questions to hold your hand [09:29] <_ruben> and the postfix-dovecot packages takes care of the integration of the 2, again, never used it myself ;) [09:29] Aye debconf should do most of it (at least with exim4. I've never used postfix) [09:30] lil_cain: away, heretic! exim4 doesn't Provides: default-mta on Ubuntu! ;-) [09:43] twb: It is (or at least was) still supported by Cannnonical though. [09:44] i am using ubuntu with vmware, i started a web server on it which is accesible within vmware, but not accessible to anyone else. but when i switch back to windows i can't access the server. does anybody know how to fix that? [10:14] can someone help me please? [10:15] <_ruben> okokokok: you might wanna give more info, as your question doesnt make any sense to me [10:16] Your issue is almost certainly one with vmware networking. [10:22] i am using windows 7, i used vmware virtual machine to load latest version of ubuntu. in ubuntu i installed and started a webserver. using firefox in ubuntu I am able to load 127.0.0.1:3000 which takes me to the index page. but, when i Minimize Vmware virtual machine/ubuntu and try to load 127.0.0.1:3000 in windows 7, it says it can't access the server. [10:22] does it make more sense now? [10:25] <_ruben> okokokok: yes, and it also makes sense that it doesnt work like that [10:25] <_ruben> 127.0.0.1 of the vm is not the same as 127.0.0.1 of the host [10:27] i see.. so how would i access it? [10:27] <_ruben> by using the non-localhost ip address of the vm obviously [10:27] how do i do that? [10:29] <_ruben> start by buying a book on networking, since obviously you dont have the faintest idea how networks work [10:31] i will do that later, right now i just need this simple thing, i wanna access the webserver running on vmware. so if you could just direct me towards some networking term or something, i'll look it up on google and try to figure it out on my own [10:32] <_ruben> in the vm run the command "ip address show" to see which ip addresses it has [10:44] inet 192.168.232.131/24 brd 192.168.232.255 scope global eth0 [10:45] i tried to run those ips in windows with port 3000, but it didn't work. i then tried the ipconfig command in windows 7, it listed 2 adapters under vmnet, i tried those ips as well with port 3000 but they didn't work. [10:48] <_ruben> can you ping 192.168.232.131 from your windows machine? [10:48] <_ruben> and can you ping google.com for instance from your vm? [10:49] i can access google.com from firefox in vm. so i assume i can ping it [10:49] yes i was able to ping 192.168.232.131 from windows machine [10:53] <_ruben> what does this say in your vm: netstat -lnt | grep 80 [10:53] <_ruben> err [10:53] <_ruben> make that 3000 instead of 80 [10:55] tcp 0 0 127.0.0.1:3000 0.0.0.0:* LISTEN [10:56] <_ruben> whatever program you have running on port 3000 is only listening to localhost (127.0.0.), so you cant access it from another machine [11:01] how come in ipconfig i get 192.168.232.1 and in vmware i get 192.168.232.131? [11:02] <_ruben> because they're not the same machine [11:03] <_ruben> a vm acts just like another physical machine on your network, with its own ip addresses obviously [11:07] i found a port forwarding tool [11:08] in vmware [11:09] i entered host port: 8080. virtual machine ip: 192.168.232.1 virtual machine port: 3000 [11:09] but that didn't help. [11:09] <_ruben> indeed [11:10] what did i do wrong? ^_^ [11:10] <_ruben> because it listens on localhost only, you need to change the webserver configuration to listen on any ip address [11:10] hmm [11:11] when i run the webserver on windows, it also listens to 127.0.0.1, but others can access it [11:15] You need to change the config file. [11:16] and restart/reload the webserver. [11:17] i am using WEBRICK [11:18] with ruby on rails [11:19] I don't know anything about ruby, sorry. [11:53] someone must know how the dhcp instance in eucalyptus/uec decides which interface to use? [12:57] Can I ask UEC questions here? [12:57] Sure [13:00] Im trying to deploy the UEC following this guide https://help.ubuntu.com/community/UEC/CDInstall, but I don't know if the step 4 has to be done in the ubuntu 9.10 server === dendro-afk is now known as dendrobates [13:21] Im trying to deploy the UEC following this guide https://help.ubuntu.com/community/UEC/CDInstall, but I don't know if the step 4 has to be done in the ubuntu 9.10 server === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [13:29] hi, is anybody here? [13:39] FFF666: on 9.10 yes, on 10.04 no [13:39] why does "tar --update" not descend into directories? like the other tar operations? [13:40] ahh, [13:41] ttx: Is 10.04 beta equals to the realease that is coming in one week? === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [13:41] FFF666: no, but the UEC in there is still much better than the one in 9.04 [13:42] I mean 9.10 [13:44] ok, because y tried to install de UEC but some errors came up [13:44] thanks === ogra_ is now known as ogra [14:16] yo! [14:23] anyone know how the dhcp server in uec knows which interface to use? its using eth1, but i would *love* for it to use eth0. cant find for the life of me why its doing what its doing though [14:29] does anyone knows how to check HD Hardware Status without considering fs type? [no, i don't mean smartmontools] [14:32] e-DIO-t: Then what /do/ you mean? [14:32] i mean that i'd like to check the hd healt status [14:33] Yes. [14:33] The answer to that "question" is smartmontools. [14:33] mmmh [14:33] ...but since that's not what you're looking for, I clearly don't understand the question. [14:33] well [14:33] i'm looking for a "low level" check on clusters. [14:34] smartmon checks only s.m.a.r.t. values, or not?! [14:34] It does. [14:34] Are you looking for badblocks? [14:34] yep! [14:35] Ok. [14:36] well: i'm going to install it this evening! [i'm currently not in the right-site] === sourcode_ is now known as sourcode [15:01] I'm running KVM with an internal network bridge and an external network bridge (2 nics). Can I still use iptables as a nat firewall on a bridge level? [15:05] New bug: #568435 in apache2 (main) "symbol lookup error: /usr/sbin/apache2: undefined symbol: apr_atomic_xchgptr" [Undecided,New] https://launchpad.net/bugs/568435 [15:11] *sigh* it never stops [15:21] RC is out [15:24] :D [15:27] http://lvsd.lucid.bit.nl/stats/index.php [15:29] <_ruben> nice stats :) [15:30] thanks === libertiy is now known as libertiy|away === libertiy|away is now known as libertiy [15:47] is the UEC high available? I've read the documentation and Eucalyptus does not seem to support it. Is this correct? Because if one node fails, you want the other nodes to automagically start the 'missing' nodes. === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [16:06] New bug: #568468 in apache2 (main) "lucid server: mod_mem_cache with mod_dav_svn crashes apache for certain files" [Undecided,New] https://launchpad.net/bugs/568468 [16:12] Hi guys I am having some issues with apt-cacher on ubuntu 8.04.. every client pointing to the apt-cacher is reporting 403 forbidden when i try to install a package. I dont get this error when am using the original ubuntu source.list.. [16:16] good morning [16:19] anybody home? lol [16:20] hi wack47 [16:21] i guess it still is kinda early! hey mcas [16:21] that depends on the timezone it could be late for someone ;-) [16:22] mcas: haha good point! question: u know much about raid, and how it effects the filesystem? [16:23] wack47: i would say that raidlevel and filesystem have no big effect on each other [16:23] but that's only my opinion [16:24] mcas: ok, thats what i was thinking too, but im trying to figure out some storage space issues [16:24] ill show ya what i got on the system, and then go from there [16:24] if you use zfs you have a relation between raid and fs ;-) [16:24] !seen ttx [16:24] I have no seen command [16:26] ok here is my mdstat: http://pastebin.com/dZG6eTvY [16:26] and here is my df -h : http://pastebin.com/tpMc2DwV [16:28] mcas: my problem is that /dev/sdf1 is full [16:28] and i dont know why [16:28] the /dev/md0 is mounted on /budir, is that why / is saying its full? [16:28] no [16:29] is this a fresh install or a system that is in use for some weeks? [16:29] i have had it a little while [16:29] wack47: [16:29] sudo -i [16:29] cd / [16:29] du -chsx * [16:29] you could run du -h --max-depth=1 [16:30] here is du -hsx /*: http://pastebin.com/sq6i34z8 [16:31] wack47: could you please umount /budir [16:31] and the run du -chsx again? [16:31] k === libertiy is now known as libertiy|away [16:34] http://pastebin.com/6d82VHGB [16:34] after unmount === libertiy|away is now known as libertiy [16:35] is it just me or am i seeing stuff in /budir that isnt part of the array? [16:36] yes :-D [16:36] aha! [16:36] lol [16:36] thanks! [16:36] i think you cp data over there without having it mounted [16:36] yeah looks that way [16:36] ok thnks! [16:36] New bug: #568485 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/568485 [16:37] so mount the array to something like /mnt and then cp over the files ;-) [16:38] yep! thanks! [16:38] yw [16:38] oh look, only 5% of / used1 [16:38] how nice is that! [16:38] lol === rafaelsoaresbr_ is now known as rafaelsoaresbr [16:47] Hi guys I am having some issues with apt-cacher on ubuntu 8.04.. every client pointing to the apt-cacher is reporting 403 forbidden when i try to install a package. I dont get this error when am using the original ubuntu source.list.. [16:52] bigbrovar, strange, the default configuration authorize all incoming request [16:52] bigbrovar, can you check the /var/log/apt-cacher/access.log and error.log [16:56] lionel: this is the access log http://pastebin.com/vnjhmexy [16:57] and this is the error.log http://pastebin.com/uspXG8G8 everything has been running fine now for like 2 years.. this problem started like some days ago. [17:04] mathiaz: around ? [17:04] ttx: yes [17:04] about bug 563829 [17:04] Launchpad bug 563829 in openldap "olcAccess are options broken on upgrade in {-1}frontend.ldif" [Medium,Triaged] https://launchpad.net/bugs/563829 [17:05] mathiaz: could you please look into it and comment on pre-release feasbility ? [17:05] since it affects upgrades, might make sense to fix [17:05] ttx: yes - I was planning to look into that issue today [17:05] mathiaz: ok thanks [17:05] ttx: right - upgrade from 8.04 LTS though [17:06] ttx: which won't be automatically turned on next week [17:06] the other (bug 423252) sounds quite unilkely before release anyway [17:06] Launchpad bug 423252 in sudo "NSS using LDAP on Karmic breaks 'su' and 'sudo'" [High,Confirmed] https://launchpad.net/bugs/423252 [17:06] ttx: IIUC LTS to LTS upgrade will be automatically suggested with 10.04.1 [17:06] mathiaz: right, but still :) [17:07] zul: same for https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/533029 [17:07] Launchpad bug 533029 in autofs5 "[FFE] autofs5-ldap doesn't work immediately after bootup" [High,Triaged] [17:07] zul: please ping the release team for review [17:08] (now that rc is out) [17:09] hggdh, kirkland: please mark the UEC RC testing related items DONE in the blueprints, when you officially signoff on them :) [17:11] ttx: why did you mark this bug as won't fix? https://bugs.launchpad.net/ubuntu/+source/bacula/+bug/321091 [17:11] Launchpad bug 321091 in bacula "Bacula fails to install correctly if mysql wasn't installed before" [Medium,Triaged] [17:12] mcas: I marked it as wontfix as a server papercut. The bug is still open [17:12] yes but why? [17:12] now that we know we'll probably do paercuts again... maybe I should reopen it [17:13] because the lucid papercuts session was over [17:13] * ttx reopens [17:13] there. [17:13] ok [17:13] it will be considered for maverick now [17:14] i would try to fix it myself but i am not familiar with packaging === dendrobates is now known as dendro-afk [17:25] has anyone here ever tried to use preseed to install to a SAN with multiple paths? === dendro-afk is now known as dendrobates [17:26] ttx: I am resetting the UEC rig to use the RC, and should have it done by end-of-day [17:29] mathiaz or ttx: Do you have any priorities for packages to get in before release? libvirt is already in. [17:29] It's not clear we have time to build all the stuff that's in queue now. [17:29] smoser: anything you want to save from cepedak? I am going to blow it away [17:31] lionel: did u see the errorlogs i losted? [17:32] bigbrovar, yes, but I can't see somthing wrong in it [17:33] lionel: hmm weird [17:33] ScottK: I have nothing else "needed" in the queue yet [17:33] OK. [17:33] hggdh, i dont need naything there. [17:33] dovecot is in too [17:33] would I still be able to upload new packages for the cluster stack by the end of the weekend? [17:36] ScottK, ttx ^^ [17:37] smoser: thank you. rig going down now [17:37] ttx: for bacula im considering ripping out dbconfig again [17:38] RoAkSoAx: By "New" you mean new updates to existing packages right? [17:38] If so and they are in Universe, yes. [17:40] I've installed a server from the mini image and its installed the generic-pae kernal, should I install the server kernal manually? [17:41] ScottK, new upstream releases which are pretty much big fix releases [17:42] If pretty much != are then they need FFe [17:42] ScottK, ok then, but i still can then [17:45] Under what contexts should /etc/pam.d/login be used? Shouldn't "su - someuser" use it? === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [18:11] mathiaz: im going to try to migrate most of the mysql-5.0 bug to mysql-5.1 if they still are valid [18:14] New bug: #553142 in nis (universe) "gdm does not obey NIS settings for user groups" [Low,New] https://launchpad.net/bugs/553142 [18:26] Hi im running a ubuntu server and i have LAMP instaled, i need to now install webmin should i wipe LAMP and just install webmin or keep LAMP and install webmin? many thanks [18:27] webmasteroli: Why, precisely, do you want webmin? If you have LAMP, you're likely expecting folks to hit the webserver, only adding to the set of aguments as to why webmin makes for poor security. [18:28] !webmin | webmasteroli [18:28] webmasteroli: webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. [18:28] !ebox [18:28] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [18:28] hmm [18:28] how do i install ebox? [18:28] New bug: #375371 in mysql-dfsg-5.1 (main) "MySQL must not use /tmp" [Medium,Triaged] https://launchpad.net/bugs/375371 [18:31] webmasteroli: apt-get install ebox? [18:32] ah great. [18:32] * RoyK kindly tells webmasteroli to apt-cache search [18:32] Thanks, sorry im new to Unix shells [18:32] webmasteroli: get used to it - when you know your environment, you won't like a web gui [18:33] :) [18:33] im running linux on a VMware partition for my terminal/dev stuff [18:34] webmasteroli: I think getting to know linux won't be too hard, and you'll gain a lot of doing so instead of trying to manage it through some web gui - just my two cents [18:36] Agreed, however im just starting, my short term memory is rather bad so im looking forward to being able to use a web GUI for basic configs. [18:37] webmasteroli: try using it for a couple of weeks without using some gui, and things will stick [18:39] Iv:) [18:39] ops [18:41] New bug: #568445 in qemu-kvm (main) "LVM backed drives should default to cache='none'" [Wishlist,Incomplete] https://launchpad.net/bugs/568445 [18:43] reimaging my server due to multiple apache systems [18:45] So, having seen 568445, I'm all excited about new uses for my LVM chroots. Does anyone have a good pointer to a reference on making qemu-kvm work well with LVM storage? [18:47] Hi guys, ive got the ebox running [18:47] however i cant login, [18:47] its ment to be for example http://yourdomain.com/ebox [18:47] however mine is giving me a "page not found" [18:47] persia: nothing has changed, has it? [18:48] webmasteroli: see my two cents above :) [18:48] webmasteroli: what are you trying to do, anyway? [18:48] setup a lamp stack. [18:48] with FTP [18:48] Daviey: What changed is that I learned it's possible :) I have N LV chroots that I use with schroot, and being able to *also* use them with kvm enables whole new realms of testing. [18:48] i know its your way to do it Roy, just wondering if i could have some help. im new to shell commands like ive said before. [18:49] (where N is currently 7 on my laptop, and more in other environments) [18:49] webmasteroli: "apt-cache search" for php, apache and mysql [18:49] it's not really hard [18:49] persia: using libvirt? [18:49] then apt-get install them [18:50] ive done that Roy [18:50] just want somthing alittle easier. === dendrobates is now known as dendro-afk [18:50] Daviey: I used libvirt for the first time yesterday. The LVs are for schroot, but I'd be happy repurposing them. === dendro-afk is now known as dendrobates [18:50] webmasteroli: sure, but please, give it a week or two and you'll feel at home with the command line [18:51] I should rephrase: I used libvirt *successfully* for the first time yesterday. [18:51] I understand, however just for now could you help me with the ebox installation? [18:51] webmasteroli: or apt-get install dselect [18:51] then run dselect [18:52] persia: virsh # attach-disk persia-schroot /dev/vg/persia-schroot sdb1 <--- ? [18:52] persia-schroot, being the libvirt domain [18:52] Ok [18:52] ive ran that now roy, what next? [18:52] dselect [18:52] there you can choose from available packages [18:54] Daviey: Hrm. That looks trivially simple, but I think I'll need to go read some more about libvirt :) The end goal would be to have a script that auto-launched VMs based on schroots. Thanks! [18:55] persia: sounds like an interesting blog post is in the works :) [18:55] No, just a script. I don't blog. [19:00] anyone know if I you can have a windows machine access resources on UEC [19:03] why not? it's all bridged, isn't it? === dendrobates is now known as dendro-afk [19:16] hi [19:16] can a ubuntu server cloud ed provide amazon S3 compatible services ? [19:17] it's mostly the same thing [19:17] Same interface. I'm not convinced it's the same implementation. [19:18] I've an app who need to tap into S3 (or I suppose equivalent) to store files, but I've an ubuntu server running somewhere else, so I'm wondering if I can tap into it or not [19:21] Hi all [19:21] ive setup ebox on 173.203.80.194 however it seems its not working [19:21] ive tried going to the directory /ebox/ [19:22] anyone know if I you can have a windows machine access resources on UEC [19:28] if anyone can lend me a hand in installing Ebox pls let me know (before i give up) === dendro-afk is now known as dendrobates [19:29] BUT WHAT WILL MONITOR THE NETWORK MONITOR [19:34] bogeyd6: huh? === dendrobates is now known as dendro-afk [20:08] hggdh, around ? [20:10] Can someone look at my smb.conf file and perhaps tell me why the shared directories are not allowing 777 permissions even with unauthenticated guests? http://ubuntu.pastebin.com/C06LEcD5 === dendro-afk is now known as dendrobates [20:27] smoser: here [20:28] hggdh, are yo uusing the dc cloud ? [20:28] ok this is truly strange... I can ssh up to a host in an Amazon Cloud... I can change to the directory I want to use, thereby verifying that it is there... but when I return to my original host and try to scp to that location the response that I get back is that it doesn't exist... http://pastebin.com/KYEpdr3P [20:28] smoser: on the process of installing the RC on topo2. the two NCs, plust the SC will start to install in a few [20:29] ok. never mind then. i was hoping to run a test there. [20:31] give it some 20 minutes, and it will be ready [20:32] I have just started netbooting santol, sapodilla, and soncoya, so in about 20m it will be ready [20:32] smoser: BTW, how do I change boot options in the uec image? [20:32] you dont [20:32] darn! [20:33] if you want, you can hack it [20:33] great! How? [20:33] looking [20:33] hggdh, each node controller has: /usr/share/eucalyptus/gen_kvm_libvirt_xml [20:34] that writes out the libvirt xml . it should be self explanatory, open that and hack away [20:34] smoser: thanks, will do === libertiy is now known as libertiy|away [20:38] how do I have my iptables rules saved for reboots ? [20:46] osmosis: Use ufw if you can. [20:50] soren, i think my rules are too complicated for that. [20:52] osmosis: sudo iptables-save > my.firewall.policy (it has a short man page too) === dendrobates is now known as dendro-afk [20:59] osmosis: ufw is nice [21:02] guntbert, that will save it...but how do I auto install it at bootup ? [21:03] RoyK, does ufw support bridging and logging ? [21:03] osmosis: look at iptables-restore :-) === ersoy is now known as hersoy === hersoy is now known as ersoy [21:40] Anyone trying to setup a slapd slave server with lucid? [21:43] yep [21:44] sebas891: if you look at the server guide for lucid there are instructions === sjefen6_ is now known as sjefen6 [21:56] New bug: #568668 in samba (main) "package samba-common 2:3.4.0-3ubuntu5.6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/568668 === libertiy|away is now known as libertiy [22:25] oh im totally sorry about the away message.. my irc client does that automatically [22:26] and i havebt been at the system for 2 hours [22:28] Hi, is it possible to bind mount /var? eg. /srv/somedisk /var none bind [22:28] Isn't it dangerous ? [22:30] It's possible. It's risky if 1) you run anything that needs to write to a common file inside the chroot or 2) you have any information in /var that you don't want to expose to the chroot. [22:30] sommer: ok, is the server guide for lucid online? don't see it on the https://help.ubuntu.com/ I see there is a package with that name. [22:39] I found it here file:///usr/share/ubuntu-serverguide/html/C/openldap-server.html [23:01] If you have a home server what are you using it for? I'm only using mine as file server but I would like to get more out of it so I'm just looking for ideas [23:13] where are ue images stored? [23:13] Hallo [23:14] I'm looking for a good postfix hardening guide on ubuntu server, is anybody willing to address me? :)