[00:32] I'm trying to drop each user into a chroot when they log into the system. I don't want to make it over ssh only. I setup a chroot environment. I changed the users home directory to /chroot/./home/user moved /home/* into /chroot/home/. When I run su - user, I'm dropped into /chroot/home/user and pwd shows /chroot/./home/user/. echo $HOME shows the same thing. I'm really lost figuring out why the user isn't being dropped int [00:32] I'm not sure if that cut off or not.. [00:59] SpamapS, i forgot to pick up your glusterfs merge proposal [00:59] i uploaded a cloud-init today, and would have picked it up. [00:59] but i guess given that its doc only,k not a big deal [01:10] MTecknology: i'm building a new virtual machine to test a chroot env. [01:11] thesheff17: awesome - I'm taking a break because I need to do a whole lot of homework in a very short time but that's not to say I won't take a break from it ;) [01:16] thesheff17: I imagine you'll make it work for you just perfect :P - I built the chroot with debootstrap lucid /chroot [01:19] MTecknology, just because you set the home doesn't mean a chroot is going to occur. [01:19] smoser: and that's what I can't figure out how to make happen - any magical tips, advice, reading? [01:19] what i would suggest you do is change the users shell to be something that performs a chroot if and only if its not already chrooted. [01:19] i've done this once before, actually. [01:19] such as? [01:20] ie, you could add a shell to the "real system" that did something like: [01:20] #!/bin/sh [01:20] * MTecknology blank stare [01:21] hm.. [01:21] I see that in scripts all the time [01:21] so you have to deal with permissions to. [01:21] user can't run chroot. [01:22] the "shell" that was the users shell (ie, listed in /etc/passwd) in the outside shell would be '/bin/jailer' [01:22] /bin/jailer then would be either setuid root, or a shell script that called sudo [01:22] you mean I'd need to make my own script to deal with it? [01:22] hm.. [01:22] i think you'll end up having to write something in C [01:22] yes, write your own "shell" [01:23] in ubuntu is there a script like centos' 'setup' to do postinstall config all from one menu? [01:23] the rason i thin kyou need C is that you're going to have to chroot, and then drop permissions. [01:23] dchroot actually does this, its possible you could make use of it. [01:23] I thought that /chroot/./home/user was some awesome tool to drop the user into the chroot [01:23] maybe i'm just not aware of it. [01:23] i have pxe installs of ubuntu going but i want one nice location to do the postinstall without having to hack up a preseed late_command [01:24] where di dyou see this ? [01:24] i really have to run... [01:24] but i'm somewhat intrigued. [01:24] in a few guides online - but those are all for ssh logins using a patched openssh-server [01:25] hm.. well the patched ssh server might be the thing. [01:25] lowridah, i'm not aware of anything that does what you really want. there is no "first boot config" that i'm aware of. [01:26] hmm [01:26] okay thanks [01:26] there used to be I know.. but I forget its name [01:26] i may have to delve into debconf for this =( [01:26] it was used during installation though [01:27] during install is debconf [01:28] oem-config-firstboot exists in oem installs [01:50] thesheff17: did you get anywhere on that? [01:50] thesheff17: I have almost have of one assignment done :D [01:53] MTecknology: hmm...well I can tell you I'm very rusty with chroot :) I did this on debian about 5 years ago....and the docs are just all over the place on this subject :( [01:53] thesheff17: I noticed :P [01:53] any1 want to walk me through setting up samba to share the apache folder where my windows box can upload html files [01:53] thesheff17: when I get this I'm going to make a GOOD step by step by step how to on it [01:54] thesheff17: after I tested and retested [01:55] thesheff17: for a novice user such as myself - the scattered and inconsistent docs make it pretty much hell to accomplish. :P [01:55] MTecknology: yea I thought for sure this would be well documented at this point. [01:56] I have an issue with ipvs I just can't quite figure out, and can't seem to find any ipvs info about it :( [01:56] thesheff17: we'll take care of that, right? You teach me and I'll spend a couple days documenting? [01:56] I have ipvs ipv4 setup, and working just fine [01:56] I have had ipv6 using ipvs in nat, working fine [01:57] just tried ipv6 with ipvs in dr mode, and can't get it to work, ipv6 won't do neighbor descovery [01:57] I can't ping the ipv6 ip's of the real machines at all, the ipv6 neighbor descovery never can locate the ip [01:58] MTecknology: yea I'm going to keep working on it....it is really bugging me now since I have done it in the past and my linux skills where crap then :) [02:00] thesheff17: mine were crap then too - i don't know that they improved much :P - I can at least make simple packages and complex bash scripts now :) [02:07] MTecknology: got it [02:08] http://www.marthijnvandenheuvel.com/2010/03/10/how-to-create-a-chroot-ssh-user-in-ubuntu/ [02:08] this worked perfect [02:08] just have to find the right how to :) [02:08] thesheff17: Need to package jailkit then? [02:08] yea I would use that [02:09] thesheff17: thanks - I wonder why it wasn't packaged yet... [02:09] MTecknology: I'm not sure [02:09] if it's just a config/make/install it should be trivial :P [02:10] thesheff17: I'll look into that and maybe get it into 11.04 - 10.10 very likely won't happen even for universe [02:10] MTecknology: do apt-get install linux-headers-`uname -r` build-essential [02:10] that will give you all the packages you need to build any software for linux [02:11] thesheff17: usually - lal requires a few different ones [02:11] I need to finish writing lal at some point :( [02:11] MTecknology: what is lal? [02:12] * MTecknology so wants to do !info lal [02:12] !info lal [02:12] Package lal does not exist in lucid [02:12] http://projects.l3ib.org/lal/ [02:13] I need to finish version 2.0 before I'll push for it to be in the repos - I do have a PPA for it though [02:13] thesheff17: https://edge.launchpad.net/~mtecknology/+archive/sysapps [02:14] MTecknology: nice [02:15] MTecknology: there may be a better way to do chroot but that how to got me start to working setup in 5 min...and we have been working on it all day :) [02:15] thesheff17: I may very well love your right now :P I'll have to try this in the morning when I finish homework (hopefully I can) [02:16] thesheff17: you should try out lal :) - that's the version without the calendar feature [02:16] MTecknology: sure I def will [02:18] MTecknology: yea I think chroot has fallen behind since so many people are using virtual machines now but it is def still valid on every systems. [02:19] hehe it works great I removed /home/jail/bin/ls [02:19] and now my testuser can't ls :) [02:19] :D [02:20] thesheff17: in my case I have very few resources to spare but users need to be able to log in and do things to their website. I locked it down so even if they can run php - it won't be able to do things like launch another php-cgi process - I don't think you can do that from inside a php script [02:21] i rebooted and i cant use vnc to login now [02:21] so some website told me to delete my keyring files [02:21] so i did [02:21] now it still wont work [02:21] thesheff17: that's my whole goal - lock down what the user can do so they can't chew up more resources such as php-cgi [02:22] MTecknology: yea chroot should do the trick :) [02:23] thesheff17: I'm hoping my assumptions are right about the rest of it or I need to take it a step further - and I don't want to :P [02:25] MTecknology: yea that should do the trick with just giving them enough to edit files [02:26] thesheff17: ya, I meant with the web server running outside of that chroot [02:26] thesheff17: unless I knocked that into a chroot too - but that would just get really messy [02:27] which would be the next step.. :P [02:27] MTecknology: well how do you have it setup now? do you have it pointed to their home dirs? [02:27] MTecknology: with apache? [02:28] nginx [02:28] MTecknology: so nginx is pointing to their home dirs? [02:29] ya [02:29] php-cgi processes running as that user - each site uses the php process to access the home dir as that user [02:29] then nginx can read static content without php but can't run scripts or alter anything in there [02:30] MTecknology: can you just poing nginx to point to the jail? [02:31] ya, it would require sed -i 's/\/home/\/jail\/user/' /etc/nginx/snips/drupal && /etc/init.d/nginx reload [02:31] I think that would cover it.. [02:31] granted I'd just edit by hand instead of sed :P [02:32] MTecknology: hehe yup that should all work. [02:34] thesheff17: <-- if that fails then I win; if that wins - then I fail and must work harded - probably by tweaking what php can do [02:35] MTecknology: do you have safe mode enabled [02:35] MTecknology: for php I think that disables exec [02:36] thesheff17: I'm not sure but will absolutely check when I get to work - thanks :) [02:36] thesheff17: HUGS! ({) [02:36] MTecknology: I also thinks it disables uploads but yea I def look into safe mode for php [02:36] np [02:37] oh.. uploads might be needed - maybe there's a way around it. I'll test and find out. I'm sure my answer will be somewhere in php.ini [02:37] thesheff17: thanks for putting up with me and helping so much :) [02:37] MTecknology: np glad I could help. I know chroot gave me a huge headache for days [02:37] MTecknology: I'm signing off tonight but will be back on tomorrow [02:38] thesheff17: alrighty, I'll let you know how it goes when I get there :) [02:39] MTecknology: safe mode is deprecated since 5.3.0...it has been a long time but I would check this out. http://www.howtoforge.com/forums/showthread.php?t=47 [02:40] MTecknology: ttyl [02:40] thesheff17: :D spiffy [02:42] hmm, no idea what was wrong [02:42] rebooted the *real server*, and they started working on ipv6 correctly [02:50] ok, so apt-get isnt automatically or even asking to install dependencies. How can i change it so that it does? [02:51] * patdk-lap wonders how you managed to break it [02:52] patdk-lap: its a very stripped down image for xen. Wasnt provided by me [02:53] MACscr: I know in aptitude it's a simple preference - i don't know about apt-get [02:54] MACscr: it should install deps - but you can tell it not to do recommends [03:09] does aptitude and apt-get have access to the same "repos"? not sure exactly what ubuntu/debian calls them [03:11] Does anyone know of a good webmail guide, I tried squirrel mail but that didn't work. [03:16] depends what you want [03:16] simple and easy, or full featured and complex [03:21] damnit, i cant get aptitude not apt-get to do dependencies and cant figure a way to fix it. I dont see anything in /etc/apt/apt.conf.d/ that might help me resolve it [03:21] grr this is frustrating [04:01] Daviey: tomorrow we will talk, BUT: I reinstalled the whole thing 4 times. *ALL* four times, all components -- including NCs -- registered successfully (and by themselves) [04:05] Sounds like a *good* thing [04:11] yes, except that without any changes (except for cosmic rays) it was not doing that before... [04:12] * patdk-lap thinks people are paranoid of cosmic rays [04:13] * hggdh brings up witches as possible causes, even if they do not exist [04:13] sooooo [04:13] i registerd a domain name [04:14] but they people cant forward it to a dynamic ip [04:14] what should i do [04:20] what do i have to do to setup mysql so i can just type: mysql -u username -p, etc? [04:20] its one of my biggest annoyances of debian/ubuntu is that every service command seems to need a path [04:21] given that it lives in /usr/bin, there should be no path needed for the mysql client [04:23] MACscr: that should work as it is. What's the output of echo $PATH ? [04:25] hmm, looks like i have some errors left over from the last install. Check this out http://pastebin.com/PRxcEsNK [04:27] guess the baruwa install didnt complete. Part of that actually came up when i was simply trying to install libwww-perl [04:30] judging from the bugs, mysql-cluster-7.0 is a mess [04:31] but i just need 5 =P [04:32] did you have a reason for using mysql-cluster? [04:32] Graves: still there? [04:32] well it appears that baruwa works with clusters, which is what i want to move to with this setup, but i havent even had a chance ot try out the software on a single server config yet [04:33] hi [04:33] then in the meantime you can probably use mysql-server-5.1 and mysql-client-5.1 [04:34] i'm having a problem accessing my server from the internet [04:34] I set up port forwarding on the router and changed from dhcp to static ip on the server [04:35] but for some reason I can't ssh from anywhere outside my LAN [04:35] its possible that your ISP may be blocking incoming connections [04:36] is there a workaround? [04:36] is your router directly connected to the internet connection, or is there like a DSL modem in between your router and internet connection? [04:36] cable internet modem box, then a router, then the server [04:36] sometimes, DSL 'modems' are actually routers [04:36] hmm... [04:36] then maybe I have two router and i though i had one hah [04:37] exactly, but cable modems, as far as i know, are always just modems [04:37] at least the cable modems provided by cable companies, like the surfboard [04:37] ah good [04:38] rdw200169: Sometimes they are routers too. [04:38] ScottK: ok ok, fair enough, thats why i said "as far as i know" ;) [04:38] also, would it be bad to set up router port forwarding, and put the server on dmz? [04:39] dmz is like 'total port forwarding' [04:39] rdw200169: Sure. Understood. [04:39] well yeah, i just wondered if it would mess things up or something [04:40] nah, its just kinda pointless to do port forwarding if you're gonna put it on a the DMZ [04:40] anyway, i was gonna say, have you tested SSH *without* the modem to verify if it is actually a modem issue? [04:40] what do you mean? [04:40] i mean, without the router [04:41] like, plug the server straight into the internet connection [04:41] oh no [04:41] because then I wouldn't be able to access the internet with other computers to test it hah [04:41] if your server has a firewall, it should be fine on the WWW [04:41] if you want, i can test for you [04:41] hmmm [04:42] i *am* on the other side of the internet, so i can test things [04:42] lol [04:42] but it doesn't necessarily have to be SSH, just anything, like a webserver or something [04:42] well yeah [04:42] i weighing the effort needed to walk to my server in the other room [04:43] agh ok [04:43] that, or, i can test what you have right now [04:43] that might be better [04:44] i'm pretty new at this, if it isn't apparent [04:44] should i send you the ip, straight up? [04:44] if you want [04:45] i'm assuming that if you're gonna run a server, you're gonna get your IP out there anyway [04:45] ajmitch: im not picking what needs to be installed, thats from the .deb i installed [04:45] good point [04:45] the .deb for baruwa [05:10] ok, i got past that stuff and just installed the mysql-client. Now here is my noob question for the day. How do i restart mysql? I dont see anything located in /etc/init.d/ for mysql [05:14] nvm [05:17] . [05:55] http://www.tldp.org/HOWTO/Kernel-HOWTO/ - "because it don't fitted the LDP standard." Is English not one of the standards you have? [06:00] ha [06:03] MTecknology: submit a patch [06:05] twb: perhaps if I have time at some point in the next year :( [06:06] sleepy time.. I'll talk to you all when the sun comes up again. [06:18] hi there, somebody know how work the order form rule in iptables? I mean the the first match stop checking the rest or check every rule in the table? [06:45] Roxyhart0: first match [06:46] thanks [06:48] Roxyhart0: if you read some 'standard' firewall configurations, like the 'standard' firewall that firestarter uses, a lot more about iptables makes sense. [06:52] Roxyhart0: on the rule matching, the last word in an iptables command specifies what to do, i.e. the jump part, -j. this determines the 'next step' in the rules. for example, the "-j LOG" target allows you to match a packet, log it, and ***continue through the table*** [06:54] Roxyhart0: its hard for me to say that *every time the table is first match -> stop* b/c there are so many Target Extensions available for use in iptables... [06:55] yes, i know...i am trying to figure out with some rules that i got [06:56] if you need any help, i'm pretty good at iptables/iproute2 [06:56] it is just i need block port 25 por everybody except 2 Ips [06:57] so i did drop port 25 and acet when come form those ips [06:57] ah, easy [06:57] but sometimes works and sometimes dont [06:57] first, match for that IP/port combination then ACCEPT [06:57] then, after those rules, drop all other port 25 traffic [06:58] i did that but sometime does work..it is like intermitent [06:58] so the table catches that IP address going to that port *first* before dropping the other stuff [06:58] do you have a log target prior to your drop target to catch whats getting dropped? [07:00] is this like your iptables match: -A INPUT -s USER_IP -p tcp -m tcp --dport 25 -j ACCEPT [07:01] no but i got a first rule that say, if some ip go to the mail server go to the rule email server and after those rules it the rule to accept port 25 and then [07:02] drop everyone else [07:03] so the whole thing starts with something like -A INPUT -d MAIL_SERVER_IP -j MAIL_SERVER_RULES_INCOMING [07:03] right? [07:04] to it start a -A FORWARD -s 172.19.0.0/24 -i vlan30 -j Staff [07:04] where staff is a rule [07:05] then in staff [07:05] -A Staff -d 172.20.0.2/32 -o vlan2 -j mailserver [07:05] and then bellow that [07:06] ok [07:06] -A Staff -s 172.19.0.100/32 -p tcp -m tcp --dport 25 -j ACCEPT [07:06] -A Staff -p tcp -m tcp --dport 25 -j DROP [07:06] sorry is 20 instead 19 [07:06] but still dont work [07:06] ah, got it [07:08] ok, i don't see the rest of your rules, obviously, but lets just assume that you *don't* need to specify the interface [07:08] so my question is if i send e email from this address first go to the rule emailserver [07:08] and then come back to drop the file [07:08] the package [07:08] the kernel, if spoofing is enabled, will automatically drop packets if it looks like the traffic is coming from an unlikely location [07:08] why? [07:09] the routing table will take care of that [07:09] ITYM Reverse-Path Filtering (net.ipv4.conf.*.rp_filter) [07:09] the kernel knows where the packet originated from and where its going, and the 'hooks' will catch the correct direction [07:09] thanks twb thats what i was thinking of [07:10] raw iptables usage should probably be discussed on #netfilter. [07:10] twb: fair enough, he got me started ;) [07:10] rdw200169: I plonked Roxyhart0 long ago [07:10] I've been asked to learn about EC2. Is there a way to set up a local EC2 sever so I could practice setting up instances with out getting charged. I have a extra box with virtualization CPU [07:11] Crewsr3: I believe so, but I don't do whatever-eucalyptus-is-called-this-week [07:12] sorry, I'm really new to all of this, what is eucalyptus? [07:12] this whole "cloud computing" thing [07:13] well, i dont know why tbw did it, as i still can read his messages. I is rude and not gendelman at all [07:13] thanks for your help rdw200169 [07:14] cf. http://en.wikipedia.org/wiki/Amazon_EC2, http://en.wikipedia.org/wiki/Eucalyptus_(computing), UEC. [07:14] no problem, if you want to discuss iptables more, you should go to #netfilter. he's right, this is where we discuss ubuntu server questions, not hardcore firewalling/routing (not really a 'server' function ;)) [07:14] so in theory there is a way to install ubuntu server in the same way the EC2 is setup, so I can learn how to build an instance locally [07:14] thanks [07:14] Good morning all. I've sent the following message on #samba, but maybe someone here could help me figure out what is going on: I've got a winbind problem. I've got a AD 2008r2 Server which I use for user management and a samba 3.4.7 file server. For some reason Winbind stops retrieving user updates (getent passwd). log.smbd says: [07:14] winbindd/winbindd_user.c:97(winbindd_fill_pwent) [07:14] error getting user id for sid S-1-5-21-1886463297-1098047934-3826461101-1128 [07:14] [2010/08/03 07:54:30, 1] winbindd/winbindd_user.c:856(winbindd_getpwent) [07:14] could not lookup domain user ptstest4 [07:15] still i think he is very rude, i am sure he have at leat a mum, he should not ne rude === EvilPhoenix is now known as EvilTrek === EvilTrek is now known as EvilPhoenix [08:06] New bug: #612858 in dovecot (main) "package dovecot-common 1:1.2.9-1ubuntu6.1 failed to install/upgrade:" [Undecided,New] https://launchpad.net/bugs/612858 [08:06] Hi there. I have a virtualization cluster (kvm+libvirtd+corosync+iscsi) where I have a problem with cache. Sometimes we clone machines on our storage server. The virtualization server does not see this and has some kind of cache of what it things should exist on storage server. I need a way to flush this cache on the virtualization server. Maybe this cache is within ISCSI? [08:07] A reboot of the virtualization question and the cache is flushed. So it absolutely some kind of cache effect on the virtualization server [08:07] question = server.. Hmm, interesting typo ;) === _NG is now known as _ng === _ng is now known as _NG [08:58] Hello, anyone around this late? :) [09:01] comron: Well, given the earth being round... [09:02] andol: late, early it's all the same :) [09:03] andol: I'm trying to rebundle an AMI from http://alestic.com/, but I'm running into some problems. Think you could help? [09:05] comron: Nope, nothing I am terrible familiar with. [09:05] so... i was going to figure this out tmrw, but it's bothering me [09:05] my ubuntu server has a filtered port 80 [09:06] well, maybe this sounds familiar: When I try an apt-get update, I get an error that says "E: Sub-process returned an error code". Sound like anything you know of? [09:06] so all http transfer to anywhere outside my lan doesn't work [09:07] i'm using shorewall btw [09:07] if anyone can advise I'm eternally grateful [10:25] Daviey: I'm starting earlier than expected [10:25] Daviey: any progress on your side, before I start reproducing on my rig ? [10:25] ttx: oh.. goody :) [10:26] ttx: I would find it handy for you to reproduce with the latest ISO. I think things might be better than hoped [10:27] ah. [10:27] * ttx rsyncs [10:29] ttx: Good to see this daily is in size \o/ [10:31] it still has hplip though [10:32] * ttx wonders how we shaved those few Mb [10:32] ttx: probably no kernel :) [10:46] Daviey: installing the CLC+WC+CC+SC [10:53] ttx, I'm deploying a fresh one now. [11:23] Daviey: node being installed, stopping for lunch [11:24] ttx, super! [11:27] sup [11:27] someone has a word to: BIND9 vs Unbound? [11:34] I use dnsmasq. [11:53] * Daviey screams [11:59] hi i have a ubuntu server that i access via ssh from a mac [12:00] is there anyway i can see the desktop on the server? [12:00] like graphical desktop... [12:00] Ubuntu Server does not have a graphical desktop. [12:01] o so no way? [12:01] <_ruben> if you want one, install the desktop (edition) [12:01] cant i just install ubuntu-desktop? [12:01] You can. [12:02] <_ruben> server + desktop = desktop != server ;) [12:02] You could run the X server on your Mac, and install and run X app(s) on the Ubuntu Server. [12:06] ttx: we can postpone that bacula 'bug', but the truth is that it really isn't fixable :/ [12:07] ttx: unless we allow predepend [12:28] ivoks: ok, I'll unmark it as a papercut then [12:30] is there a method to run something after all packages are installed? [12:30] like triggers do for kernel and libc [12:30] ivoks: I don't think so [12:31] cause that would solve this issue [12:31] otherwise, we can't postpone configuration of bacula, if mysql isn't started [12:32] Hello, my mysql setup is horribly broken, HALP! [12:33] This stuff just forkbombs itself: http://conference.prosody.im:5280/pastebin/4ab10f55-43d5-4cf5-a773-991b4db69dde [12:33] from /etc/mysql/debian-start [12:33] Daviey: in my A3 test, the node is registering correctly [12:33] ttx: in registration.log, what return code are you getting? [12:34] ttx: And are you getting errors in registration.log of the $clustername not being found? [12:34] I'm getting 0 [12:34] ... clean install.. i just got 1 [12:34] that one is normal [12:34] zash: ? [12:35] Daviey: cluster not found, retrying in 10sec [12:35] then cluster is found [12:35] ah, those clusters :) [12:35] Daviey: "euca-describe-availability-zones verbose" returns as it should [12:36] ivoks: I get a whole bunch of xargs procs that never finishes, and the load spikes and eventualy something gets oom killed [12:36] Daviey: euca_conf --list-nodes is the only thing that doesn't work here [12:37] zash: what are you doing exactly? [12:37] Daviey: could you explain to me how you installed it ? [12:37] ttx: This is interesting.. clean install gave me a return code of 1 for node registration in registration.log [12:37] ivoks: just plain starting it [12:37] mysql? [12:37] ttx: fully preseeded.. [12:37] ivoks: yes [12:37] with 'service mysql start'? [12:38] Daviey: not an ISO install ? [12:38] ttx: no [12:38] Daviey: then your preseed is wrong [12:38] Hmm [12:38] ivoks: /sbin/start [12:38] Check CC key in the NC /var/lib/eucalyptus/.ssh/authorized_keys [12:38] is it present ? [12:38] zash: /sbin/start mysql [12:38] ttx: doing a fresh install as we speak.. will need 20 mins. [12:39] Daviey: define "fresh install" [12:39] ttx: fresh preseeded.. [12:39] Daviey: you should run an ISO install [12:39] Daviey: to confirm that it's working correctly [12:40] ivoks: the init.d script says to use start at least [12:40] I'm pretty sure the preseeding can introduce its own set of bugs, and that's not what we are testing for the milestone [12:40] ttx: Agreed.. i really want to try and reproduce this install.. see the behaviour i have, then will do an iso manual install. [12:41] ttx: Part of the problem, the testing that hggdh does - has to be preseeded. [12:41] I agree with that... but that's a bug in the testing env, not in UEC [12:42] ivoks: hm, service start and /sbin/start just sits there and does nothing [12:42] I suspect your preseed fails to deploy the CC key on the NC, so the registration fails [12:43] If the ISO installer works, that proves that the bug is in the preseeding [12:43] yes.. i think this could be the case [12:43] Commenting on the bug... [12:43] Now that I'm here, I'll try to run an instance [12:44] gah, now it says mysql is started, except it's not:( [12:44] ttx: That failed for me a few mins ago.. but i know it worked yesterday! [12:44] zash: stop it [12:45] zash: kill all running mysql processes [12:45] (ttx: registering an instance) [12:45] image* [12:46] ivoks: check [12:46] zash: now start it with 'start mysql' [12:46] zash: and look into /var/log/syslog [12:47] ivoks: Aug 3 13:47:41 gladius init: mysql post-start process (15082) terminated with status 1 [12:48] zash: is your database empty or you have something in it? [12:48] ivoks: i have a bunch of wordpresses and some other stuff [12:49] ivoks: it's been broken since upgrade from hardy, and i tried doing a purge and reinstall and putting the dbs back [12:50] ivoks: but it just ended with me giving up and doing sudo -b -u mysql mysqld [12:52] khm [12:52] that was a bad decission [12:53] mysqld is started trough mysqld_safe [12:53] now it probably has all the data in wrong places [12:53] and that could be a reason why it fails [12:53] Daviey: instance running [12:54] Daviey: it works way better than you and Carlos seemed to say [12:54] ttx: OK.. this makes NO SENSE.. using identical preseed file, i've just had a return 0 for node registration.log [12:55] I'm convinced there is something inconsistent, like a weird race condition - depending when you enter the loop. [12:56] ivoks: hm, just starting mysqld_safe works, but then I can't login [12:57] it looks to me that eeverything is broken :) [12:57] zash: do you have anything in /etc/mysql/conf.d? [12:57] Daviey: looks like you'll have to rinse/repeat until you reproduce it :) [12:57] oh joy. [12:58] Daviey: try an ISo install following http://testcases.qa.ubuntu.com/Install/ServerUECTopology1 [12:58] Daviey: if that works for you, its no longer a critical issue for A3 [12:58] agreed... [12:58] * Daviey does the dance, hoping he doesn't hit that issue :) [12:58]