[00:07] * funkyHat jumps on tucemiux [00:07] greetings funkyHat [00:08] I guess the place to start is the server guide [00:08] tucemiux: I would tend to start by just having a go, and then look up a guide when you don't know how to do something [00:09] But the server guide is probably good too ⢁) [00:10] funkyHat, nowadays I have a machine that is strictly a server, I installed ESXi on it, slapped ubuntu server on top of it, and migrated to the ssh server that I configured [00:10] funkyHat, is it a good idea to have a server to just serve web pages? [00:12] tucemiux: I can't really answer that question without some more information :/ [00:13] well basically, im wondering if it might be a security risk to host a web server on the server that also has all my files [00:14] files meaning user data, as in hilton videos [00:14] Well of course everything has some risk, but I think as long as you're sensible you shouldn't have much trouble [00:15] Firstly web servers run as the user www-data, so an attacker can only see what that user can see if they do manage to gain some kind of control [00:16] Things like php (or any other server side scripting) increase the risk over just serving static files [00:16] But if you've already got ESXi running, why not create a separate VM for your web server if you're concerned? [00:17] funkyHat, i wont be doing anything serious with that web server, maybe just serve static stale data, nothing fancy [00:18] yes, I was thinking about creating another server just for web serving, how much hard drive space you think I should commit to a web server? Like 40 gigs? [00:19] tucemiux: again I have no idea, depends what you're going to be serving. I have a production server which hosts several client's sites which only has 16GB storage [00:19] *clients' [00:20] funkyHat, ill probably serve just my blog, my cheat sheets, stuff like that, any file that's big I would most likely use other sites, like youtube to share my videos [00:23] i wonder if it's difficult to configure an ldap server to use for authentication? [00:27] tucemiux: I've not done it, but I have shell accounts on a couple of servers that use LDAP for auth, so it's certainly possible ⢁) [00:28] funkyHat, basically I want to be able to configure a username and a password and any machine that attaches to my network will use the server to authenticate [00:30] tucemiux: I think you would have to configure each computer to use your directory server, but that should be possible, yes [00:32] funkyHat, exactly, you set up the username and password then you configure the machine, this way I dont have to worry about adding user accounts every time I reimage my machines [00:34] tucemiux: This might be useful https://help.ubuntu.com/community/LDAPClientAuthentication [00:34] Although possibly outdated... [00:35] funkyHat, configuring the client shouldnt be too bad, configuring the ldap server is a b@#h!, im basically trying to nail down a nail with a sledgehammer [00:39] funkyHat, i guess im going to have to wait until someone who has done before logs in, that documentation is overkill for what I want to do [00:46] funkyHat, that's over kill!! LoL I guess I'll take a look into that later on tonight, I'm going to head back home and install that ubuntu web server === oubiwann is now known as oubiwann-away === oubiwann-away is now known as oubiwann [00:48] tucemiux: http://www.howtoforge.com/linux_ldap_authentication looks like it might be useful, though it isn't Ubuntu specific, and I haven't really looked at it in detail [00:49] openssh-client is installed on the client machines, right? Not on the server themselves? [00:49] It wouldn't hurt to install it on your server. [00:50] I have it installed on all of mine, as I regularly ssh from them to other things. [00:51] It's installed everywhere by default [00:52] Pici, I was just wondering if the client packages installed more than just the command line ssh, I was going to do that on my laptop, actually [00:53] ok well its kinda cold in this starbucks, im going to go home and finish what I started, ill be back later on tonight, hopefully [01:16] <|rt|> I'm playing with the alpha version of 10.10 server anyone know how to setup btrfs multidisk pool in the installer? [01:17] <|rt|> I could set that up with another live cd then try to install on it [01:48] ScottK: The Kolab server will have to wait until tomorrow, yesterday's live CD doesn't boot and for some reason, no LiveCD was built today. Hopefully there will be a working live CD tomorrow. === klaas- is now known as klaas [02:45] Directories should only need chmod 644 for a webserver to serve static content from them no? [02:47] robertpayne: Directories should probably be 755, files in them 644. [02:47] jmarsden: ok.. script files 755 as well? [02:47] jmarsden: I thought directories could be lower.. why does the server need execute access for them? [02:47] Yes, that's conventional. [02:48] "execute" on a directory means something else -- search permission. man 2 chmod [02:49] jmarsden: ahh.. thanks :) Is there any easy way to recursively set just directories to 755 without modifying files? [02:49] nvm.. find . -type d -exec chmod 755 {} \; [02:50] Yes, something like chmod ugo+X /path.to.directory [02:50] Well, you can do that too. [02:50] I guess I mean subdirectories etc.. [02:50] chmod -R ugo+X /path.to.directory [02:50] wont that hit files as well? [02:51] man chmod and look at the difference between +x and +X :) [02:51] doh [02:56] sweet all fixed up :) [03:00] over past three weeks went from knowing pretty much nothing about full sys admin to running my own box completely without a control panel.. been fun [03:48] ryanakca: OK. Thanks for the update. === dendro-afk is now known as dendrobates [05:05] What is the best way to allow my server to send emails ? [05:05] Install and configure an MTA [05:05] mta [05:06] like postfix [05:06] I don't have a mail server do i need to set this up as well [05:06] That depends what you mean by "mail server", but: probably not. [05:07] well it says system mail name [05:07] just make something up? [05:07] Er, no. [05:08] that is one of the things that confuses me [05:08] You should read the Ubuntu Server Guide, if you haven't already. [05:08] A host's mailname is typically the same as its FQDN. [05:08] right which is wwmcd.org [05:08] For a satellite MTA, it doesn't really matter. [05:08] Yeah its going to serve all my drupal and wordpress installs [05:30] How can I check to see if postfix it working [05:31] Send an email? [05:31] is there anyway to test it form the potfix prompt [05:31] postfix** [05:32] What is a postfix prompt? [05:33] when you telnet into it [05:33] or something [05:33] Well, yes, if you connect to the submission or smtp port, you could talk SMTP to it. [05:43] chrislabeard: are you testing simple SMTP or TLS etc? [05:44] uhhh [05:44] chrislabeard: http://flurdy.com/docs/postfix/edition10.html#test-postfix-receive === unreal_ is now known as unreal [05:44] right below it is can postfix send [05:45] if it works inside the box then hook it up to a mail client like thunderbird and tail -f /var/log/mail.log [05:45] chrislabeard: of course you have to be running a pop3/imap mail server as well postfix is only a MTA [05:46] Oh well than maybe I should use simple SMTP [05:46] since all I want is the server to send me messages [05:48] chrislabeard: yeah then just need postfix and telnet localhost 25 [05:48] chrislabeard: follow the can postfix send on http://flurdy.com/docs/postfix/edition10.html#test-postfix-receive [05:48] to test [05:49] anytime I try to to RCPT TO: it says Relay Access Denied [05:50] That's because it's not an open relay and you're connecting on a non-lo interface. [05:50] means you configured it wrong [05:50] Or you configured it wrong, yeah [05:50] hmmm k [05:51] chrislsbeard: you need to open the relay and then block port 25/587 etc.. do NOT run an open relay [05:51] If you're just operating a satellite site that sends mail to a smarthost and doesn't receive mail directly, you should be able to configure postfix correctly from the debconf prompts. [05:51] okay [05:52] I certainly would not "open the relay" even if there was a firewall there. [05:53] k [05:53] I reconfigured it [05:56] hmm I wonder if its because I'm using EHCP === dendrobates is now known as dendro-afk [06:08] twb: I should say he should set it to be an open relay from localhost [06:08] It should be that way by default [06:08] twb: yea not sure what happened on his [06:09] I still can't get it to work, Its all good its just a test server [06:09] Don't really need it to send email [06:11] All servers should be able to send mail, if only for cron and atd [06:12] And smartctl and mdadm resync notifications and logcheck... [06:12] twb: local mail at least, not necessarily mail to/from the outside world [06:12] ball: right. [06:17] What does "plymouth" do? [06:20] ball: annoys me [06:22] Particularly since you can't remove it and can't tell it not to run [06:22] What is its intended purpose? [06:22] (Booting without "splash", it'll still run and hijack the vt7, then display a faux console on it.) [06:23] ball: it's purpose is to provide a more seamless boot sequence to desktop users (than usplash) [06:23] * ball finds splash screens a bit odd. [06:23] Although canonical people have assured me "it's not just splash" and "they don't want to have the plymouth argument again", I still don't get it. [06:26] Wierd. [06:27] Something else that's wierd: I just rebooted an Ubuntu Server box that I was able to connect to using ssh. Now I can't. [06:27] I added a hard disk, but that's on a second channel and wasn't booted, so I'm not sure what's wrong. [06:28] ball: did it boot normally? [06:29] twb: seemed to. [06:29] ...just can't ssh to it. [06:30] hello chilicuil [06:30] I'll try rebooting, just in case. [06:31] So it's in runlevel 2? [06:31] It wouldn't surprise me if it got confused and stuck in S [06:34] Seems to have booted this time. [08:43] is there any reason usermod -G grouptoremovefrom username wouldn't remove the user from the specified group? [08:43] oh nevermind a bit of a noob reading man pages now [08:46] Suggest delgroup, not the low-level usermode. [08:46] Er, deluser --group === RudyValencia- is now known as RudyValencia [09:08] twb: thanks.. I locked myself out of ssh by accidentially adding my sudo user to sftp group that is chrooted [09:15] what does "" mean when i do "ps aux" [09:16] nevermind === xampart_ is now known as xampart [09:38] hi there... can anyone give me definitive information about the differences between -virtual and -ec2 kernel versions? specifically do they both support use in a Xen domU? and if so are either recommended over the other? [09:49] IRConan: diff the /boot/config-* files of both [09:52] I'm afraid there's more to it than that. [09:52] linux-ec2 is built from a different source package. [09:52] (at least in Lucid and before) [09:53] IRConan: -virtual is the same as -server, only with a bunch of modules surgically removed from the binary package. [09:53] IRConan: It supports pvops, so it can run as a Xen domU as well as in KVM or on real hardware. [09:54] IRConan: -ec2 only works as a domU and you should only need it if you're running on ancient versions of Xen. [09:56] Is there anywhere you can find a list of how a package was compiled? I'm looking to compile/install php5.3.3 but was curious if there's a way to see how php5.3.2 was compiled so I can make it as compatible as possible [09:57] robertpayne: apt-get source to grab the source package. [09:57] robertpayne: sure. get the source package [09:57] joschi: jordan_U: awesome thanks :) should help a lot [09:57] robertpayne: You're welcome. [09:58] php 5.3.3 is scheduled for 10.10 but I kinda want it for the ease of nginx integration [10:03] joschi, jordan_U: technically if I downloaded the source package for php5 from the macerick I could compile it from there? [10:03] robertpayne: Yes. [10:04] !prevu | robertpayne [10:04] robertpayne: prevu is an automated, personal backporting utility. Check out https://wiki.ubuntu.com/Prevu for more details [10:04] Jordan_U: sweet. have to get all the dependencies myself but will be much easier than setting up the configuration file myself etc.. [10:04] robertpayne: Just do apt-get build-dep php5 [10:04] robertpayne: That installs all the build dependencies. [10:05] soren: sounds good but if I'm running 10.04 and it made 10.10 it could fail.. [10:05] If you add a deb-src line for maverick to your sources.list and do "apt-get build-dep", it'll grab the build dependencies of php5 in maverick. [10:06] soren: but will it compile them or grab the binaries? You can't be sure the binaries are compatible? [10:07] Jordan_U: prevu looks good, but it wants to install a ton of other things along with it not sure I really up for that [10:22] soren: should I add the maverick sources above or below the lucid ones? Not sure how apt-get resolves which ones to grab [10:41] robertpayne: It'll grab the binaries from lucid. [10:42] robertpayne: ...but get the list of them from maverick. [10:42] soren: ahh yes ok awesome [10:42] robertpayne: the order of the lines in sources.list does not affect the choice of version. [10:42] robertpayne: It only affects the order of preference for mirrors and such. [10:43] soren: ok I see.. also I'm a bit naive here.. the source package ./configure still requires you to setup all the options correct? It doesn't automatically set all the options/patches the binary dist uses? [10:43] robertpayne: Depends on how you use it. [10:43] robertpayne: PAckage builds in ubuntu are fully automated. [10:43] soren: I'd like to grab the 5.3.3 source from maverick and automatically build it using ubuntu's settings I don't need any custom ones [10:43] robertpayne: If you call it like "dpkg-buildpackage -rfakeroot -b" it'll do whatever the proper ubuntu builds do. [10:44] soren: ok awesome!! [10:44] soren: they just need to backport php 5.3.3 to 10.04 [10:44] Why? [10:44] soren: it includes FPM which makes working with nginx + php a lot easier and stable [10:45] php-fpm* [10:45] Are you implying that php for the first time in history has made a release that doesn't have any regressions at all compared to the previous version? [10:45] soren: oh probably not.. to be honest I'm sure there's some issues I'll find out... [10:46] Maybe you won't. Maybe it's just some small thing that only affects very few users. [10:46] soren: True it's a small dot release too that enabled it 5.3.2 to 5.3.3 [10:47] That's the thing, really. Ubuntu feels it's better to ensure that stuff that worked yesterday also works tomorrow than making stuff that didn't work yesterday work tomorrow. [10:47] People are depending on stability. [10:47] soren: That is true.. stability is really key [10:48] Exactly. Much more important than adding any new feature. [10:48] during development (like in Maverick right now) everything is fair game. People know that they're using a moving target. Once stuff is released, they should be able to rely on it for production use. [10:58] soren: ok one last q if you don't mind to use dpkg-buildpackage do I have to have the source package downloaded or will it fetch it? [11:10] robertpayne: You need the source package. [11:11] soren: yup figured that out :) it's building right now.. [11:11] soren: I think the php5 source literally builds an entire lamp stack.. or at least the build-dep required it [11:18] robertpayne: I don't know what you mean. It builds neither Linux, Apache or MySQL. It only builds PHP, which seems perfectly reasonable for a php package to me. [11:19] soren: doing apt-get build-dep php5 requires a ton of stuff from mysql/apache etc.. [11:19] robertpayne: Sure. [11:19] soren: I'm not sure why :S [11:20] robertpayne: It needs MySQL librarires and development headers to build php5-mysql. It needs apache headers and stuff to build libapache5-mod-php5. === au_ is now known as au [11:21] libapache2-mod-php5, I mean. [11:21] you know... The usual reasons for needing build-dependencies. [11:22] soren: ah yes.. I understood those but it also was requiring apache2.2-bin [11:23] robertpayne: Not sure why it would need that. [11:25] soren: yea I'm not sure kinda sucks I don't want apache at all.. not even mod-php [11:25] http://packages.ubuntu.com/lucid/php5 says it only requires php5-cgi OR libapache2 [11:25] robertpayne: Well, you did ask for a build identical to the one in Ubuntu. [11:25] soren: yes [11:25] Those are runtime dependencies. [11:26] Not build-dependencies. They're not strictly orthogonal, but almost. [11:26] soren: I see hmm I may have to dig deeper into how it runs the ./configure and build process for php5 [11:27] ...or take another look at prevu. [11:28] I wasn't quite sure what prevu does it looks like it's for backports? thought backports were for previous version binaries [11:28] No, future. [11:29] You're taking something from .e.g maverick and putting it into Lucid, which is older than Maverick. Hence, backport. [11:29] soren: what is an ancient version of Xen? [11:30] It does all the same stuff you did above, only automatic, and in a chroot, so you don't end up with all the build-dependencies installed on your system after you're done. [11:30] my host is debian lenny so compared to ubuntu is would be considered ancient [11:30] soren: oh very nice [11:30] IRConan: Which version of Xen do you havE? [11:30] 3.2.1 [11:30] IRConan: That's fine. [11:30] so I should use -virtual ? and that will do paravirt? [11:31] IRConan: Yup. [11:31] cool [11:31] It'll detect at boot time that it's running under PV Xen and Do The Right Thing[tm]. [11:31] cool [11:31] you can tell based on what it calls the disks ofc [11:31] if they're sd* it's para if they're xvd* it's HVM [11:32] Don't count on that. [11:33] * soren lunches [11:35] soren: btw thanks a ton for helping me out with this - can't say how much I appreciate [11:55] soren: http://pastie.org/1095318 definitely can't just compile php from the ubuntu source package using dpkg it loads in all the apache and mysql stuff for all the modules [12:11] robertpayne: Sorry, what? [12:11] soren: it looks like the php package builds a bunch of modules for apache by default it's a shame it doesn't just build php and let the modules be a seperate package install [12:12] robertpayne: They are separate package installs. [12:12] robertpayne: They're just built from the same source package. [12:12] soren: I see but is there a way to exclude them from building from the source package? [12:13] getting http://pastebin.com/WQ8xLSwH when trying to lvcreate and system hangs. using 2.6.32-24-server. need fix. [12:13] I don't mean to be rude, but srsly... This isn't gentoo. We have one build from one source package, we build a stack of different binary packages, and people can use whichever ones of those they please. [12:14] soren: no worries none taken at all I totally understand [12:14] Some packages may make it simple to only build a subset of the binary packages, but generally, they don't. [12:14] php5 might. I don't know. [12:14] But really, it doesn't matter. [12:14] You're just building it once. [12:14] If there are some of the binaries you don't need, don't install them. [12:15] does anyone know if there's a netboot.tar.gz for the server install like there is for desktop (and Debian)? [12:15] xampart: That looks like a kernel bug. Perhaps you can try in #ubuntu-kernel? [12:16] rnewson: Just use the desktop one and don't install the desktop bits? [12:16] soren: ok, i try there then. [12:17] soren: the server install has different boot options. I guess I can unpack the iso and read the menu.cfg's. thanks. [12:18] rnewson: What iso? [12:18] soren: the server iso. it's the boot menu options I need to get hold off. I thought there was more of a difference between server and desktop that just package selection, but I'm happy to be wrong. [12:19] Nah, it's just the kernel and the task set. [12:19] yep. and now I mount the iso I see the fileset I was after too. :) [12:20] fancied converting some of my lab machines to UEC, but didn't fancy moving a CD around the server room (especially as it's 3000 miles away). [12:20] slacker [12:20] :p [12:26] hey guys [12:27] how can i create a raid mirror array [12:27] i have a workstation ive converted into a server and just installed 2 identical hdds of 2tb [12:28] eagles0513875: use the installer? [12:28] ? [12:28] what do you mean use the installer pmatulis [12:30] eagles0513875: create the array during installation - you havn't provided much detail, so i'm giving you the standard method [12:30] at what point do i do that though [12:30] im not that far into the installation process [12:30] if i dont do it there can i do it via command line once the server is online? [12:30] eagles0513875: during partitioning [12:30] ok [12:31] eagles0513875: yes, provided you don't try to touch active partitions [12:31] so you recommend the best and safest way is to do it during partitioning [12:32] eagles0513875: this is the standard yes. and it's the only way if you intend to put system files on the array [12:33] Hi.. Anyone know how to install uec on one machine instead of two as normal? [12:33] pmatulis: thanks [12:34] pmatulis: which option do i choose guided use entire disk then 2nd option is with lvm and 3rd is same as 2nd but encrypted lvm [12:35] eagles0513875: there should be a 'manual' option in there somewhere [12:35] pmatulis: there isnt there is when i click manual it says configure iscsi volumes [12:37] pmatulis: figured it out [12:37] eagles0513875: what was it? [12:38] have to create an empty partition table on the device [12:39] these are brand new drives [12:49] pmatulis: then once the machine is online how can i check and verify the raid array ? [12:50] cat /proc/mdstat [12:50] eagles0513875: short answer: mdadm [12:51] thanks pmatulis [12:51] pmatulis: i have 2x2tb hdds is raid 1 a good choice? [12:51] or should i go with something along the lines of raid0 [12:52] eagles0513875: it depends what you're after [12:52] i know the problem with raid1 if one drive goes everything is gone [12:52] would i be able to rebuild the array? [12:53] <_ruben> that's with raid0 (losing all when 1 fails) [12:53] <_ruben> raid1 can be rebuilt [12:53] <_ruben> 0=stripe, 1=mirror [12:54] _ruben: ok so if i loose one with mirrored array [12:54] im fine [12:54] :) [12:54] what strikes me as odd on ubuntu server is why it asks for how many spare drives you have [12:55] hello! im having problem with installing ubuntu server on ibm x3550. i know its certified to work with it, but when it comes to driver selection none woks. any suggestions? [12:55] eagles0513875: you can have a spare so rebuild process is smoother [12:57] what if i dont have a spare one pmatulis [12:57] eagles0513875: then you'll need to physically put one in when you need it [12:58] ok [12:59] \j #ubuntu-pl [12:59] dom_dom: its / [13:00] eagles0513875: i know:P, how would i get here :) maybe you can help me with my problem ? [13:00] dom_dom: exactly what drivers are you having an issue with. its funny i have an ibm x server and it has given me no problems with drivers [13:01] eagles0513875: megaraid_sas [13:01] New bug: #618633 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.1 failed to remove: subprocess installed post-removal script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/618633 [13:01] dom_dom: i dunno but mine is a simple x server [13:01] non swap and it has onboard raid [13:02] New bug: #618632 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/618632 [13:02] eagles0513875: never had to use raid so i'd appreciate any help :) but i think that i'll have to ask later [13:03] dom_dom: im learning how to setup raid as we speak lol [13:03] software raid on a machine here at work lol [13:04] eagles0513875: that's funny :) i think i need a break. maybe then something will come to my mind [13:04] dom_dom: lol google [13:04] pmatulis: strange i created my array but for some reason i dont have a root partition anymore :( [13:04] eagles0513875: propably :) [13:13] morning [13:13] _ruben: you still here im confused about something [13:18] !raid | eagles0513875 [13:18] eagles0513875, please see my private message [13:18] jdstrand: what are those two mysql bugs you wanted me to fix? [13:19] zul: that is an overstatement. I wanted you to consider (and if rejecting, commenting why) points 2 and 3 in comment #1 of bug 578922 [13:19] Launchpad bug 578922 in apparmor "mysql configuration should be adjusted to help prevent against chained attacks against LAMP stack" [Medium,Fix released] https://launchpad.net/bugs/578922 [13:20] zul: my thoughts were otoh without regard to what might break. [13:20] zul: you'd want to read the whole bug for context of course [13:20] is there any good apparmor documentation? [13:20] of course [13:21] New bug: #618640 in samba (main) "samba doesn't share subfolders" [Undecided,New] https://launchpad.net/bugs/618640 [13:22] eagles0513875: sure. see https://wiki.ubuntu.com/AppArmor, especially the bottom for more info [13:22] zul: thanks! :) [13:22] jdstrand: no , at the end there hehe [13:24] jdstrand: about the /tmp stuff see 375371 [13:26] jdstrand: is anyone doing app aromor documentation on the wiki for lucid [13:26] zul: oh cool [13:26] kirkland: there (and good morning)? [13:26] hey hggdh [13:26] eagles0513875: https://help.ubuntu.com/10.04/serverguide/C/apparmor.html [13:26] morning zul [13:26] eagles0513875: the wiki page I pointed to just hadn't been updated. I'll update it [13:27] ok thought i was goign nuts for a sec [13:29] eagles0513875: k, I updated it [13:29] thanks [13:32] zul: k-- I'll point that bug at 375371 === oubiwann is now known as oubiwann-away === oubiwann-away is now known as oubiwann [13:44] jdstrand: raid question for you when i select the partitions i want to use in the raid array on both drive it wont let me continue it goes back and has me choose the partitions [13:44] wait hold on [13:45] this makes no sense im trying to choose which partitions i want in the raid array [13:45] they are my ext4 partition and swap partition and i am choosing them on both drive and its not eletting me continue :( [13:47] nm i got it [13:48] If I wanted to record a webcams attached to my network, be able to view them live from the network, and be able to store a buffer of a few hours for each camera, what would be the best way to do this with ubuntu? [14:05] hggdh: can you look at #617982 a quick sec? [14:12] ubottu is slacking today! it didn't pick up bug 617982 [14:12] Error: I am only a bot, please don't think I'm intelligent :) [14:12] Launchpad bug 617982 in eucalyptus "package eucalyptus-cloud 1.6.2-0ubuntu30.3 failed to install/upgrade: le sous-processus script post-installation installé a retourné une erreur de sortie d'état 1" [Undecided,New] https://launchpad.net/bugs/617982 === mathiaz_ is now known as mathiaz === robertpayne_ is now known as robertpayne [14:24] bug 617982 [14:24] Launchpad bug 617982 in eucalyptus "package eucalyptus-cloud 1.6.2-0ubuntu30.3 failed to install/upgrade: le sous-processus script post-installation installé a retourné une erreur de sortie d'état 1" [Undecided,New] https://launchpad.net/bugs/617982 [14:24] zul: looking [14:25] hggdh: thanks === oubiwann is now known as oubiwann-away === oubiwann-away is now known as oubiwann-sick [14:42] zul: done [14:42] thanks === robertpayne_ is now known as robertpayne [15:13] smoser: good mornig, are you genning an UEC image for 10.04.1? [15:13] no. [15:13] do you care to know why ? [15:13] smoser: can I use the 20100813 one? [15:13] for testing ? [15:13] smoser: yes, I do care to ;-) [15:13] yes [15:14] if you're just testing "does it boot", i'd suggest trying with 20100813, and then if you see anything you dont like falling back to released. [15:14] the reasons are [15:15] bug 605079 and bug 574910 [15:15] Launchpad bug 605079 in landscape-client "Landscape Client should accept SSL CA certificates in the user data" [High,Confirmed] https://launchpad.net/bugs/605079 [15:15] Launchpad bug 574910 in linux-ec2 "High load averages on Lucid while idling" [Undecided,In progress] https://launchpad.net/bugs/574910 [15:15] landscape considers the first a "must fix", and that will be ready as soon as -proposed is re-opened and the 1 week wait passes. [15:15] the kernel issue we want fixed too.... jjohansen is working on it. [15:16] i dont see a lot of reason in releasing something since i want to relesae *very* soon after that. [15:17] also would really like to have bug 613309 in a refresh (which, is also just waiting to get into -proposed) [15:17] Launchpad bug 613309 in cloud-init "cloud-run-user-script.conf upstart script needs to run after all other cloud-init processes" [High,In progress] https://launchpad.net/bugs/613309 [15:17] hi [15:18] can some one please guide me regarding http://paste.ubuntu.com/478876/ ? [15:18] I am on Ubuntu Server 8.04 [15:18] smoser: ack, makes sense [15:19] i followed the suggestion as mentioned here ---> https://answers.launchpad.net/ubuntu/+source/dpkg/+question/50778 [15:19] but it didnot work for me [15:53] checking in again for my query ? [15:58] kaushal: looks like this bug : https://bugs.launchpad.net/ubuntu/+source/collectd/+bug/297288 [15:58] Launchpad bug 297288 in dpkg "E: Sub-process /usr/bin/dpkg returned an error code (1)" [Undecided,Invalid] === dendro-afk is now known as dendrobates [15:59] sherr, have already tried out the suggestion referred by that bug [15:59] did not worked for me atleast [16:02] https://lists.ubuntu.com/archives/ubuntu-server/2010-August/004541.html [16:04] sherr, any further suggestion ? [16:05] jdstrand: Now that sudoers has a sudoers.d, would you consider that a proper way to let an application do stuff as root or is there any reason to use a rootwrap thingamajig? [16:06] jdstrand: Of course assuming that it doesn't just do "whatever ALL=(ALL) NOPASSWD: ALL", but actually enumerates the specific commands it needs to run as root? [16:06] hi, i'm running apache2 with userdir mod enabled, if users have their own domain setup to resolve to my servers ip, how do i get apache to point it to their public_html or ~username site ? [16:11] kaushal: it's an init script that fails? Maybe try debugging that - run the startup command yourself, see if there are any helpful options, debug or logging options? [16:18] sherr, if you can give some hint regarding that init script ? [16:20] New bug: #618715 in openldap (main) "ldapsearch ignores TLS_CACERT from /etc/ldap/ldap.conf but gladly reads ~/.ldapcert.pem" [Undecided,New] https://launchpad.net/bugs/618715 [16:20] soren: I think that a properly enumerated sudoers file is just fine, assuming it is an otherwise non-privileged user and the commands that are given sudo access don't have a way to break out into shell (classic example, vim) [16:21] soren: it isn't as portable, and is potentially more difficult to maintain, but that is up to the developer. [16:27] jdstrand: Cool. Thanks. [16:31] kaushal: sorry, I don't have collectd myself. But try running whatever the init script runs interactively i.e. in an xterm yourself. Maybe it logs a useful error message? Or maybe the command has useful debug or logging options (see man page). Good luck. [16:36] New bug: #618722 in mysql-dfsg-5.1 (main) "package mysql-server-core-5.1 5.1.41-3ubuntu12.6 failed to install/upgrade: s'ha produït un error en escriure a «»: No such file or directory" [Undecided,New] https://launchpad.net/bugs/618722 [16:37] SpamapS: lemme know when you are around [16:39] soren: yeah, I'd agree with jdstrand. the thing I wrote for euca was basically just a stop-gap to help them get to using specific sudo rules and more careful wrapper scripts. [16:39] soren: all priv-escalation tools should be carefully examined, but I think it makes sense to attempt to use sudo so as to not reinvent the wheel, etc. [16:40] kees: Yeah, sudo's probably pretty solid by now :) [16:40] * kees just realized his terrible pun regarding "wheel" [16:40] when I run top I get this on the processor line.. Cpu(s): 1.7%us, 0.3%sy, 0.0%ni, 97.4%id,... what is the 97.4%id pertain too? [16:40] * jdstrand just got the pun [16:40] * jdstrand likes it :) [16:40] kees: Heh :) [16:40]