/srv/irclogs.ubuntu.com/2010/06/16/#ubuntu-server.txt

=== dendrobates is now known as dendro-afk
=== robbiew is now known as robbiew_
uvirtbotNew bug: #594888 in qemu-kvm (main) "no qemu-system-i386" [Undecided,New] https://launchpad.net/bugs/59488800:57
=== STF is now known as Guest14344
alyoshkafor some reason I'm not able to access anything from a web server I just set up. I'm using Brightbox's version of Nginx for Ruby on Rails. I've set up the same thing before on another server and everything worked fine, but here it just gives me a gateway timeout error after a few minutes. if I try wget http://localhost from the actual server, it works, but it just won't serve to remote machines for some reason. anybody know w01:53
alyoshkathat?01:53
alyoshkait's like as if Nginx is listening only to requests from localhost or something. anybody know why?02:00
alyoshkahmm, if I shut Nginx down, then remote machines fail to connect completely, but when it is running, it has a gateway timeout after like 10 minutes02:02
alyoshkaso I guess it is listening, but failing to respond or something. why?02:03
alyoshkadoesn't anybody know what to do about Nginx giving a gateway timeout error on absolutely everything when the request is from a remote machine?02:26
bcalyoshka: listening on a port other than 80?02:33
alyoshkabc: no, it's on 8002:33
alyoshkaif I shut down nginx, the remote machine will just say connection refused, if nginx is running, it'll hand for about 10 minutes and then give a gateway timeout error02:34
alyoshkaso nginx is getting the request, but it's not serving anything02:34
alyoshkano static files, no rails, nothing02:34
bcalyoshka: I know very little about nginx, but what do the logs say, if anything?02:35
alyoshka2010/06/16 01:09:31 [alert] 2282#0: worker process 2297 exited on signal 902:39
alyoshka2010/06/16 01:19:38 [error] 2361#0: *5 upstream timed out (110: Connection timed out) while reading response header from upstream, client: xx.xxx.xx.xxx, server: myserver.com, request: "GET / HTTP/1.1", upstream: "unix:/tmp/passenger.2314/master/helper_server.sock:", host: "myserver.com"02:39
alyoshkaI have a bunch of those in the error logs02:39
alyoshkabut those are only on the rails site02:40
alyoshkathe static site doesn't seem to have logged any errors02:40
bcalyoshka: I'm wondering if you have a syntax error or loop or but that is causing it to run longer than normal. However, there is an absolute ton on google about 'gateway timeout error rails nginx' -- have you checked those sources? I see a lot of references to a proxy timeout configuration directive that may apply, I'm not sure.02:43
bcs/but/bug/02:43
alyoshkaI tried some of the suggestions there, but nothing worked. another thing is that most of the problems people had were only with the rails websites or with large files, but static files worked for them02:44
alyoshkafor me, nothing is working02:44
alyoshkamight have to go back to Apache, but it brings my small virtual servers to their knees02:45
acajouHi all. I'm having an issue with a universe/admin package that works on my Kubuntu desktop but appears broken on a new Ubuntu server install...02:49
acajouThe package is btrfs-tools.02:49
bcalyoshka: is that thing using fast-cgi?02:50
acajouWhen you install it, it's supposed to (amongst other things) create a /dev/btrfs-control file. It doesn't do that, which means nothing works, basically.02:50
acajouBut I'm not sure if it's just my box or if the package is actually broken...02:51
bcalyoshka: does your config specify this directive anywhere? -> fastcgi_pass02:51
acajouWould it be best to open a bug report against the package?02:52
alyoshkabc: no, it's using passenger for rails and well, static files are served by the server itself02:52
enav1hi i need the wiki of this channel.... thanks02:56
enav1woops nv02:56
bcalyoshka: based on some pages I just looked at, your static files load fine?02:57
acajouif someone could try "sudo aptitude install btrfs-tools" on a 10.04 server install and tell me if they see /dev/btrfs-tools, that would be really wonderful...02:58
acajouI'd know if it's my box that has a problem, or the package itself.02:58
bcalyoshka: I think I'm in over my head. However, include helper_server.sock in the query I mentioned earlier.03:01
alyoshkabc: my computer crashed so I didn't get the last few messages u sent03:02
bcalyoshka: only one you missed besides the one I just sent was <bc> alyoshka: based on some pages I just looked at, your static files load fine?03:03
bcalyoshka: after that: <bc> alyoshka: I think I'm in over my head. However, include helper_server.sock in the query I mentioned earlier.03:03
alyoshkabc: the answer to that is no, the static files don't load either; nothing loads at all03:03
bcalyoshka: I saw a good bit of info related to the error log snippet you pasted + passenger.03:04
bcThat is, with 'gateway timeout'03:04
alyoshkayeah, but most ppl who have problems with passenger don't have the problem with static files03:05
alyoshkaI'll set up apache for now because I have a client that needs their site up today and I'll play with nginx later, I guess03:06
cwillu_at_workacajou, poke poek03:33
cwillu_at_workacajou, did you ever get answers re: btrfs on a server install?03:33
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
hallynjdstrand: sweet, thanks05:03
PhlogistiqueHi05:31
PhlogistiqueI need help05:31
PhlogistiqueDoes anyone here have an Ubuntu Jaunty?05:31
PhlogistiqueIf someone has this and could send me his /etc/{init.d,rc*} in a tar, I would be eternally grateful05:32
twbPhlogistique: you can get that from packages.ubuntu.com/jaunty/sysvinit-rc or so.05:35
twbdpkg -S /etc/init.d/ should tell you what packages you need.05:35
twbNote also that you can "aptitude reinstall <package name>"05:36
twb...although for conffiles that probably won't help.05:36
twbIn future, I also recommend running etckeeper to place your /etc/ under version control, which would allow you to simply revert the deletion.05:36
Phlogistiquetwb: I didn't delete anything05:38
Phlogistiqueit's far worse05:39
twbGo on...05:39
Phlogistiquewell I installed a Jaunty with the /etc of a Lucid05:39
Phlogistiqueand after like one month it's the first time I try booting it05:39
twbIn that case I suggest you reinstall from scratch.05:39
Phlogistiquehaha05:40
twbYou will not get /etc back to the way it was05:40
Phlogistiquebut for this I have to save everything05:40
twbWell, this is why you put /home and / on different filesystems05:40
PhlogistiqueI know. If I can get the system to boot and to connect, I will be satisfied05:40
Phlogistiquetwb: not everything is in /home05:40
twbGranted.05:40
twbWhen installing I would normally make a squashfs of / and put it in /root/<old hostname>.squashfs or so, so that I can easily restore data from it as needed.05:41
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
=== dendro-afk is now known as dendrobates
PhlogistiqueWOOOOOHOOOOOO IT BOOOT06:06
PhlogistiqueZS06:06
Phlogistique*S06:07
PhlogistiqueYAY YAY YAY06:07
PhlogistiqueYES06:07
PhlogistiqueIT WORKS06:07
a3istanyone know if there's a channel for freenx related questions, or know how to enable compositing for nx-hosted sessions on ubuntu-server?06:26
uvirtbotNew bug: #594932 in mysql-dfsg-5.1 (main) "MySQL cannot access it's plugin directory (AppArmor rule)" [Undecided,New] https://launchpad.net/bugs/59493206:26
twba3ist: I imagine that would require AIGLX to work over NX06:30
twbUnless you mean "work unbearably slowly"06:30
a3istI'll check it out, thanks for the heads up06:31
a3istI'm using gnome sessions hosted via nx to help some family members learn ubuntu06:31
a3istawn needs compositing though06:32
twbYes, well.06:32
twbIMO these new-fangled desktops that assume the they get direct rendering should FOAD06:33
twbIf I wanted a network-opaque windowing system, I'd use glitz06:33
a3isti mean hell, I could always set up x forwarding to the osx clients but the nomachine nxclient was a lot more user-friendly for the non-CLI-comfortable crowd06:35
ruben23hi how do i terminate a running application, not responding at all06:36
a3istfind its pid, use -kill06:37
a3istor if theres only one instance of it you can do "killall <processname>"06:37
twbFSVO killall = pkill06:38
a3isterr sorry that's "kill <pid>", not "-kill"06:38
scarif that doesn't work, 'kill -9 <pid>' usually will06:42
uvirtbotNew bug: #594949 in libcommons-cli-java (main) "Sync libcommons-cli-java 1.2-3 (main) from Debian testing (main)" [Wishlist,New] https://launchpad.net/bugs/59494907:36
=== unreal_ is now known as unreal
ttxDaviey: should I try to reproduce the instance run / alpha1 issue ?08:49
Davieyttx: If you have a spare cycle!09:07
ttxDaviey: installing a UEC rig as we speak.. repdocuing should not take very long09:09
Davieyttx: thanks09:11
huatsmorning09:23
ttxhuats: o/09:27
huatshello ttx !09:27
=== dendrobates is now known as dendro-afk
ttxDaviey: reproduced09:48
ttxDaviey: also seen elsewhere and also linked to 2.6.34: http://open.eucalyptus.com/forum/decrypting-image-exception09:49
ttxShould definitely be escalated to Eucalyptus for them to test on 2.6.3409:49
Ngkirkland: hrm, how come that qemu-kvm upload you sponsored doesn't show up on https://launchpad.net/ubuntu/+source/qemu-kvm ? can I monitor its progress into -proposed somewhere?09:51
uvirtbotNew bug: #594989 in tomcat6 (main) "Lucid Lynx authbind defaults too restrictive" [Undecided,New] https://launchpad.net/bugs/59498909:51
Davieyttx: Agree, seems they are a aware of it.. Really it's an issue for the kernel/mulesoft to resolve09:53
Davieyttx: Will mention it in the weekly call.09:54
ttxI don't think Mule is in the path09:54
ttxIt's a bouncycastle exception09:54
DavieyOn another note, anyone else notice we don't have any daily cd images?09:54
Davieyttx: ah yes09:55
ttxDaviey: I'll have a look at the crypto code in WalrusImageManager.java to check it's sane09:57
Davieyttx: Sounds good to me, thanks09:58
Davieyttx: There are two bugs that seem to have the same behaviour on the bouncycastle tracker09:59
DavieyHowever, both seem to be user issue.. but this could be also..09:59
Daviey(i doubt it)10:00
ttxDaviey: link ?10:00
Davieyhttp://www.bouncycastle.org/jira/browse/BJA-27510:00
Davieyhttp://www.bouncycastle.org/jira/browse/BJA-25110:00
ttxyes, those don't look like the same issue10:01
Davieyi agree.. but there are two potential pointers to check for a work around.10:01
Davieyttx: I'm going to compose an email to euca upstream shortly regarding this (so they have more info ready for the call), any extra insight would be appreciated.10:02
ttxDaviey: yes, just make sure to point out that forum post as being the same issue10:03
Davieywill do10:03
ttxDaviey: the issue is either a kernel regression, something that needs to be changed in Bouncycastle to accomodate recent kernel changes, or in theur implementation of crypro decoding10:03
Davieyagreed10:04
ttxthough that last one looks sane to me10:04
Davieyttx: Hmmm.. how big is the image it's try to decrypt?10:04
ttxbig.10:04
Daviey>2GB big?10:05
ttxhmm10:05
Davieyhttp://www.bouncycastle.org/jira/browse/BJA-276 could perhaps be related10:05
DavieyAlthough.. i fail to see why lucid kernel works.. if that is the issue.10:06
Davieyi would expect it to be a JVM version issue.10:06
ttxshouldn't be > 2Gb10:06
ttxthe image before encryption is 1.4 Gb uncompressed10:06
* ttx tries to find the size10:06
ttxhmm, looks like a red herring too10:08
Davieyyeah10:08
ttxnot PGP, and I don't see why 2.6.34 would factor in10:08
DavieyYeah, i noticed it wasn't PGP - but i would imagine it shares the same functions.10:08
ttxcan be tseted by registering a verysmall image10:09
Davieyttylinux10:09
ttxyep10:09
Davieyttx: When you predouced, did you test the Alpha1 kernel - or the current maverick kernel?10:11
Davieyreproduced*10:11
ttxalpha110:11
ttxI can upgrade that.10:11
ttxDaviey: looking at the logs, it decrypts the kernel alright10:11
ttxbut not the image10:11
Davieyttx: Okay, whilst you have the enviroment of A1, can you upgrade the kernel and try again?10:11
ttxSo it's just not "decryption fails", it's "some decryption fails"10:12
Davieyttx: Oh aye.. which made me wonder if it was a file size issue10:12
ttxyep10:12
Davieyttx: Can you apt upgrade to maverick kernel?10:12
ttxwill try upgrading first, then a ttylinux image10:12
ttxyou know where I can find one ?10:12
Davieycool.. That should answer if this is fixed in the latest kernel for the ubuntu-kernel team10:13
Daviey(/me suspects it'll still be there)10:13
* Daviey pokes his lab10:15
* ttx retries regsietring/running on latest kernel10:25
ttxsame fail. Registering is sufficient to trigger the decryption error... no need to try to run it10:28
nimrod10is there a documentation where I can read about how ubuntu-server 10.04 handles pam and passwords for users ?10:30
nimrod10I found out I can't create users with empty passwords in 9.10 and 10.04 server10:30
nimrod10This was so that the users would login via ssh key and then set their own password10:31
ttxDaviey: where can I find a ttylinux image ready to register ?10:34
Davieyttx: Hmm, is it not on the UEC web store?10:41
ttxI don't think so... looking again10:41
Davieywget http://eucalyptus.cs.ucsb.edu/downloads/euca-ttylinux.tgz ?10:43
ttxwill try that10:43
Davieyscrub that10:43
Daviey4010:43
Daviey40410:43
remix_tjno one got problems while installing ubuntu 10.04 server on IBM eServer 225? I get kernel panic while detecting hardware...10:44
ttxfwiw, registering an emi with an artificial .img the same size as the kernel is working10:44
ttxDaviey: ^10:44
Davieyinteresting10:44
ttxSo it's not a question of different codepaths between kernel and image10:44
ttxit's either size or luck10:44
Davieyremix_tj: I would recommend registering a bug against the package "linux"10:45
* Daviey bets on size10:45
* ttx will try with the smallest image in store, a karmic i38610:47
Davieyttx: IIRC the ttylinux is shipped in the euca deps, where the WSDL stuff is (so unpackaged)10:49
ttxI can test the size issue by randomly making .img files.10:51
ttxthey don't really need to be runnable10:52
Davieyttx: ah, using dd?10:52
ttxyep10:52
Davieygood thinking that man10:53
ttxSo far 4Mb -> ok, 1.5Gb -> fail10:54
Davieyinteresting10:56
ttxthe karmic image should test 1.3 Gb10:56
ttxi'll try 200Mb10:56
ttx200 Mb -> fail11:00
ttxkarmic (1.3Gb -> fail11:01
Daviey100MB?11:01
ttxi'm on it :)11:01
Davieysorry11:01
* ttx dichotomizes11:01
DavieyThat is the first use of dichotomise this week!11:02
remix_tjDaviey: but i can't read all the kernel panic... now i try with alternate, else i'll file a bug11:04
ttxDaviey: 75Mb -> pass11:04
ttx140Mb -> pass11:06
ttxbeh11:07
ttx205Mb -> pass11:08
* ttx retests 200Mb11:08
ttxarh, seems like its not just size11:10
ttx1Gb -> fail11:16
Davieyremix_tj: This clearly sounds like a bug, so even if you can;'t provide enought detail at the moment - raising a bug in regards to the hardware make/model would be useful11:17
Davieyttx: Bah.. was hoping it was a clear cut size thing11:17
ttxI'm testing by trimming images now11:17
ttxthe one that fails is a blantant cp X.tar.gz X.img11:18
remix_tjok Daviey11:19
ttx500 Mb -> fail11:20
Davieyttx: There doesn't seem to be any obvious consistency, unless it's related to free cache space at the time.11:20
* ttx tries to refine nevertheless11:21
ttx270Mb -> pass11:22
ttx390 Mb -> pass11:24
ttx490 Mb -> fail11:26
ttx451Mb -> fail11:28
ttx410Mb -> pass11:29
ttxI think it's accumulative, the more you add size the more likely you're to fail11:30
ttxbut not failing on a precise size whatever the contents.11:30
ttx430Mb -> pass11:30
ttxI've one file that fails at 200 Mb, and another that fails around 440 Mb.11:32
ttxI think it's just a question of when you hit that "bad block padding"11:32
* ttx -> lunch11:32
Davieyyeah11:33
ruben23 hi guys anyone have tried implemeting thin client..? in a network environment..?11:54
ruben23using thin client server-ubuntu-server11:54
SpamapSoi... 22G of mirror downloaded.. 8G to go...12:05
jpdsSpamapS: You're using mirror.anl.gov as a source?12:06
BuZZ-dEEhello, which package can i install to provide an openid server?12:07
=== dendro-afk is now known as dendrobates
remix_tjDaviey: bug 59504012:20
uvirtbotLaunchpad bug 595040 in linux "kernel panic while installing lucid on IBM xServer eServer 225 " [Undecided,New] https://launchpad.net/bugs/59504012:20
SpamapSjpds: no, uoregon.edu..  why?12:25
acajoucwillu_at_work: Nope. Also tried #btrfs. https://bugs.launchpad.net/ubuntu/+source/btrfs-tools/+bug/59491012:27
uvirtbotLaunchpad bug 594910 in btrfs-tools "/dev/btrfs-control missing on Ubuntu Server install" [Undecided,New]12:27
acajouYou'd think this package is especially well-suited to Ubuntu Server... ZFS-like bit-rot proof filesystem. I'm surprised that it seems no one else has tried it on Ubuntu Server.12:30
acajouIf I don't solve it soon, I'll have to use a mirrored ext3/4 partition instead...12:32
Davieyremix_tj: That is a good bug, thanks12:37
Davieyremix_tj: I wouldn't expect it to be fixed for the next 2 weeks, at least.12:37
SpamapSacajou: btrfs is experimental12:38
SpamapSacajou: but it works fine on lucid12:38
SpamapSacajou: give it another year, btrfs will be the default FS on Ubuntu. :)12:38
Davieyttx: Have you returned?12:38
* SpamapS should not be awake. :-P12:39
ttxDaviey: yes12:39
DavieySpamapS: a true geek, never sleeps :)12:39
Davieyttx: Not having much joy with maverick atm12:39
Davieyttx: I tried pinning back librampart, but that isn't it12:39
DavieyMost of the other deps seems to be the same as lucid.12:39
ttxDaviey: start with alpha1 and upgrade one at a time ?12:39
Davieyttx: Times like this debian style snapshot archive would rock.12:40
Davieyttx: I'm seeing something you have experienced before, axix2c.log [error] http_transport_utils.c(2557) Service or operation not found12:40
tydeasI am having some issues with the bind9 dns server12:40
Daviey!ask | tydeas12:42
ubottutydeas: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-)12:42
tydeassorry.12:42
cwillu_at_workacajou, try building from git, it's straightforward and recommended by upstream at this point anyway12:42
cwillu_at_workbtrfs-tools at least12:42
tydeasI have set the ubuntuserver machine will call it "7" from know on the bind9 dns server12:42
cwillu_at_workI'm not certain btrfs-tools is responsible for creating entries in /dev though; at the very least, /dev/btrfs-control doesn't show up in the listed files on my 64bit server12:43
tydeasi set him as my primary dns server in an other machine but can resolve names12:43
tydeasfirewall is fine12:43
LukAtMeeePlease help.  Setting up a Linux Xubuntu based server on windows network.  Have installed Samba and configured as per the "Ubuntu 10.04 Help Server Windows Networking" page, and it says "From a windows client you should be able to browse the Ubuntu file server and see the shared directory"..  Well I can't.  I can ping the Linux box from a windows box on the network, but can't ping any windows box from the Linux box.12:43
LukAtMeeeI can see the windows boxes from each other.12:43
uvirtbotNew bug: #595040 in linux (main) "kernel panic while installing lucid on IBM xServer eServer 225 " [Undecided,New] https://launchpad.net/bugs/59504012:43
remix_tjDaviey: no, problem, i try to install hardy, for the moment12:44
cwillu_at_workacajou, yep.  "modprobe btrfs" is what creates /dev/btrfs-control, not btrfs-tools (just tested on my desktop)12:44
remix_tjor karmic12:44
Davieytydeas: Hmm.. have you tried the tool "dig"?12:45
Davieyttx: Do you remember what fixed the axis2 issue?12:47
hggdh<yawn/>12:47
LukAtMeeeAnyone, any ideas.  I've tried uninstalling and reinstalling samba to get a fresh start, and the Xubuntu is a brand new install from scratch (10.04).  I have read through the help guide, but when I can't even get it to do the most basic thing, I think there must be a problem, hence why I'm here!!12:47
ttxDaviey: doesn't ring a bell... why do you say I've hit this one before ? (I might have, I hit so many...)12:48
Davieyheh, one mo12:48
Davieyttx: https://lists.ubuntu.com/archives/ubuntu-devel/2009-September/029089.html12:48
tydeasDaviey: brb12:49
Davieyttx: it looks like the issue may be the same/similar12:49
ttxhm12:49
ttxthat one was due to upstartification missing a few steps... lemme check the commits12:49
LukAtMeeeAlso, if I run smbclient -L it tells me that the linux box is the only box on the workgroup, which it blatantly isn't.  So where is the problem??!12:50
Davieyttx: it can't be apache/libapache2-mod-axis2c related as they are the same version as lucid12:50
acajoucwillu_at_work: What's surprising is that /dev/btrfs-control was created without my intervention on my desktop...12:50
cwillu_at_workacajou, does btrfs show up in lsmod on your desktop?12:51
DavieyLukAtMeee: If you leave it a few hours, zul might be the best person to ask about that :)12:51
cwillu_at_workacajou, it disappears if you rmmod btrfs, and comes back when you modprobe btrfs, seems pretty conclusive to me :p12:51
cwillu_at_workLukAtMeee, if you "restart nmbd; restart smbd", does it magically start working?12:52
cwillu_at_workI think the samba upstart jobs in lucid are slightly broken if you have more than one network interface12:52
LukAtMeeecwillu_at_work: nope.  Now I can't see the server in the workgroup either!12:55
LukAtMeeeDaviey: okay, thanks.12:55
cwillu_at_workoh, sorry.  You can connect from windows to the server, but you can't connect from the server back to any windows machines?12:56
LukAtMeeeSo now I can't see the windows machines from the Linux box, and the Windows boxes can't see the Linux box and the Linux box can't see the Linux box when I run smbclient -L servername12:57
halvorsWhat is the best administrationpanel for my serve?12:57
halvorsserver*12:57
cwillu_at_workLukAtMeee, can the windows machines current ping the server (even though the server doesn't show in the workground)?12:58
LukAtMeeeyes12:59
cwillu_at_workokay, the workgroup should fix itself then in a few minutes12:59
LukAtMeeeand they do it by IP address or by servername12:59
cwillu_at_workthis should definitely work, but what does "net lookup <windows host name>" do?13:00
LukAtMeeegives me the IP assigned by my router for each of the windows machines....I feel like there's a light at the end of the tunnel, finally (I;ve been trying for 3 days!)13:01
ttxDaviey: ISTR the issue was some unset AXIS2C env variables in the upstart script13:01
Davieyttx: hmm.. don't think that is this issye13:02
cwillu_at_workLukAtMeee, I'm not 100% certain of this, as my desktop doesn't seem to need it (but that could be for other reasons);  but try adding "wins" to the hosts line in /etc/nsswitch.conf (after files)13:02
Davieyissue*13:02
ttxDaviey: check /var/run/eucalyptus/httpd-cc.conf13:02
Davieyttx: I've increaced verbosity of axis2 and apache, and here are all the logs13:03
Davieyhttp://pastebin.daviey.com/yVVp/13:03
Davieyttx: looks like axis is doing it's thing, but for a non-obvious reason apache is being killed13:03
cwillu_at_workLukAtMeee, you may also need to install "winbind", but try it without first.  Should take effect immediately after modifying the file13:03
LukAtMeeeI don't have a line like that in my smb.conf  What should it say?13:03
cwillu_at_workhosts:          files wins mdns4_minimal [NOTFOUND=return] dns mdns4 is mine13:04
cwillu_at_workit's not smb.conf though13:04
cwillu_at_work/etc/nsswitch.conf13:04
cwillu_at_work(i.e., it's not a samba setting)13:04
LukAtMeeeok....brb13:05
cwillu_at_workno reboot necessary13:05
ttxDaviey: confirmed -- my error was solved by appropriately setting Set EUCALYPTUS and AXIS2C_HOME environment variables in eucalyptus-cc upstart job13:06
LukAtMeeeokay, do I need to do a service restart or anything?13:06
ttxso probably not the same root error13:06
Davieynah13:06
Daviey*sigh*13:07
ttxDaviey: but I would really try to fix one issue at a time13:07
ttxDaviey: and concentrate on the already-identified alpha-1 critical issue13:08
_tydeas_hi back on the dns server issue.13:08
_tydeas_Do i have to allow icmp also from firewall13:09
cwillu_at_workLukAtMeee, no, it takes effect immediately13:09
Davieyttx: Hmm.. when i spoke with Jos.. we seemed to think euca not starting at all was more pressing13:09
_tydeas_i run the wireshark on server with dns filter13:09
LukAtMeeeokay, done the above, but windows still can't "see" linux, nor the other way around....any other ideas???13:09
ttxDaviey: then you should start from A1, gradually upgrade and check which upgrade breaks it13:10
Davieyttx: ok13:10
cwillu_at_workLukAtMeee, ignore the windows not seeing linux for now13:11
cwillu_at_workLukAtMeee, as I said, that should go away within 30 minutes or so13:12
cwillu_at_workLukAtMeee, with that change, can you "ping <windows host>"?13:12
LukAtMeeesadly not....13:13
cwillu_at_workokay, install winbind and try again13:13
LukAtMeeeokay, tried it, but no joy.  should I reboot?13:14
cwillu_at_workcan you pastebin your /etc/nsswitch.conf?13:14
LukAtMeee# /etc/nsswitch.conf13:15
LukAtMeee#13:15
LukAtMeee# Example configuration of GNU Name Service Switch functionality.13:15
LukAtMeee# If you have the `glibc-doc-reference' and `info' packages installed, try:13:15
LukAtMeee# `info libc "Name Service Switch"' for information about this file.13:15
LukAtMeeepasswd:         compat13:15
LukAtMeeegroup:          compat13:15
cwillu_at_workugh13:15
LukAtMeeeshadow:         compat13:15
LukAtMeeehosts:          files wins mdns4_minimal [NOTFOUND=return] dns mdns413:15
cwillu_at_workuse  a pastebin13:15
LukAtMeeenetworks:       files13:15
LukAtMeeeprotocols:      db files13:15
LukAtMeeeservices:       db files13:15
LukAtMeeeethers:         db files13:15
LukAtMeeerpc:            db files13:15
LukAtMeeenetgroup:       nis13:15
LukAtMeeeah, how do I do that?13:15
cwillu_at_workLukAtMeee, never paste more than a couple lines directly into the channel13:15
LukAtMeeesorry13:15
cwillu_at_workhttp://pastebin.com13:15
cwillu_at_workthat said, the file looks right :p13:15
LukAtMeeeokay....any more ideas?13:18
LukAtMeeeyou're being very helpful, thanks!13:19
LukAtMeeebrb13:19
_tydeas_The problem with bind is that i can dig from the dnsserver machine.13:20
_tydeas_But if i set this server machine as dns server to a local area machine it can not get the addresses.13:20
_tydeas_i am trying to dig from local machine and nothing13:21
_tydeas_the firewall of the server allows 5313:21
_tydeas_any ideas?13:21
_tydeas_how can i debug this issue?13:21
cwillu_at_workapt-get install pastebinit; strace -o /tmp/ping.trace ping windowshostname; pastebinit /tmp/ping.trace13:21
cwillu_at_work_tydeas_, you're allowing udp and tcp?13:21
cwillu_at_workLukAtMeee, that apt-get line is for ou13:22
cwillu_at_workyou13:22
LukAtMeeeThx, it's running now.13:23
_tydeas_i used wireshark and check that ICMP protocol with source local and dest server is port unreachable.13:23
cwillu_at_workLukAtMeee, when it's done, it'll spit out a link;  paste that link here13:23
acajou(sorry - power failure)13:23
cwillu_at_work_tydeas_, here's a question, if you turn off the firewall, does it work? :)13:23
LukAtMeeehttp://pastebin.com/38SeBZrD13:25
_tydeas_root@sindos2:~# ufw status13:26
_tydeas_Status: inactive13:26
LukAtMeeeokay, I hope you can unserstand that, because most of that looks....interestingly complex(?) to me!13:26
cwillu_at_workLukAtMeee, it's a list of all the system calls made by "ping"13:26
_tydeas_cwillu_at_work: still does not work13:26
cwillu_at_workLukAtMeee, you can see which files it opens, etc13:26
cwillu_at_work_tydeas_, okay, not a firewall problem then :/13:26
LukAtMeeeokay, thx, now it makes more sense!13:27
LukAtMeeenever realised ping was so complex...13:27
cwillu_at_workit's not :p13:27
cwillu_at_workbut it calls out to libraries which are somewhat13:27
cwillu_at_workfiguring out hostnames is serious business, just ask _tydeas_13:27
_tydeas_:)13:28
_tydeas_any other idea?13:28
cwillu_at_workWhat interfaces is the dns daemon listening on?13:28
acajoucwillu_at_work: You're right modprobe btrfs creates /dev/btrfs-control.13:29
cwillu_at_workacajou, I usually am :p13:29
sommermorning13:29
cwillu_at_workacajou, you may not have noticed it on your desktop if you made and mounted a btrfs filesystem before you started experimenting with the tools13:30
hggdhkirkland: morning, and a Q about eucalyptus-network.conf and $IFACE13:30
cwillu_at_work_tydeas_, check "lsof -iTCP -iUDP"13:32
cwillu_at_work_tydeas_, make sure it's not listening on only localhost or something silly like that :)13:32
acajoucwillu_at_work: first thing I did was convert an ext3 filesystem... (btrfs-convert, then mount -t btrfs)13:32
cwillu_at_workacajou, okay; that would have resulted in btrfs being modprobed13:33
acajou(that would have auto-created /dev/btrfs-control?)13:33
cwillu_at_workacajou, yes, modprobing the driver is what triggers the creation of btrfs-control13:33
acajouHmmmm. Seems to me modprobing should be part of the package install?13:33
cwillu_at_workacajou, no13:33
cwillu_at_workacajou, this has nothing at all to do with btrfs-tools :p13:33
cwillu_at_workthe tools which require btrfs-control require a mounted filesystem anyway13:34
acajouWell, if you start by mkfs.btrfs, thinhgs fail.13:34
cwillu_at_workeh?13:34
cwillu_at_workmkfs.btrfs should work regardless, and then when you mount it, everything works, no?13:34
acajouOn the server, instead of starting by converting an ext3 FS I tried to mkfs, and that failed.13:35
acajouWith the missing /dev/btrfs-control error.13:35
cwillu_at_worklet me test, one sec13:35
cwillu_at_workacajou, works here with btrfs not loaded13:36
cwillu_at_workmkfs -t btrfs ./btrfs-test13:37
cwillu_at_workfs created label (null) on ./btrfs-test13:37
cwillu_at_worknodesize 4096 leafsize 4096 sectorsize 4096 size 256.00MB13:37
acajouI believe I used: mkfs.btrfs -m raid1 -d raid1 /dev/sdc /dev/sdd13:38
cwillu_at_workk, let me try that13:38
zulLukAtMeee: are you using opendns?13:38
LukAtMeee@zul erm, I don't know.  How do I find out?13:39
acajouI don't know how to undo the modprobe, so I can' t come back to my previous state...13:39
cwillu_at_workacajou, "rmmod btrfs"13:39
zulLukAtMeee: check your /etc/resolv.conf13:40
LukAtMeeeand how do I highlight that a message is aimed at a particular person on the irc?(new to this too!)13:40
acajoucwillu Thanks. :)13:40
cwillu_at_workLukAtMeee, include their name on the line (use the tab key to complete nicks)13:40
LukAtMeeezul: no, looks like I'm using the virgin dns13:41
LukAtMeeecwillu_at_work, thanks\113:41
cwillu_at_workacajou, looks like it's specific to raids13:41
acajoucwillu_at_work May not be fatal, it just says " failed to open /dev/btrfs-control skipping device registration"13:42
cwillu_at_workacajou, it doesn't work though, tested13:42
cwillu_at_workacajou, you can create a btrfs fs with a single device as raid1 (which is actually "dup" in that case), and then add the second device after mounting it13:42
cwillu_at_workbut that won't give you the same result I don't believe13:43
cwillu_at_workthere's raid1, and then there's dup.13:43
acajouHmmmm. If I modprobe first, it seems to work, but tells me the FS created is 2.73TB, and it should not be that large for two 1.5tb drives in raid1....13:46
cwillu_at_workyep13:46
cwillu_at_workacajou, no, that's correct13:46
cwillu_at_workyou have to remember that "used space" is a complicated notion in a filesystem as flexible as btrfs or zfs13:46
cwillu_at_workacajou, you have a 2.73tb pool which can be allocated to particular trees13:47
cwillu_at_worki.e., the metadata tree, or the data tree, or the system tree13:47
acajouHmmm. First brushes with raid...13:47
acajouOK13:47
cwillu_at_worknormal "df", "btrfs filesystem df /mount/point", and "btrfs-show" will all give different views on that13:48
cwillu_at_work"btrfs filesystem show /dev/device" instead of btrfs-show, actually13:49
cwillu_at_work_tydeas_, can you pastebin the actual output from ping?13:50
cwillu_at_work_tydeas_, it looks like it's resolving fine from the strace dump, and it's just the actual ping packets that aren't getting through13:51
blsmithAnyone here?13:51
cwillu_at_workno.13:52
ttxjasonb: please see bug 591802 and bug 594989 and comment on them if the proposed solution looks good to you13:52
uvirtbotLaunchpad bug 591802 in tomcat6 "tomcat fails to start using a security manager" [High,Triaged] https://launchpad.net/bugs/59180213:52
uvirtbotLaunchpad bug 594989 in tomcat6 "Lucid Lynx authbind defaults too restrictive" [Wishlist,Confirmed] https://launchpad.net/bugs/59498913:52
cwillu_at_workblsmith, pro-tip:  don't ask to ask, just ask.13:52
blsmithI'm setting up a 10.04 server and need setting up a usb wireless adaptor.13:53
cwillu_at_workblsmith, if you set up the wireless under a desktop session, hit the "Available to all users" option in the connection editor13:54
LukAtMeeecwillu_at_work, so did that ping.trace help at all?13:54
cwillu_at_workblsmith, then it should automatically connect even with nobody logged in13:54
cwillu_at_workLukAtMeee, sorry, I sent that to the wrong person13:55
cwillu_at_workLukAtMeee, (not _tydeas_), it looks like it's resolving fine from the strace dump, and it's just the actual ping packets that aren't getting through13:55
cwillu_at_workLukAtMeee, can you pastebin the actual output from ping?13:55
blsmithcwillu, I'm under server, should I install a desktop version?13:55
LukAtMeeeif I ping, it just sits there and does nothing until I Ctrl-C13:56
cwillu_at_workLukAtMeee, what does "host <hostname>" say?13:57
LukAtMeeeportable.cable.virginmedia.net has address 192.168.1.11813:58
acajoucwillu_at_work: Ya, df -> 2.93TB. Gonna put 60 odd gb to see what that does. So I guess the trick is just to modprobe first...13:58
cwillu_at_workyep13:58
cwillu_at_workLukAtMeee, okay, it's working fine then13:58
cwillu_at_workLukAtMeee, you probably just have a firewall on the windows machines that's blocking ping and so forth13:59
LukAtMeeebut how do I get them to see the machines...remove the firewall?13:59
cwillu_at_workLukAtMeee, basically;  do you really need to be able to see them from the server though?13:59
blsmithcwillu_at_work, Should I install ubuntu desktop in order to set up the newtork then, disable the GUI?14:00
cwillu_at_workbladernr, a moment14:01
cwillu_at_workblsmith, I'm not sure if networkmanager is used in a bare server install;  it'd be straightforward to install that though if it's not.  That still doesn't help you configure wireless though.14:03
cwillu_at_workblsmith, is this just a home server?14:03
cwillu_at_workif so, then yes, I'd say just install ubuntu-desktop to configure it, simpler that way14:03
YouCanHelpMedamn.  don't know what happened, but I am LukAtMeee.   cwillu_at_work: not really, that's a fair point, but I do need to be able to see the server from the windows machines.14:04
cwillu_at_workI know you can configure it via dbus calls (dbus-send from a command line), but I don't have the commands on hand14:04
cwillu_at_workYouCanHelpMe, okay, you'll have to figure out the firewall rules on those machines then14:04
YouCanHelpMeokay.  I'll look into it.  I have to go now, but THANKYOU so much for helping out.14:05
cwillu_at_workone option might be to set up those machines to use the samba wins server (which you'd enable from /etc/samba/smb.conf)14:05
remix_tjDaviey: problems affecting also karmik, maybe due to raid controller14:05
YouCanHelpMeokay... cwillu_at_work, how do I do that?14:05
cwillu_at_workYouCanHelpMe, you're gonna have to dive into the documentation a little ;p14:06
YouCanHelpMeno worries.  Will do.  Thanks again!14:07
cwillu_at_workmy consulting rate is 105$/h :p14:07
YouCanHelpMeouch!14:07
blsmithcwilu_at_work, thanks for the help.14:10
cwillu_at_workblsmith, that works for you?14:10
cwillu_at_workblsmith, I'm sure there's some instructions somewhere to configure it by hand, it's just that most servers aren't connected over wireless14:10
blsmithcwilu_at_work, yeah, i have a copy of 9.10 desktop, I'm going to set up the wireless network and then upgrade that to 10.04.  I understand and thats why i'm not even going to spend anymore time looking for instructions.14:12
bogeyd6wireless on a server isnt so bad if the server has a definite need to be14:13
YouCanHelpMecwillu_at_work, I don't believe it.  The windows machines and Linux server just started talking to each other without me doing anything else!  So it must have been what you suggested!   Thanks again!14:13
cwillu_at_work;)14:13
ruben23any problem on the ubuntu-server lucid repo, im installing packages now but its really so slow..downloading..14:13
bogeyd6cnc program relay servers work great over wireless in a factory setting14:13
blsmithbogeyd6, can you help me set this up?  I think its being recongnized but its just not turning on.14:13
ruben23any issue on the repo site14:13
cwillu_at_workbogeyd6, that's why I said "usually aren't" and not "it's stupid to think about it"14:13
bogeyd6cwillu_at_work, thank you for the unnecessary explanation14:14
bogeyd6ruben23, you in the midwest US?14:14
cwillu_at_workbogeyd6, and thanks for the unnecessary correction :)14:14
=== dendrobates is now known as dendro-afk
* bogeyd6 's neckbeard radar as went full alert14:14
=== dendro-afk is now known as dendrobates
ruben23bogeyd6: Asia14:15
bogeyd6ruben23, if you are in the midwest area of the US you need to switch all of your repos to anl.gov14:15
bogeyd6blsmith, i can try but i wasnt here fr the original problem14:16
cwillu_at_workbogeyd6, wants to configure wireless from the console14:16
blsmithbogeyd6, basically i'm trying to set up a 10.04 server with a dlink dwa 150 wireless adaptor. Did a google search nothing came up  so I came here.14:16
bogeyd6blsmith, are you using it USB style?14:18
blsmithbogeyd6, yes it is usb, I'm not sure what other style it could be though?14:18
bogeyd6blsmith, https://help.ubuntu.com/community/HardwareSupportComponentsWirelessNetworkCardsDlink   << suggest your card is not supported14:19
blsmithbogeyd6: dmesg output after unplug and replug.  Registered led device: rt2800usb-phy1: :radio14:20
bogeyd6oh thats ok blsmith, linux does lots of dumb stuff like that. ask anyone using 9.10 how they felt about everything the broadcom chipset looking like everything was kosher and would connect to the AP but no traffic could be transmitted/received14:22
bogeyd6bcm43*, it was a peach, thankfully it works in 10.0414:23
blsmithbogey6: ouch.  so i'm actually getting no where with this device.14:23
bogeyd6blsmith, your comments and the documentation do in fact suggest that14:23
bogeyd6however if you want to continue might i suggest this14:24
bogeyd6!wireless | blsmith14:24
ubottublsmith: Wireless documentation, including how-to guides and troubleshooting information, can be found at https://help.ubuntu.com/community/WifiDocs14:24
blsmithbogeyd6, i don't understand, what would you like me to try?14:26
remix_tjis there a way to disable hw autodetection?14:26
bogeyd6blsmith, visit that website and follow the step by step instructions and when you reach the end if it works, great, if not then move on14:27
blsmiththanks14:27
bogeyd6https://help.ubuntu.com/community/WifiDocs/WiFiHowTo14:27
bogeyd6its for the cli14:27
blsmithbogeyd6: this didn't help. sorry, but thanks for the support. moving on to attempt desktop setup.14:31
elb0wwhy do I see /usr/bin/dpkg --status-fd 31 --unpack --auto-deconfigure /var/cache/apt/archives/mysql-server-5.1_5.1.41-3ubuntu12.3_amd64.deb14:31
elb0wis that an auto-update?14:31
bogeyd6elb0w, only if you have the updates set to install ALL and not just security14:32
acajoucwillu_at_work: Thank you! Things seems to be working peachy fine now.14:32
elb0wbogeyd6, how can I check14:32
cwillu_at_workacajou, marked the bug as invalid14:33
elb0wroot     10995  0.0  0.0  50868   780 ?        S    Jun10   0:00 /usr/bin/perl -w /usr/share/debconf/frontend /var/lib/dpkg/info/mysql-server-5.1.prerm upgrade 5.1.41-3ubuntu12.314:33
elb0wroot     10997  0.0  0.0   9236   928 ?        S    Jun10   0:00 /bin/bash -e /var/lib/dpkg/info/mysql-server-5.1.prerm upgrade 5.1.41-3ubuntu12.314:33
elb0wI did not ask for these14:33
cwillu_at_workelb0w, ps axjf | less14:34
cwillu_at_workelb0w, you can use that to figure out what process started it14:34
elb0wwhich row is the starting process?14:35
elb0wPPID is parent process I guess14:36
acajoucwillu_at_work: 10-4.14:36
bogeyd6elb0w, sudo cat /etc/apt/apt.conf.d/50unattended-upgrades14:36
smoserkees, around ?14:36
cwillu_at_workelb0w, that command would bring up a tree list, just follow it back14:37
elb0wI traced it back to 114:37
elb0wsbin/init14:37
elb0wUnattended-Upgrade::Allowed-Origins {14:37
elb0w"Ubuntu lucid-security";14:37
elb0wthats all I have unchecked14:37
elb0wer commented14:37
cwillu_at_workokay, probably a cron job as bogeyd6 suggests14:38
elb0wim checking what bogey suggested. The only thing I have enabled is security14:38
bogeyd6ok then it must be a security update, but i distinctly remember have to run apt-get upgrade myself to get that particular update because it was causing utf-8 tables to be manually repaired14:39
ElTonerinoI upgraded dovecot today, and am now having problems when trying to send emails.14:43
ElTonerinoI get this error "warning: SASL: Connect to private/dovecot-auth failed: Connection refused"14:44
ElTonerinoany ideas?14:44
=== amstan_ is now known as amstan
bogeyd6Anyone know how to tell gnome terminal to stop capturing my fkeys?14:45
bogeyd6ElTonerino, seems like the service may not be running or maybe the ufw was enabled14:45
ElTonerinodovecot is running, I'll check ufw14:48
ElTonerinoufw seems the same today as it was yesterday: http://pastebin.com/xUSvz8RB14:51
guhcamposI need to create a local mirror. Lucid Server only, should I use debmirror or apt-mirror?14:52
ElTonerinonetstat -ln: http://pastebin.com/rZHfjyN214:55
dassoukisometimes I want to check my email when i'm working on the server. back in the day we used to use pico ... I'm wondering is there a google mail friendly terminal email client14:56
bogeyd6dassouki, mutt or pine14:57
bogeyd6https://help.ubuntu.com/community/mutt14:58
bogeyd6ElTonerino, i wish i could help but i use zimbra14:58
ElTonerinobogeyd6, ok.  I'm still stuck if anyone else wants to help. :)14:59
bogeyd6ElTonerino, using postfix?15:00
bogeyd6http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL15:00
bogeyd6during the upgrade a config file maybe screwed the pooch15:01
ElTonerinobogeyd6, Yeah. Thanks for the link, I'll go through it.  I think I might head to my backups and compare the configs to todays config.15:02
bogeyd6diff command will help big time15:03
kirklandhggdh: howdy, here now15:04
kirklandNg: it has to be approved into proposed15:04
kirklandNg: subscribe to the bug to monitor it's progress (i suspect you are already)15:05
hggdhkirkland: after applying the euca update yesterday, I noticed that euca (re)start would print out a message stating IFACE was an undefined variable15:07
hggdhkirkland: /etc/init/eucalyptus-network.conf uses it15:08
Ngkirkland: k, I'll have a look tonight15:08
=== criminy is now known as sheenobu
smoserkirkland, you fixed the byobu-in-byobu behavior when jumping through systems and byobu-by-default, right ?15:18
smoseri thought you did, by checking TERM != SCREEN15:18
jasonbttx: Alright.15:19
bogeyd6rotfl, the nagios3 documentation in the help guide doesnt include the install of nagios-cgi15:19
ttxjasonb: just emailed you about those15:21
jasonbttx: Ahh.  Thanks!  I just got up over here in the Pacific time zone.15:21
jasonbttx: "if Ubuntu's solution doesn't already implement this alternative to authbind" .. I meant Debian's solution (sorry).15:23
ruben23its really slow downlaoding on installing repo pagakaage for ubuntu-server lucid..any idea, is repo site having problems now15:28
ruben23my location si southeast asia15:29
kirklandsmoser: i have for maverick15:30
kirklandsmoser: i think that probably needs to be sru'd to lucid though15:30
kirklandsmoser: ie, it was after rc-freeze15:30
ElTonerinobogeyd6, Yeah, there were changes in /etc/postfix/main.cf.  Fixing them resolved my problem.15:31
ElTonerinoPheww...15:31
bogeyd6thankfully15:31
uvirtbotNew bug: #595116 in apache2 (main) "ssl "error reading the headers"" [Undecided,New] https://launchpad.net/bugs/59511615:31
ruben23taking 40 minuites to download a single package only..:'(15:32
konamhi15:45
konam i installed a lamp server on my ubuntu desktop to learn php but it doesn't seem to be working, i even installed phpmyadmin and it works but i can't get my php scripts to work.15:46
konamcan somebody tell me why15:46
konamor how to fix it15:46
hallynDaviey: .15:51
Davieyhallyn: \o15:51
hallynhey, i noticed your emails about virsh save failing.  how long have you been looking into that?15:52
Davieykonam: what happens if you open a php file in your browser?15:52
Davieyhallyn: When do those mails date to?15:52
hallynhm, well i saw them yesterday, i think on qemu list15:52
hallyni was just wondering whether  you got the impression anyone know the cause at this point15:53
hallynit seems like some ppl think i twas the dd blocksize in virsh, but qemu ppl think not?15:53
Davieyahh that15:53
hallynright15:53
konamDaviey it opens a download file dialog....15:53
hallynanyway i was hoping to ask jdstrand to reproduce with 0.8.whatever :)15:53
Davieyhallyn: It seems to be both, there is (was) a bug in libvirt and that has improved it somewhat15:54
Davieybut qemu think there is also a timing issue there15:54
jdstrand0.8.1 is being a little grumpy, but I'll have something for people to play with15:54
hallynbecause it still takes 56 seconds?15:54
hallynDaviey: have you reproduced it yourself?15:54
Davieykonam: Hmm.. I think you might need to clear the cache and/or restart your browser15:54
hallynjdstrand: rockin'15:54
Davieyhallyn: no15:54
hallynok15:55
hallyn(then i'll stop bugging you :)15:55
Davieyhallyn: well yes, i know it was really slow!15:55
Davieybut i never looked deeply into the cause15:55
hallynDaviey: well the thing is i don't know if on my laptop it's just really slow, or completely hung :)15:55
hallyni've never seen it finish15:55
hallynand i don't see the savefile grow15:55
Davieyhallyn: iotop showing anything interesting?15:56
=== dendrobates is now known as dendro-afk
hallynDaviey: i don't think so15:57
hallynbut i hadn't really looked15:57
Daviey:/15:58
Davieyttx: I've found the cause of UEC not starting!16:00
ttxDaviey: \o/16:00
ttxwhat was it ?16:00
Davieyttx: groovy!16:01
* ttx cries16:01
* Daviey wimpers16:01
Davieyttx: Any debug pointers on that?16:01
ttxno, I'm completely groovy-ignorant16:01
ttxDaviey: we might have to have a groovy-1.6 package if Euca doesn't support 1.716:02
ttxanother one to push upstream.16:02
konamDaviey but i'm having this behavior since yesterday when i installed the lamp server (i installed phpmyadmin today though)16:03
Davieykonam: Yes, sometimes it's a client issue, rather than a server issue16:03
Davieykonam: If phpmyadmin is working, it sounds like php is working on the server16:04
Davieykonam: perhaps created a simple <?php echo "TEST"; ?> in /var/www/test.php16:04
Davieythen use "curl -v http://localhost/test.php" and see what is returned16:04
remix_tjDaviey: found, it was the motherboard's scsi controller16:05
Daviey^^ from the server16:05
uvirtbotDaviey: Error: "^" is not a valid command.16:05
Davieyremix_tj: Oh, hardware failure?16:05
remix_tjno, it is not an hw failure. with windows works. maybe a driver bug16:05
Davieyremix_tj: Ahh, i see16:07
Davieycan you update the bug with info, and provide lspci -vvv info?16:07
konamDaviey you were right, i tried with another file with a .php extension and it worked16:11
Davieykonam: cool16:11
remix_tjDaviey: after completion of the setup i'll do16:12
Davieyremix_tj: thanks, really appreciate it16:12
remix_tjbut i do not know if the os will boot with that hw enabled...16:12
=== dendro-afk is now known as dendrobates
kpettitcan anybody recommend a good search tool for a desktop/server that doesn't suck up alot of resources?16:18
kpettitlocate just isn't doing the trick and a few others I've tried make the desktop slow when they are archiving16:19
bogeyd6man i spent 30 mins preparing a bug just to have to mark it invalid because of my own stupidity16:19
konamDaviey a question, should i put eclipse's workspace on the root of localhost? it doesn't seem to be working otherwise, it says that it can't find my php file on the localhost..16:20
Davieykonam: I would say not.. but i've never used eclipse for php work16:21
Davieykonam: How are you accessing the files in the server through eclipse?16:21
konami just created a project and when i hit execute it gives me a NOT FOUND error16:22
konamthe server is set to localhost i think16:23
Davieykonam: Is this eclipse ON the ubuntu server, or ubuntu desktop accessing php files on the server?16:23
konamDaviey no, i installed the lamp server on my desktop so eclipse is on the server16:24
Davieyok.. in that case; it is probably easier to have your workspace in the webroot16:25
Davieykonam: if you "sudo a2enmod userdir" , restart apache16:25
konami tried but it's readonly16:25
Davieymkdir ~/public_html , you can put everything in the public_html folder in your home folder16:25
Davieythen you can access it via http://localhost/~konan/16:26
Daviey(for example)16:26
uvirtbotNew bug: #595133 in nagios3 (main) "/nagios/cgi-bin/status.cgi was not found on this server." [Undecided,Invalid] https://launchpad.net/bugs/59513316:26
konamDaviey uhm, i don't understand, what command should i use first?16:26
Davieykonam: "sudo a2enmod userdir"16:26
konamuserdir would be?16:26
Davieykonam: as i typed16:26
Daviey(userdir is an apache module)16:27
Davieykonam: then, "mkdir ~/public_html"16:29
Davieythen anything you put in ~/public_html (example, /home/konam/public_html/) will show in http://localhost/~konam/16:30
Davieyand eclipse will have read/write access there16:30
lauhello, I am trying to migrate from hardy to lucid16:37
lauI do-release-upgrade16:37
launow I get the initramfs prompt on the server16:38
amstanhey guys, i'm getting an error from a 3ware card, apparently i have a degraded unit16:38
Davieyttx: Confirmed, latest maverick with lucid groovy works.. attempting to investigate further.16:38
amstani'm just installing the os, so no problems there, but what does degraded mean? 1 dead drive? or are they not in sync yet?16:38
laulibudev: udev_monitor_new_from_netlink: error getting socket: Invalid argument16:39
lauSegmentation fault16:39
ttxDaviey: I'd suggest pushing a groovy 1.7.3really1.6to a PPA in order to have an easy workaround16:39
lauALERT! /dev/disk/by-uuid/23.... does not exist. Droping to shell!16:39
lauany idea ?16:39
Davieyttx: End game solution?!16:40
ttxDaviey: I mean, to easily unblock testers, while waiting for a solution16:40
Davieyahh, that makes more sense :)16:41
=== dendrobates is now known as dendro-afk
SpamapSlau: that sounds pretty serious.. hmm16:45
lauSpamapS: I chrooted from a live cd to the system then (re) installed grub but same issue16:46
Davieyttx: urg! groovy is a horrible package16:46
launow I am trying to replace uuid param by /dev/sdx param in menu.lst16:47
lauany idea ?16:48
SpamapSlau: that may work yes16:48
SpamapSlau: I'm sorry I'm sort of a novice when it comes to upgrades.. :-/16:48
SpamapSIn my world you do upgrades by buying new servers and putting the new version on them. ;)16:49
ttxDaviey: agreed.16:49
SpamapSlau: http://ubuntuforums.org/showthread.php?t=1127779   did that help at all?16:50
jdstrandhallyn: hey, so are you planning another qemu-kvm upload any time soon?16:53
Davieyttx: Uploading groovy_1.7.3really1.6-0ubuntu1 now16:56
ttxDaviey: I meant, in your PPA16:57
ttxDaviey: not necessarily to the archive.16:57
=== pgraner is now known as pgraner-afk
ttxDaviey: I think it makes sense to the archive as an endgame solution16:58
ttx<ttx> Daviey: I'd suggest pushing a groovy 1.7.3really1.6to a PPA in order to have an easy workaround16:58
konamDaviey and isn't there a way to especify the directory you want apache to access?17:04
hallynjdstrand: when the next kvm version is released, yeah17:07
hallynjdstrand: you mean for maverick, and newer than 0.12.4 right?17:07
jdstrandhallyn: yes for maverick. ok. I have a patch I need in qemu for libvirt 0.8.1 network device attach to work17:07
Davieyhallyn: Do you know KVM's release schedule, is it worth tracking the unstable version through maverick?17:07
jdstrandhallyn: I'll just upload it after testing17:08
jdstrandhallyn: fyi-- e53f27b9d9df73461308618151fa6e6392aebd8517:08
jdstrandhallyn: but I'm already working on it17:08
hallynjdstrand: the SCM_RIGHTS one?17:08
Davieyttx: yes, i pushed to my PPA17:09
=== dendro-afk is now known as dendrobates
* hallyn tries to recall what aliguori told kirkland about the next kvm release17:10
ttxDaviey: ok17:10
Davieyttx: https://edge.launchpad.net/~davewalker/+archive/groovy17:10
jdstrandhallyn: yeah17:10
lauSpamapS: thx for the link but not working yet, still trying the fix in your thread17:10
jdstrandhallyn: http://www.redhat.com/archives/libvirt-users/2010-June/msg00053.html17:10
hallynjdstrand: the patch looks liek it should be safe with or without newer libvirt, wonder if i can just cherry-pick it into 0.12.4+noroms-0ubuntu117:12
jdstrandhallyn: you cannot-- it doesn't apply clean. but I've already got the patch going and am building it17:13
hallynoh, ok17:13
jdstrandhallyn: I just didn't want to step on your toes with an upload that you were already planning17:13
hallynok cool, thanks.  yeah i was gonna wait17:13
jdstrandhallyn: thanks17:13
* ttx -> eod17:13
Davieyttx: o/17:14
kirklandhallyn: not that that should be 0.12.4+noroms-0ubuntu2 ... i uploaded last night17:18
* jdstrand is working off ubuntu217:21
kirklandjdstrand: okay, good;  just wanted to make sure that hallyn was aware17:21
hallyni was not17:21
hallynkirkland: so do you recall when the next kvm release was expected?  in 2 weeks?17:21
kirklandhallyn: i think 0.13 is due around August 1st17:24
kirklandhallyn: there may be more 0.12.x releases though before then17:24
kirklandhallyn: i'd like to target 0.13 for Maverick17:24
hallynk17:25
hallynkirkland: oh, yeah, that one (qemu-system-i386)17:30
mathiazzul: re puppet merge17:39
mathiazzul: I'd rather wait a bit17:39
mathiazzul: Debian is about to upload a new version - 0.25.517:39
mathiazzul: and we may be able to sync it17:39
zulcool17:41
=== exigraff is now known as ex-exigraff
halemnyone here using a USB microscope under linux and could tip me off about good and compatible brands etc..?17:42
=== ex-exigraff is now known as exigraff
pmatuliszul: any word?18:01
zulpmatulis: no i dont have a fix can you submit the bug upstream for me?18:02
pmatuliszul: yes18:02
zulpmatulis:thanks18:02
Mateo_Hey !18:10
Mateo_i didn't knew that there was a ubuntu server channel :)18:10
=== dendrobates is now known as dendro-afk
Mateo_maybe someone already encountered this problem: i'm trying to configure postfix (sudo dpkg-reconfigure postfix ) but at the end, i have a newaliases: fatal: bad string length 0 < 1: setgid_group =18:12
lamontwhat does main.cf have in it?18:13
Mateo_lamont: oh, a lot of line :)18:18
Mateo_but concerning the setgid_group =  line18:18
Mateo_i have nothing on this line after the =18:18
lamontdelete it?18:18
Mateo_lamont: sure ?18:19
lamontit's not in the default main.cf, and it needs to be either the default or not there18:20
Mateo_lamont: ok, so if i have other lines like that, i comment them ?18:21
Mateo_like now i have the same error with sendmail_path18:21
lamontwhere did you get this file from?18:21
lamontbecause, yeah, nothing should be set to blank in that file18:21
Mateo_from the default install, but in my user directory18:22
lamontdefault package install doesn't add those variables18:23
Mateo_lamont: in fact, i have like a LOT of blank in this file :s18:23
Mateo_i didn't had any main.cf after the install, so i took the one from /usr/lib/postfix18:24
Mateo_lamont: how could i generate a brand new one with the good options ?18:26
lamontdpkg-reconfigure postfix after removing /etc/postfix/main.cf should do it for you18:27
zulsmoser: ebsmount is uploaded18:29
smoserdanke18:29
smoserpinged Riddell in -devel to ask him to review18:29
Italian_Plumberwow... I'm removing some directories, about 36GB, and my load average is at 1.5 ....18:36
Italian_PlumberTaking longer than I expected too...18:37
Mateo_lamont: the reconfigure tool keep on giving me blank line (sendmail_path, newaliases_path, mailq_path ...)18:42
=== dendro-afk is now known as dendrobates
amstanhey guys, how do i override key errors in ssh?18:44
amstanin many situations i reinstall a server and i can't reconnect anymore to it because of a key error, since they key changed18:44
amstantherefore i proceed to remove .ssh/known_hosts18:44
amstanwhich makes the whole system less secure18:44
reisiamstan: you can just remove the offending line, as stated in the ssh message18:45
amstanand how do i know which line offends it?18:45
amstanthere is no ip addresses, nothing: U6HV2wqfAO2DiuEEZ+3K2WuXhbarpOj3SyFqargL12Iyi7xTQNgO1M5FEa5osq4Txn6PTRFLCpqzELJrq0oEfoHXiLVb7IStwGNBgGBPdkKHzkSLP0HZjwTkWLMkRydcP5vYFSmd0ub2VI8acPkEyUQ4rczftSlcvKsnqV0Q==18:45
reisiamstan: i remember there was text like "the offending key is at $HOME/.ssh/known_hosts:LINENUMBER"18:46
reisiamstan: there is actually identification data at the end of line afair18:46
amstanreisi: oh, thanks, i overlooked the line number18:46
=== pgraner-afk is now known as pgraner
reisiamstan: no problemos18:47
sommermathiaz: had a chance to review the openldap-dit branch?18:50
tasaif[work]does anyone in here exist?19:08
tasaif[work]I'd like some assistance with an ubuntu server running kvm19:09
jpdstasaif[work]: Potentially.19:09
tasaif[work]I'm wondering if it's possible to install a guest and complete the installation using only the command line19:11
cloakableWhy wouldn't it be?19:16
tasaif[work]cloakable: well when you run virt-install to create a guest, it starts up a graphic /win 419:22
tasaif[work]woopsie19:24
tasaif[work]it starts up a graphic console19:24
tasaif[work]i'm wondering if it's possible to set up just a text console19:25
cloakableaha19:25
cloakableunsure19:25
cloakablessh /w X forwarding?19:25
tasaif[work]i don't want any X involved =p19:27
tasaif[work]i'd like to be connect to the VM's output and send it my input19:27
RoyKtasaif[work]: it's in the virt-install docs - you can easily install with virt-install and just connect to that with vncviewer later19:27
tasaif[work]RoyK: Yes, but I don't want to do the installation graphically.19:27
RoyKtasaif[work]: don't you have a graphical workstation?19:27
RoyKiirc you can do with a serial console-thing as well19:28
RoyKso you can install with minicom or something19:28
tasaif[work]RoyK: I do but the key is automation19:29
tasaif[work]i can't automate a graphical installation19:29
RoyKtasaif[work]: see kickstart - that can be used to automate the install19:29
RoyK!kickstart19:29
ubottuWays to automate installation of Ubuntu on multiple machines are described at https://help.ubuntu.com/8.04/installation-guide/i386/automatic-install.html - See also !cloning19:29
tasaif[work]yes but that involves a premanipulated image doesn't it =p19:29
RoyKit does19:29
RoyKyou don't really get automated installs for free19:30
RoyKthat is, free from work19:30
tasaif[work]hmmm19:30
RoyKthe installer wants to know language, timezone, how to partition the disks, a username and password for the new user etc19:30
RoyKvnc is the easy way19:31
tasaif[work]yes, but I require automation19:31
RoyKthen see above19:31
tasaif[work]so vnc is out19:31
tasaif[work]RoyK: okie dokes tyvm ^__^19:32
=== mushroomblue is now known as mushroomtwo
hallynvmbuilder?19:39
hggdhkirkland, smoser: for a bit of enlightement: on the UEC run (with Chris fixes) we had 51 failures (~5%). All these failures were metadata issues; all these instances did not get a public Ip address19:42
smoserhow do you know they did not get a public ip address19:42
hggdhkirkland, smoser: now, I know very well that correlation is not causation19:42
hggdhsmoser: by browsing the script log for every single one, and looking at the IP address assignments19:43
smoser"script log" ?19:43
smoserthe test log output ?19:43
hggdhcorrect19:43
smoserhold on19:43
hggdh(running in debug mode)19:43
smoserwhere is "upstream" for that ?19:43
hggdhlp:~hggdh2/+junk/uec-qa19:44
smoserlp:...19:44
hggdhsmoser: be prepared, some few 100s MB19:44
smoseroh19:44
smoserno19:44
smoserthe test cases19:44
smoserwhere are those ?19:44
hggdhlp:uec-testing-scripts19:44
kirklandhggdh: okay, so this is progress, right?19:46
kirklandhggdh: what class of issues did this solve?  as it seems to have solved some, no?19:47
smoser"progress" in that its now harder to hit a race condition19:47
hggdhand progress in that I do not see any other failure apart from the metadata19:48
smoserwhat other failures did we see before ?19:48
hggdhplease note that I am still to go thru the "not-tested" instances (which may have some 'failed to start'19:49
hggdhsmoser: SSH failing, but with metadata correctly gotten19:49
hggdhso, right now, based on ~1,400 instances run, we ar at ~90% success, with ~5% failures, and another ~5% not-tested19:50
smoserhggdh, so, when you look at the logs, you see stuff like:19:52
smoserpublic IP was 0.0.0.0, now is X.Y.Z.T19:52
smoserfor the "good" results19:52
smoserbut not for the bad ones ?19:52
hggdhsmoser: actually I was looking at the output of euca-describe-instances for the pub/priv addresses19:54
smoseri see that you recently added that code.  i didn't know it was there.19:55
smoserwell, i think you need to be careful19:55
smoserbecause a terminated instance always has private == public19:55
hggdhindeed. But *not* running instances19:55
hggdhsee, for example, http://pastebin.com/SHLXbnf819:56
hggdhhum. No, this is not a good one, there is no console output for it.19:57
hggdhsee http://pastebin.com/deELdKvC19:58
smosermaybe that output is from old logs ?20:02
smoserWARNING:INSTANCE i-4CDA092C:public IP was 172.19.2.24, now is 172.19.2.2420:03
smoserit seems that the current code should only output when a change is done20:03
shanezillaanyone pretty good with email server set up??20:05
smosermight be also useful to see the state of the instance there.20:05
hggdhsmoser: the code wa wrong, I updated it after this run (last rev)20:05
smoserand that really should be splitting on tab, not white space20:05
smoseryeah. i thought so20:05
hggdhsmoser: indeed, good idea. On this run the code would always print, even if no IP change20:06
hggdhhum. Tabs.20:06
* hggdh notes it down20:06
smoseras it is, 'split()' will empty fields20:06
smoserwhich you dont want. i dont knwo if decscribe-instances ends up giving empty fields, but describe-images does have empity fields20:07
shanezillalooking for a yoda to help me out20:08
hggdhsmoser: If sep is not specified or is None, a different splitting algorithm is applied: runs of consecutive whitespace are regarded as a single separator, and the result will contain no empty strings at the start or end if the string has leading or trailing whitespace. Consequently, splitting an empty string or a string consisting of just whitespace with a None separator returns [].20:09
smoserright.20:10
smoserwhich is bad20:10
amstanwhy does "sudo su" not make me root? i did 10 minutes ago20:10
hggdhonly if the line is empty/whitespaced20:10
smoseryou're supplying no separater20:11
smoserwhich means [[:blank]*]20:11
smoser(i think)20:11
hggdhindeed, but per the doc it means whitespace20:11
_rubenshanezilla: stating your actual problem(s)/question(s) might yield more (useful) responses20:11
hggdhblanks/tabs20:11
smoserone or more white space20:11
smoserit shrinks empty fields20:12
=== erichammond1 is now known as erichammond
smoserwhich you do not want20:12
hggdhoh. I see the risk now20:12
hggdhwill correct. Still, the results stand since I was looking at -describe-instances20:12
_rubenamstan: the "proper" command would be to use sudo -i20:12
amstan_ruben: still alex@20:13
amstanonly sudo bash works20:13
_rubenamstan: root's default shell got busted? (in /etc/passwd)20:14
amstanyeah.. why is it /bin/false?20:14
_rubenbecause you changed it?20:14
amstanmaybe i did, and it only took effect now20:14
smoserhggdh, i would agree that it certainly seems like (from lines 7 and 9) that this instance did not get an IP addresss20:15
amstan_ruben: thanks for the suggestion20:15
_rubenamstan: no problem20:15
hggdhsmoser: all of the failures are similar. What I do not know is what is cause, and what is consequence20:17
hggdhor even if they are independent20:17
hggdhsmoser: the field separator is only tabs?20:20
shanezillaso I was wondering when configuring the postfix instillation with dpkg under the section for the localhost section, do I put in the ip address of my local machine the server is on?20:21
shanezillathe example is mail.example.com, localhost.localdomain, localhost20:22
shanezillaI know the mail.example.com name but should the localhost.localdomain be the default?20:22
shanezillaand as well the localhost be the default 127.0.0.0 ?20:23
JackTOhi, new to linux, where do i set the ip add of the server,  need to change it... what file should i edit20:29
JackTOaddress*20:29
tasaif[work]JackTO: millions of articles online20:36
amstanJackTO: /etc/network/interfaces, careful though, there's a syntax required for that you either have to read the manual20:38
amstanor follow some guide on the internets20:38
bogeyd6JackTO, amstan is correct, there are many good guides on the intarwebs20:40
bogeyd6my personal fav is http://www.ubuntugeek.com/ubuntu-networking-configuration-using-command-line.html20:40
hggdhsmoser: corrected and pushed. Thank you20:42
JackTOthanks guys20:43
JackTOi messed up my MySQL listening IPaddress, anyonknow where the file is to change the ip restriction and port listining number for mysql20:45
mathiazJackTO: /etc/mysql/my.cnf20:46
JackTOthanks20:47
tyskahello guys20:49
mathiazbug 595117,20:49
uvirtbotLaunchpad bug 595117 in qemu-kvm "qemu-nbd slow and missing "writeback" cache option" [Undecided,New] https://launchpad.net/bugs/59511720:49
mathiazhallyn: ^^?20:49
mathiazhallyn: IIRC upstream qemu is using LP for their bugs20:50
mathiazhallyn: so I would just open a task against the upstream project20:50
tyskai cant authenticate on CUPS through windows to use a printer installed on CUPS, i get this error message on the logs: windows-ext client-error-bad-request. Someone can help me?20:50
mathiazhallyn: and state the patch should pushed in upstream first20:51
Mateo_Hey :)20:51
mathiazhallyn: https://wiki.ubuntu.com/ReviewersTeam/ReviewGuide20:51
mathiazhallyn: ^^ outlines a workflow to handle patches20:51
hallynmathiaz: thx20:51
Mateo_I have another question please, i have created a user and i would like him to have the same rights that the root user20:52
mathiazhallyn: I haven't looked at the bug specifically but it seems that the patch should be pushed upstream as well20:52
hallynmathiaz: but isn't "open a task" waht the guy just did?20:55
mathiazhallyn: in *Ubuntu*20:55
mathiazhallyn: there could also be a bug in the *upstream* qemu project20:56
hallyni thought it was on LP20:56
hallynstill looking20:56
hallynthx20:56
mathiazhallyn: for example, bug https://bugs.launchpad.net/qemu/+bug/58414320:56
uvirtbotLaunchpad bug 584143 in qemu "qemu fails to set hdd serial number" [Undecided,In progress]20:56
mathiazhallyn: you can see there is a bug in both the *upstream* project and in Ubuntu20:57
mathiazhallyn: doing so will help in tracking down when the upstream bug will be closed20:58
hallynso the way i read that is launchpad.net/qemu is upstream, launchpad.net/qemu-kvm is ubuntu...20:58
mathiazhallyn: and then you can decide what is the next step in Ubuntu (eg integrate the patch in ubuntu)20:58
mathiazhallyn: yes - launchpad.net/ubuntu/+source/qemu-kvm is the qemu-kvm package in the Ubuntu project20:59
mathiazhallyn: https://bugs.launchpad.net/qemu/+bug/58414321:00
uvirtbotLaunchpad bug 584143 in qemu "qemu fails to set hdd serial number" [Undecided,In progress]21:00
=== erichammond1 is now known as erichammond
mathiazhallyn: https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/58414321:00
mathiazhallyn: ^^ these two urls represent the same bug21:01
mathiazhallyn: one is the upstream project, the other in ubuntu21:01
mathiazhallyn: that way if the bug is closed in upstream, we'll know it in ubuntu as well21:01
hallynmathiaz: spurious up arrow?21:01
hallynor are you getting repeated responses from me?21:01
hallynmathiaz: i've marked it as also affecting qemu, thx.  the thing still bothering me is what state to elave it in :)  i can't "confirm" it really, but i'm not allowed to mark it 'triaged'21:02
mathiazhallyn: ok - so in ubuntu you're not allowed to mark it triaged because you're not part of the bug-control team21:02
mathiazhallyn: usually triaged comes after confirmed21:03
bogeyd6that bug isnt confirmed yet?21:03
mathiazhallyn: so if you can't confirm the bug you shouldn't set to triage21:03
bogeyd6there i just confirmed it for lucid21:03
mathiazhallyn: https://wiki.ubuntu.com/Bugs/Status21:04
mathiazhallyn: ^^ see the wiki page above for an overview of the meaning of Bug Statuses in Ubuntu.21:04
hallynbogeyd6: cool, thanks21:04
hallynmathiaz: yes, i've seen it, and nothing seemed to apply21:04
hallynthere is nothing that says "noone has confirmed, it's up to upstream, I've passed it along to them"21:05
hallynbut now it's been confirmed.  i'm happy  :)21:05
mathiazhallyn: ok - in that case I would open a task in the upstream project21:05
mathiazhallyn: set the status to incomplete21:06
hallynhm21:06
mathiazhallyn: and leaving a comment outlining what information is missing (like can someone else confirm the bug?)21:06
hallynagain, by 'open task' you mean set "also affects"?21:06
mathiazhallyn: yes21:06
hallynis verbal confirmation on irc sufficient?21:07
mathiazhallyn: for example, bug 595117 has two tasks now: one in the upstream project, one in Ubuntu21:07
uvirtbotLaunchpad bug 595117 in qemu-kvm "qemu-nbd slow and missing "writeback" cache option" [Undecided,Confirmed] https://launchpad.net/bugs/59511721:07
mathiazhallyn: if you can trust the reporter on IRC21:07
* hallyn trusts noone21:08
mathiazhallyn: you could ask the reporter on IRC to add a comment to LP21:08
mathiazhallyn: :)21:08
bogeyd6ala james bond style21:08
hallynbogeyd6: would you mind commenting in LP?21:08
mathiazhallyn: if I don't know what status to set, I usually set it to Incomplete (in Ubuntu) and leave a note about the peace of information/next step to take in order to move the bug to another state21:10
mathiazhallyn: so setting the bug to Incomplete in Ubuntu and leaving a note ""noone has confirmed, it's up to  upstream, I've passed it along to them"21:11
mathiazhallyn: is good enough IMO21:11
hallynmathiaz: ok, thanks very much.21:12
mathiazhallyn: you're welcome!21:12
JackTOi'm trying to join the #mysql channel, and my nick is registed, but it says I cannot send to channel..  anyone know why?21:25
_rubenJackTO: you dont seem to be identified by nickserv21:36
brandon_ guys how can i prevent certin comands from running in sudo? like rm -rf21:36
brandon_anyone?21:42
hallynbrandon_: well you could deny rm using /etc/sudoers, but can't select on arguments that i know of21:42
brandon_but i can disable rm alltogether right?21:43
hallynshould be able to yes21:43
hallyncourse then the user can probably cp /bin/rm /tmp/notrm and use that21:43
hallynso blacklisting woudl be tough to get right21:43
brandon_h,,21:43
brandon_hmm21:43
hggdhand... you might break usage21:44
hallynif you can whitelist, that'd be good21:44
hallyn(i.e. if all they need to do is be able to ifconfig)21:44
hallynbrandon_: i'd go ask on #ubuntu-security21:44
hallynbut anyway 'man 5 sudoers' is full of info21:44
hggdhhallyn: go ping pedro_ for you application to -control... it is in his hands now ;-)21:45
brandon_well here is the scenario, we have a server running for students to mess with and understand root there is 26 students we just dont want an ass to bring it down since there are 25 other students using it21:45
* hallyn looks around for pedro_21:46
hallynhggdh: though i assumed it woudl take awhile for something liek that to happen, i.e. i shoudl "prove myself" or something :)21:46
hggdhhallyn: indeed. But the bugs you provide as example are good enough (apart from my comment on Importance)21:47
hggdhand you got two +1, which is enough21:47
hallynsweet21:48
hggdhpedro_ is in #ubuntu-bugs21:48
hggdhor #distro21:48
hallynbrandon_: maybe use schroot?21:48
hallynor lxc21:48
hggdhor evn set a VM, and let them run under the VM21:48
hallyngiving each one his own container shoudl be about as lightweight as each their own login shell21:48
brandon_im unfamiliar with those two what would it allow me to do?21:49
hallynheh, he said 'students' so i assume they're light on hardware21:49
hallynbrandon_: it's not completely foolproof, but it should protect your host from any serious damage from the students21:49
brandon_we have a full server rack :D21:49
brandon_and give them root access?21:49
hallynoh then why not just give each a kvm VM?21:49
hallynyes, root access, but limited somewhat to their own container21:50
hallynso what they see as / is actuall /var/lxc/container121:50
hallynwhen they edit /etc/ it's actuall /var/lxc/container1/etc21:50
hallynand, with their own virtual network interface so they won't ifdown the real eth021:50
brandon_and they can ssh into it?21:51
hallynbrandon_: yup21:51
keesbrandon_: "rm" is a system call; you can't really remove it.  perl -e 'unlink("/the/file");'  etc21:51
brandon_ and if they rm -rf it only kills there container? if so thats what ill use just point me towards a guide21:53
hallynbrandon_: well if your hardware is beefy enough to do kvm for each of them, then http://www.linux-kvm.org/page/Main_Page21:54
hallynotherwise, lxc.sf.net (link to tutorial on the right)21:55
fr1scoi'm sure this isn't possible but, anyone know of a way to start screen in an open local session while ssh'd?21:55
hallynkees: what's the best intro to schroot?21:55
hallynfr1sco: 'open local session'?  don't get what you mean21:56
fr1scohallyn: i was working physically at a svr and left the terminal session open but forgot to start screen.  now i'm away but wanted to get back into that session.21:58
hallynoh, just screen -d21:58
hallynwell, screen -list to get the name if there are more than 1 open21:58
hallynscreen -dr somesessionanme21:59
hallynwill detach that one, and reattach you to it from your new login21:59
fr1scosweet thx22:01
hallynnp22:01
keeshallyn: "best"?22:02
keeshallyn: I would say: https://wiki.ubuntu.com/SecurityTeam/BuildEnvironment22:02
keeshallyn: or just "man mk-sbuild"22:02
hallynkees: yeah that's the link i used, but i was wondering if that was the best for brandon_22:03
hallynhm, really i guess lxc might be the better way to go anyway (keep hte kids from kill-9ing each other)22:04
brandon_so lxc over kvm22:05
hallynbrandon_: that'd probably turn into a vi-vs-emacs style debate :)22:06
hallyni think lxc would be more appropriate...  but it has more gatchas still22:06
mathiazbrandon_: which version of Ubuntu are you planning to run on?22:06
hallynparticularly depending on your distro22:06
hallyndistro/version22:06
mathiazbrandon_: does your hardware support VT extensions?22:07
brandon_well its probably going to be one server ubuntu on server fedora22:07
brandon_it may i would have to examine it22:07
mathiazbrandon_: if your hardware doesn't support VT extensions then it rules out kvm22:08
hallynand qemu for a bunch of kdis would be far too slow22:08
brandon_what does kvm do that lxc dosent?22:08
mathiazbrandon_: are you planning to use the same Ubuntu release for all of the students?22:08
hallynit virtualizes the hardware22:08
brandon_same ubuntu on one and same fedora on the other22:09
brandon_2 servers22:09
hallynhow many kids did you say?22:09
brandon_2622:09
brandon_with acces to both servers22:09
brandon_so 26 people per server running 24/722:09
hallynbrandon_: AFAIK most ppl look to http://blog.bodhizazen.net/linux/lxc-configure-ubuntu-lucid-containers/ for setting up ubuntu containers22:11
brandon_thanks all look into it from here thanks so much for the help hallyn22:14
wtf1what is partial upgrade?22:39
kirklandsmoser: ping22:51
zulsmoser: it got rejected again?22:51
kirklandsmoser: could you take a look at https://help.ubuntu.com/community/UEC/Provisioning/DD-WRT22:51
kirklandsmoser: and update it accordingly?22:52
kirklandsmoser: seems like you and I have looked at this a few times;  i decided to document it once and for all22:52
=== wtf1 is now known as ubuntu147
hggdhkirkland: on that page, s/Aadress/Address/23:07
hggdhkirkland: nah, forget, I can do it myself...23:08
kirklandhggdh: thanks23:11
=== dendrobates is now known as dendro-afk

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!