/srv/irclogs.ubuntu.com/2010/08/17/#ubuntu-server.txt

=== erichammond1 is now known as erichammond
YankDownUnderGot a server (brand new) that literally every time I power it down, I've got to re-install grub2....any clues?00:13
SpamapSYankDownUnder: you're probably not installing grub to the right place.00:16
fidelixHey, how do i mv/cp files recursively overwriting files and folders on the destination?00:16
YankDownUnderSpamapS, I'd have assumed that (as in this case) I've done it the same as I always do for this type of build... (grub-install /dev/sda => MBR?)00:17
YankDownUnderfidelix, cp -Rf00:17
fidelixThis does not work.00:17
YankDownUnderfidelix, cp -rf ?00:18
fidelixI'll check00:19
fidelixThe first one worked.00:19
fidelixThanks YankDownUnder00:20
YankDownUnderfidelix, Yer welcome mate00:20
SpamapSYankDownUnder: depends on what device your system is actually booting from.00:25
SpamapSYankDownUnder: its not a hardware raid card by any chance, is it?00:25
YankDownUnderSpamapS, RAID is disabled on the mobo...all is fine when I actually do a warm boot, but from a cold boot, it freaks out...00:27
SpamapSYankDownUnder: oh, that is actually pretty odd. I wonder if the controller is somehow screwing with writes to the MBR because of the RAID.00:40
=== jjohansen is now known as jj-afk
ryoohkihow do i tell upstart which services to add for startup and remove unwanted services that are starting now?01:04
fluvvellI'm wondering if hiddev is availble in the server kernel, or what the options are for usb based ups - I use apcupsd but I have no /proc/bus/usb/devices  - anybody familiar in this area?01:06
fluvvellIm using 8.0401:06
YankDownUnderSpamapS, There's a thought...have to check this out - I'll be in front of the server next week - so have to see what I can find out via remote...hate having to go through this all the time when the machine is powered down - it's going to be taken down at least two more time in the next month before it's got a perm home...01:25
tucemiuxanyone knows the path to httpd.conf ??01:41
tucemiuxpwd01:41
tucemiuxahh everything is in /etc/apache201:41
ChmEarltucemiux, /etc/apache2/ yes and see /etc/apache2/sites-available/default01:42
qman__ryoohki, the only way I know of is to manually edit the files, which are located in /etc/init/01:43
clustyanybody here with raids and also bothered to align partitions properly ?01:47
clustycurious if it's worth the hassle01:47
ryoohkiqman__: thanks!  i was trying to avoid that but i could see vim was one of the ways01:57
qman__clusty, I didn't bother, but I don't think my drives have 4k sectors02:02
qman__of course my transfer speeds are limited by gigabit ethernet anyway, so I'm not super concerned about performance02:03
clustyqman__: i am getting strange speeds02:03
clustyon windoze i get from 30mb/s to 21002:04
clustyon a 3 disk raid 502:04
qman__locally or over the network?02:05
qman__gigabit ethernet has a theoretical maximum of 125MB/s, but in reality is limited to closer to 100MB/s02:05
clustyqman__: locally02:05
qman__the fastest speeds I've ever sustained over SMB are about 80-85MB/s02:05
clustyqman__: also IO totally chokes it. as in a simple copy overloads the IO so much the PC is unresponsive02:06
clustycan barely wake up from screen saver02:06
qman__fakeRAID?02:06
=== robertpayne_ is now known as robertpayne
clustyqman__: real raid02:07
clustyintel02:07
clustybarely any cpu used02:07
clustybut IO used to the brim02:07
clustywould have expected the io scheduler to perform in a decent manner02:08
qman__expecting windows to perform in a decent manner is a mistake02:08
clustyno no02:08
clustythat is linux02:08
clustyif windoze blows, i can understand02:08
clusty...and expect02:08
clustyD:02:08
qman__what controller is it?02:08
clustysrcsas18e02:09
qman__misaligned blocks on 4k sectors could cause that, but there's likely something else going on here02:09
clustyi did not align anything02:09
qman__could cause slowdown, that is02:09
qman__and what kind of disks?02:09
clusty7200 32mb cache disks02:09
clusty1tb02:09
clustymiddle of the road02:10
qman__WD, seagate, samsung? RAID class or consumer? WD Greens?02:10
clustywd consumer black02:10
clustyone i managed to kill tLER02:10
clustyother 3 were to new :(02:10
clustykill=enable02:10
clustyqman__: so you think alligning would help a lot?02:11
qman__it would improve performance certainly, but I don't think it's what's causing the whole machine to choke like that02:12
ryoohkiqman__: do i comment out the "start on started" or change it to something like "start on manually" ???02:12
qman__but only if those disks use 4k sectors02:12
qman__I don't know if they do02:12
clustybtw, do i have to recreate partitions, or just moving them to the right boundary would be enough?02:12
qman__you could probably move them, but I don't know how or what utility to use02:13
clustyparted02:13
clustycan do it02:13
clustyso what do i need to align to?02:13
clusty4KB multiple ?02:13
qman__you want your filesystem's 4k blocks to match up with the 4k sectors, so I guess02:14
ryoohkiqman__: a moment of your time, please02:14
clustyqman__: the stripe size/width don't matter ?02:15
qman__ryoohki, I would comment out the "start on" line(s)02:15
qman__to disable a service02:15
qman__clusty, all the stripes/widths I know of would be multiples of 4k02:15
qman__64k, 128k02:15
ryoohkiqman__: thanks!02:15
qman__so they should be fine, unless the controller is reserving an amount of space before your filesystem that is not a multiple of 4k02:16
clustyqman__: they are indeed. 256kb x302:16
clustyi can waste space02:16
qman__the thing is, most things are multiples of 4k, and most filesystems already use 4k blocks02:17
clustyi am not gonna cry over 4kB-1 B :D02:17
qman__the only problem arises when something reserves an amount of space that isn't a multiple of 4k02:17
qman__such as the MBR02:17
clustydo extended partitions eat a non multiple of 4 ?02:17
qman__so your system has to be intelligent enough to slide it to the 4k sectors02:18
qman__that, I don't know enough about02:18
qman__wikipedia should be some help there02:18
clustythanks for the hint. i will look at that02:18
qman__but again, that shouldn't be system crippling02:19
qman__it'd cause notable slowdown02:19
qman__but it wouldn't be hanging your box02:19
qman__unless the controller is doing something stupid02:19
qman__absolute worst case scenario, each disk is doing three times the number of reads/writes they would otherwise need02:21
qman__I've got older systems with disks that can't even manage 30MB/s that run just fine02:26
uvirtbotNew bug: #619004 in clamav (main) "package clamav-daemon (not installed) failed to install/upgrade: sub-processo script post-installation instalado retornou estado de saída de erro 1" [Undecided,New] https://launchpad.net/bugs/61900402:31
asanir22hello, is it possible to choose kernel during Ubuntu server installation process?02:34
asanir22Is it possible to choose or change default kernel during ubuntu server installation process?02:37
rasenganAnyone have any good ideas on measuring PPTP traffic?02:38
rasengan(bandwidth)02:38
clustyqman__: running now a long iozone to see really what sort of bottlenecks are there02:45
asanir22anyone know how to choose kernel during "expert mode" installation?02:47
asanir22anyone know how to choose kernel during "expert mode" installation?02:50
clustyqman__: i have seen this also on another work PC02:52
clustywith a raid02:52
clustythat heavy DB access makes it so unresponsive it stops pinging for a short while02:52
asanir22anyone know how to manually choose kernel during "expert mode" installation? (sure it's possible)02:55
clustyasanir22: do you stutter ?02:59
asanir22clusty, what do you mean by stutter?03:01
asanir22nobody replies!03:05
clustyasanir22: that can mean 2 things: ppl don't know, or they don't like you. either way asking every 5 min won't change jacl schitt03:20
asanir22sorry clusty, i was not aware of discipline here03:23
qman__this channel moves a lot slower than #ubuntu, patience is important here03:25
qman__as for your question, I don't know if that's possible03:26
robertpaynethere an easy way to see top like 10 processes by memory usage?03:31
qman__robertpayne, certainly, see `man top`03:38
qman__there's probably also a way to do it with ps03:40
clustyi prefer htop03:46
clustyit's a candy filled version of top03:46
shebalomai have gest xp system running i was woundering how to enable 3d for the virt video card04:23
clustyshebaloma: virtual box ?04:49
YankDownUnderto the bloke asking about 10 top processes: I've just used a conky-cli customised rc that does basically that - and I've got it to show me some other important things via the server's console...05:49
SpamapSps auxw O r | tail -n 1005:58
SpamapSshows top 10 (albeit, in ascending order)05:58
=== freeflyi1g is now known as freeflying
g0rd0ni have a little problem with ubuntu on my server... basically the server has a remote video redirection, which works fine with 8.04 lts, but then i upgraded to 10.04 and now, at some point during boot, ubuntu changes font or resolution or something, and all i see in my video redirection console is garbage... is there a way i can fix that?08:27
=== rmk_ is now known as rmk
blue-frogtrying to restrict login hours for the user "test". Added   ssh;*;test;Al0900-1000    to /etc/security/time.conf  and added    account requisite pam_time.so  in /etc/pam.d/common-account  (I also tried in /etc/pam.d/login). I even rebooted the computer afterwards. The user "test" can still ssh while the time restriction should occur. What am I missing?08:39
qman__g0rd0n, when booting, enter grub, and manually edit the boot line to include "modeset=0"08:40
g0rd0nok, i guess i can set that in menu.lst as well08:40
qman__I've run into a lot of problems with the changes myself08:41
uvirtbotNew bug: #619064 in openldap (main) "package slapd 2.4.21-0ubuntu5.3 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/61906408:41
g0rd0ni tested debian 5 -> 6 and have even more problems there08:41
qman__that should get you booting to a normal terminal08:41
g0rd0nmachine won't even boot08:41
g0rd0nbut i think im gonna settle on 10.04 and do things with kvm08:42
blue-frog*;*;test;!Al0900-1000  works  but   ssh;*;test;!Al0900-1000  does not (meaning test can ssh).  An idea?08:54
blue-frogssh* is the key09:11
qman__while I don't know anything about that system, I would assume that * means allow any type of login, where ssh would only allow ssh09:15
g0rd0nis it advisable to convert ext3 to ext4 on an ubuntu 10.04 system?09:17
qman__only if you think you'll benefit from the performance gains09:19
qman__there are still some bugs surfacing with ext4, some trivial, some rather nasty09:19
blue-frogqman__, that's because we have /etc/pam.d/sshd  so ssh* works as sshd does. this I understand now09:19
g0rd0nok then ill wait :P09:26
g0rd0ni dont want a nasty server09:27
qman__it's considered stable, but unless you stand to benefit greatly, I would just stick with ext309:28
PragatAfter configure cloud computing in ubuntu. I am unable to access frontend server with https://ipaddress:8443 in our proxy network..... How i can change ssl port09:29
chalcedonyi hate to look so stupid but i am stupid. my son set up mail on his server somewhere else, and he just told me that i have to copy it off there,     i don't know how?09:32
chalcedonyi think his server is ubuntu, i know my box is and the one i want to copy it to is ubuntu 10.0409:33
kuttan_How can I have dom0/pvops kernel form 10.04 thanks10:06
kuttan_where can I donwload those debs ( dom0/pvops kernel )10:06
twbkuttan_: I believe Xen dom0 kernels are apt-gettable from the main archive.10:08
xperiahello to all. i have a question related to proxys. i need to have a transparent fast proxy with the possibility to skip/filter special html tags if a php page is called. Does exist something like that ?10:09
kuttan_twb thx for reply, but I can't see anything for lucid ( 10.04 )10:10
twbkuttan_: is universe enabled?10:10
kuttan_yes10:10
twbHm.10:11
kuttan_twb linux-image-virtual , is domU ( guest ) only . am I right10:13
twbLast time I looked, all kernels were domU capable as at lucid10:14
twbAnd you're right, I can't see a dom0-enabled kernel package...10:14
kuttan_I shifted from centos/rhel to ubuntu .. missing dom0 :(10:15
twbI don't use xen myself, so I don't know if that's because it's no longer necessary, or because Ubuntu have dropped dom0 support10:15
kuttan_twb Yup looks like that10:16
twbhttp://osdir.com/ml/kernel-team/2010-01/msg00000.html (random google hit)10:18
twbI suppose you could use hardy as the dom010:19
kuttan_thanks let me check hardy repo .10:19
twbHardy has dom0 packages10:19
kuttan_okay10:27
bokiis there an easy way to include some html on every page that apache spits out? (thats is htm, php, everything)10:51
joschiboki: libapache2-mod-layout http://www.musc.edu/webserver/mod_layout.html10:54
bokijoschi, great!10:55
bokiuhmm, whats the correct way to install apache mods?11:08
alex88apt-get install libapache2-mods11:08
alex88btw, i've problems with ssh, i've set the single ip to listen and syslog says "init: ssh main process (23654) terminated with status 255" because the network is not initialized, how can i posticipe the ssh start?11:09
g0rd0nam curious to see if my method of upgrading from 8.04 to 10.04 is correct: 1. modify /etc/apt/sources.list 2. aptitude update 3. aptitude install aptitude 4. aptitude safe-upgrade 5. aptitude dist-upgrade 6. reboot11:10
alex88g0rd0n: not really11:11
alex88g0rd0n: https://help.ubuntu.com/community/LucidUpgrades#Network%20Upgrade%20for%20Ubuntu%20Servers%20(Recommended)11:11
g0rd0nlol thank you11:12
g0rd0nuh thats even easier than my way, nice11:13
alex88yep :)11:13
alex88and for sure more compatible insted of editing sources.list11:13
g0rd0nyeh11:15
g0rd0nalthough i have a fresh minimal install, but it cant harm to do things properly :p11:15
xamparthttp://codepad.org/a5cFk17e should this configuration work concerning smtp? i want to accept smtp from those 3 ip's11:18
bokihow can i figure out why a certain mod is not working?11:33
g0rd0nshit11:35
psteynI'm using 2x Apache servers mounting their document root's from a NFS server.  I notice very high load on both apache servers, but low cpu usage...is this normal with NFS clients?11:35
g0rd0nnow i wish i hadnt upgraded to grub211:35
g0rd0nlol11:35
psteynI'm using dedicated gigabit nics for the nfs shares/server11:35
g0rd0ncan i format /boot on a running system? and if yes, how can i format it so that the first sector starts at 63? seems to be a requirement for grub2...11:44
xampart\j #grub11:49
xamparti got good help there11:49
g0rd0nxampart: thanks11:54
bokihow can i figure out why the content that should display with mod_layout is not showing up? (apache gave no errors on startup)12:03
Roxyhart0hi, somebody know if there are someway to use rsync without promt the password? I can use password-file as my connection use ssh (the accounts for user are ldap/pam and login to their own folders) so i cant also use private key for that. any idea?12:07
twbI'm guessing it's because of the errors.12:10
giovaniRoxyhart0: you'd need to explain in more detail what exactly you're rsyning, because you've mentioned useds and their own folders and that doesn't explain why a private key can't be used12:18
Roxyhart0becauseand i have 100 users and 100 computers, so i dont want create a private key for each user in each machine???12:19
Roxyhart0I am doing a scrip to backup clients machine from each user in the server each12:20
Roxyhart0hour with rsync and i dont know how dont promt the password..the users account are ldap accounts12:21
Roxyhart0and they shoudl copy the data in the folder that just each one have permision (each user have his pwn folder which permision just to him)12:22
xampartsounds nice12:23
=== e-jat is now known as ejat
Roxyhart0o i can do perfectly but it promt the password and i would like to avoid it as is a script running with cron...any idea?12:27
alex88boki: look at server error log, check if it's enabled via a2enmod12:29
bokialex88, it is, nothing in logs12:29
alex88what mod?12:29
rawler_does anyone here have experience setting up Ubuntu as a Kerberized SSH-server?12:30
rawler_that is, support full SSO, with Kerberos not only as PAM backend, but actual Kerberized authentication directly in SSH?12:30
rawler_i'm about to pull my hair out..12:31
alex88rawler_: http://www.pdc.kth.se/resources/software/login-1/linux/ssh-with-kerberos-gssapi-on-ubuntu like this?12:31
alex88rawler_: also https://help.ubuntu.com/community/SSH/OpenSSH/Advanced?action=show&redirect=AdvancedOpenSSH12:32
alex88rawler_: last page12:33
alex8813:24 -!- paulws [~paulws@166.205.139.167] has joined #ubuntu-server12:33
alex8813:25 -!- e-jat is now known as ejat12:33
alex88sorry12:33
alex88http://developer.novell.com/wiki/index.php/HOWTO:_Configure_Ubuntu_for_Active_Directory_Authentication12:33
rawler_alex88: is heimdal-client fully compatible with mit-server?12:34
alex88rawler_: dunno, try..i've just linked tutorials that seems to be fine...12:34
rawler_alex88: well, I've already found those through google..12:35
alex88rawler_: oh sorry.12:35
rawler_I haven't tried the heimdal client yet, since our previous CentOS hosting environment runs MIT-kerberos, and I want to avoid spurious compatibility-errors..12:36
leniosanyone with experience with incremental backup of mysql? does every 5 min sound doable with a full backup each day?12:47
leniosftp backup, i'm wondering if servers can handle that12:48
twbhttp://mywiki.wooledge.org/FtpMustDie12:50
Roxyhart0lenios, injust test rsync and is great!!12:50
leniosno rsync12:50
leniostar/zip + crypt + ftp12:51
leniosbackup server is a remote ftp server12:52
twbAnyway, you can't make an incremental backup of mysql files12:53
twbThey're not coherent when mysql is running -- you have to either stop mysql for the backup run, or tell mysql to generate a dump (basically a huge .sql file)12:53
zash(and the .sql file will have broken charset)12:53
twbYeah, well, mysql is inherently brain-damaged12:54
twbAFAICT if sqlite is for rapid-deployment of toys and postgres is for production, there's not anywhere in between where mysql is a good idea12:54
lenioscan't i make a sql query and put that in a file?12:54
twblenios: sure you can, but it's not going to be useful12:55
leniosit's only for a few tables, not the entire database12:55
twbzash: we should convince all those PHP dweebs to store data in slapd instead of mysql12:56
twb"after all, it's an object database -- no need for an ORM!!1!"12:56
leniosby the way, i'm using java with hibernate12:56
lenioshow would postgresql be better for backups?12:58
alex88hi twb12:59
leniosoh, postgre has a PITR13:00
zashtwb: no! text files is most awesome!! ;)13:41
=== MTeck is now known as MTecknology
g0rd0nis there a way to make a non-graphical install? the video redirection of my server delivers garbage past the first install screen13:44
zashg0rd0n: there's a graphical server install? :O13:44
zashg0rd0n: do you want a text based, or a fully automated installer?13:44
g0rd0nzash: text-based... well you are right, it's not graphic... but somehow i still have problems13:47
g0rd0nodd...13:47
g0rd0ni see lots of vertical stripes... i tried with nomodeset but no luck with that eitehr13:49
twbzash: the lucid server install media FORCE framebuffer on systems that have video cards13:51
twbzash: you can opt-out of that on installed systems, but not on the install media (due to a bug).13:52
zash:(13:52
twbg0rd0n: you either need to type blind, or pull out the graphics card and do the install over the serial port, or preseed the entire install, or install hardy and upgrade to lucid afterward13:52
g0rd0nserial port... interesting, i will try to connect to the serial console and see if i can do there13:53
patdk-wktwb, what about a net-install?13:53
twbg0rd0n: oh, sorry, if you're installing over serial you'll need to roll your own install medium (e.g. PXE boot).13:53
patdk-wkI had problems with graphics mode once I installed, but not during the install, but I use net-install13:53
twbpatdk-wk: all my installs are PXE-based.13:54
patdk-wkmine are pxe too13:54
g0rd0ni have no possibility of influencing PXE, i just can mount ISO files remotely and boot from them13:54
twbg0rd0n: yeah, I spoke to someone else with the same kind of funky remote access13:55
twbg0rd0n: I think you're totally fucked13:55
g0rd0nlol13:55
patdk-wkroll your own net-install iso? :)13:55
twbOh, another way would be to boot whatever's on there, and write the boot media directly onto /dev/sda, then reboot off the hard disk.13:55
twbThat's heaps of fun, because if mess up the install you can't reboot to get back to the installer, because you've just blown away /dev/sda13:56
patdk-wktwb, he can use any other iso image to boot to though, to fix it :)13:57
twbIf only everything was running coreboot and we just had "target scsi" style AoE installs...13:57
twbpatdk-wk: I guess13:57
g0rd0npatdk-wk: is there a howto for creating the net install iso? couldnt find an official one13:58
patdk-wkg0rd0n, that would be why I said, roll your own14:02
patdk-wkI dunno if these would help or not: https://help.ubuntu.com/community/Installation/MinimalCD14:02
twbStrictly, the *minimum* you need to install is the d-i kernel and ramdisk, and a bootloader to load them into memory14:06
twbhttp://archive.ubuntu.com/ubuntu/dists/lucid/main/installer-amd64/current/images/netboot/14:08
twbe.g. curl .../boot.img.gz | gunzip -c >/dev/sda14:08
g0rd0ni think im gonna go with 8.04 and upgrade it as i did before, avoiding to upgrade grub2 :P14:09
prodigelhi all. I have a simple set of iptables rules that should monitor and log into mysql - using ulogd - connections from and to the server. The problem is that the first ulogd mysql connection triggers a recursive set of connections that block my mysql server. How can I make such a rule to prevent ulogd localhost mysql connections from being logged?14:11
twbprodigel: so, don't log connections to mysql?14:19
twbe.g. -A LOG -i lo -j RETURN; -A LOG -j [whatever]14:20
prodigeltwb,  I've tried something like this: http://pastebin.com/xFnD49RE with no luck.14:20
prodigeltwb, those are all the iptables rules14:21
twbSorry, ICBF helping further.  Try #netfilter.14:22
=== dendro-afk is now known as dendrobates
prodigeltwb, is this the real meaning? http://www.urbandictionary.com/define.php?term=icbf14:27
patdk-wkprodigel, why don't you try something sane, like limiting the amount of ulogs per rule14:29
prodigelpatdk-wk, do you think that would be useful for firewall monitoring?14:29
patdk-wkmaybe you should think about this some more14:30
patdk-wkis it really interesting to know that someone connected to mysql 1000 times per second? vs 100times?14:30
patdk-wkeven syslog stops logging dups14:31
mathiazhggdh: hi!14:33
mathiazhggdh: how is UEC testing going on 10.04.1?14:34
uvirtbotNew bug: #619224 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.1 failed to install/upgrade: sub-processo script post-installation instalado retornou estado de saída de erro 1" [Undecided,New] https://launchpad.net/bugs/61922414:36
hggdhmathiaz: all-in-one done and gone, having some issues on topo2 (all distributed)14:38
mathiazhggdh: related to 10.04.1 or hardware related?14:48
hggdhmathiaz: all ssh calls to instances fail on a ping (no response)14:52
hggdhmathiaz: sorry. before SSHing, I ping the instance. All pings are getting no response14:52
mathiazkirkland: ^^ - could you help out on the 10.04.1 UEC testing front?14:52
kirklandmathiaz: hi there14:53
kirklandmathiaz: sure, will do14:53
mathiazhggdh: and in the all-in-one setup it works correctly?14:53
mathiazhggdh: can you ping the NC from the CC?14:53
mathiazhggdh: rather14:53
mathiazhggdh: can you ping the CC from the CLC?14:54
hggdhmathiaz: yes, the all-in-one worked14:55
mathiazhggdh: ok - so it's probably a routing issue between the CLC and the CC14:56
hggdhmathiaz: and the CC is pingable from the CLC14:56
hggdhmathiaz: sounds like routing, yes14:56
mathiazhggdh: from the CC can you ping the private IP of the instance?14:56
hggdhmathiaz: yes14:57
mathiazhggdh: on the CC, is there an interface define for the publich IP of the instance?14:58
mathiazhggdh: can you ping the public IP of the instance from the CC?14:58
hggdhmathiaz: for the CC interfaces: yes, see http://pastebin.ubuntu.com/479421/15:01
mathiazhggdh: and a ping 10.55.55.101 from the CLC doesn't work?15:01
hggdhmathiaz: it does not. Interestingly, .101 is an active instance15:03
mathiazhggdh: I'd check the routing table on the CLC15:03
mathiazhggdh: I'd also start a tcpdump on the CC to see if there are any packets related to 10.55.55.10115:03
hggdhmathiaz: yes, I was going to get it now15:04
g0rd0ni see LVM is selected by default now in the installer, but is it really useful on a dedicated server?15:09
_rubensure, why not?15:11
=== dendrobates is now known as dendro-afk
twbDefine "dedicated"15:15
=== dendro-afk is now known as dendrobates
phidahI tried logging in to my server via SFTP, but the login credentials were denied. Is there anything I have to enable?15:18
TeTeTkirkland: hi there, can you enlighten me how the pre-seeding of nodes is done in eucalyptus? E.g. where is the user name and password for the nodes stored on the front end?15:21
g0rd0ntwb: root server, two hard disks, software raid115:21
twbThen I fail to see why you WOULDN'T put LVM on15:22
twbphidah: the failure will be explained in auth.log on the server.15:22
twbphidah: by design, detailed failure information is not disclosed to the client.15:22
g0rd0nheh i think i never used lvm15:23
TeTeTkirkland: I see /etc/eucalyptus/preseed/, but it's empty - maybe because it is a packaged install?15:23
twbg0rd0n: just wait until a cron job files /var/log or /var/tmp and you start losing mail from /var/spool/postfix15:23
twbs/files/fills/15:23
phidahok since I tail -f'ed the auth.log I see the same host hammering the ssh trying to log in as root...15:24
phidahDo I just ignore that or...?15:24
_rubenuse fail2ban for instance to block such attempts15:25
twbphidah: well, I would install firewall rules that -j TARPIT all packets from any host that makes more than three connection attempts in a sixty-second interval.15:25
twbI don't like fail2ban and friends because even when they correctly uses -m set, it's still relying on a userspace process instead of in-kernel counters.15:25
phidahtwb: okay. do you have an application that does that for me correctly?15:26
phidahor should it be done manually?15:26
twbphidah: er, it's a sequence of iptables rules, not an application.15:26
phidahI know but wouldn't it be best to have some kind of automated procedure?15:27
twbWhat I'm proposing is a static set of rules15:27
twbThe "procedure" would be to write an /etc/iptab that's sane, then leave it alone forever15:27
phidahWhat would the rule be like to block after say 5 attempts within 1 minute?15:28
twbThe downside of the approach is that it assumes you already have a clue wrt. iptables best practices, which few people do.15:28
twbphidah: yes.15:29
phidahWell I tried a bit of iptables before but it scares the heck out of me15:29
twbphidah: in which use something like denyhosts/fail2ban/whatever; you're less likely to blow your foot off15:30
twb*in which case15:30
Omahnzul: ping15:41
zulOmahn: pong15:41
Omahnzul: Hello! I've just pushed a branch up to LP that provides upstart scripts for the nis package. ttx has previously pointed me in your direction as a suitable person to give it a check over.15:42
Omahnzul: Is it too late anyway for maverick given that I've missed the feature freeze?15:42
zulOmahn: cool ill have a look when i can15:42
zulOmahn: it shouldnt be15:43
Omahnzul: https://bugs.launchpad.net/ubuntu/+source/nis/+bug/56975715:43
uvirtbotLaunchpad bug 569757 in nis "NIS upstart dependancy broken for lucid" [Wishlist,Confirmed]15:43
hggdhGAAHHHHH15:44
Omahnzul: We've been using it here on Lucid in production for a couple of months now without any (known!) issues but I'm not sure how I should be coping with upgrades/etc in the post/pre etc scripts.15:44
hggdhmathiaz: typo in an euca command15:44
* hggdh fumes15:44
zulOmahn:cool ill take a look15:44
Omahnzul: Thanks, much appreciated.15:44
=== jj-afk is now known as jjohansen
kirklandTeTeT: sorry, i'm a bit overcommitted at the moment to handle that explanation15:46
kirklandTeTeT: there are no username/passwords transferred via UEC preseed15:46
kirklandTeTeT: rather the username is eucalyptus, and the necessary public key is installed15:46
kirklandmathiaz: okay, i'm off of the last phone call, can focus on some ISO testing now15:46
TeTeTkirkland: ok, sorry to bother you in stressful times, I just saw "d-ipasswd/usernamestring ubuntu" in the preseed15:47
kirklandTeTeT: huh?  where?15:48
kirklandTeTeT: i'm definitely not following your request, then15:48
TeTeTkirkland: https://pastebin.canonical.com/35930/ from /etc/eucalyptus/preseed/ from neem, training cloud front-end15:48
TeTeTkirkland: line 29, but please forget it if you need to do other work now, nevermind!15:48
hggdhTeTeT: this is setting the userId to SSH to15:49
hggdhTeTeT: 'eucalyptus' is the reserved username for the Eucalyptus pacakge run-time15:50
TeTeThggdh: I see the eucalyptus ssh key and user in eucalyptus-common section\15:51
phidahIs there any groups that users per default should be member of in order to be able to do port forwarding?15:52
hggdhTeTeT: yes, this is correct. Eucalyptus exchanges internal data between the components15:53
hggdhTeTeT: I am sorry, I just got back here. Could you re-state your issue (so that we will be talking about the same thing)?15:53
TeTeThggdh: I wonder how the user/password synchronisation between the front-end and nodes happens when using CD based install of UEC. Especially I wonder what happens if I change the password later on the front-end15:54
TeTeThggdh: would new nodes still get the old password or get a new one?15:54
hggdhTeTeT: what user/password are you talking about? If it is the user in the instance... there is just one, 'ubuntu', and it does not have a password15:57
hggdhTeTeT: if it is the 'eucalyptus' userId, this is reserverd for Eucalyptus usage, nobody should ever log in as it15:57
hggdhTeTeT: in this case, it does not matter *what* would be the password, anyway, since Eucalyptus does SSH via public key15:58
TeTeThggdh: I was refering to the user on the node controller, for example 'ubuntu'16:00
TeTeTor student16:00
hggdhTeTeT: this instance userId is fixed on 'ubuntu'; we do not provide a password to it, users are expected to SSH in with public-key authentication16:08
hggdhTeTeT: so, even if the user changes (i.e., *sets*) a password for 'ubuntu', it would not get to be used16:09
hggdhnormally16:09
TeTeThggdh: hmm, is /etc/eucalyptus/preseed for the instances? I thought it is used for the node controllers that connect to the front-end?16:10
hggdhTeTeT: yes indeed. There should not be an 'ubuntu' user there16:12
hggdhTeTeT: in this case the userId inherited is the 'eucalyptus' account. There is no password associated with it16:13
TeTeThggdh: can you confirm that the node has the same user and password as the front end? I haven't done a CD based install in ages16:14
hggdhTeTeT: every NC installed inherits the 'eucalyptus' userId (and the public key into ~/.ssh/authorised_keys). There is *NO* password associated with this Id16:15
hggdhTeTeT: actually, the 'eucalyptus' userId is a system Id (uid=121); what is actually passed is the CC's public key16:16
TeTeThggdh: so the admin user entered in the front-end install dialogue is never passed on to the node?16:16
hggdhTeTeT: well, now...16:20
hggdhTeTeT: good Q. Now I am unsure. I will do an install from CD, fully manual, and test16:21
TeTeThggdh: ok, was just thinking to do the same16:22
hggdhTeTeT: any install has to have an admin user, so one would have to be created. I am not sure the 'ubuntu' would be used16:24
slahi there, does anyone know if 10.04.1 iso's will be released today?16:38
jpdssla: It's expected to be today, yes.16:42
slajpds: tnx, time unknown i gues? kind of waiting ;-)16:42
kirklandhggdh: ping16:45
kirklandhggdh: mathiaz says you might need some help testing 10.04.1 candidates?16:45
kirklandhggdh: i'm here to help16:45
kirklandhggdh: just tell me what you need16:45
jpdssla: Things like this are really: "When it's ready".16:46
slajpds: ic, tnx!16:46
slajpds: is this also a place where it will be announced or should i just press f5 once in a while on http://releases.ubuntu.com/10.04/ ?16:55
jpdssla: nl.releases.ubuntu.com16:55
slajpds: ok, super ;-)16:56
hggdhkirkland: soorry, on a call up to now17:01
hggdhkirkland: I found the issue -- between the chair and keyboard :-( A change to the bloody test script was wrong, so all tests failed (I wrote 'iccp' instead of 'icmp'17:02
kirklandhggdh: doh17:02
hggdhkirkland: so life if good again. Just a bit balder17:03
kirklandhggdh: okay, do you need anything from me at this point?17:03
hggdhkirkland: well, since you so kindly offer... yes. There is r1231 on Eucalyptus, but I am unsure how to package it in17:03
hggdh:-)17:03
kirklandhggdh: let me look17:04
kirklandhggdh: okay, i'm working on it17:08
hggdhkirkland: later on I would like to know what I should do to package them, if you do not mind17:16
kirklandhggdh: sure;  i'm working on that now17:17
kirklandhggdh: i should have a script/doc for you by then17:17
hallynso i've got a bzr branch that i had proposed for merge, and the relevant commits were in fact merged into lucid-proposed.  But the tree is still listed as pending merge.  Shoudl I cancel the merge request, or leave that until it gets from lucid-proposed into lucid-updates?17:27
hallynoops, meant to ask on ubuntu-devel17:28
alex88hi guys..how can i start openssh server later then normal on boot?17:37
hallynalex88: edit /etc/init/ssh.conf17:41
=== sla is now known as sla_
=== sla_ is now known as sla
alex88hallyn: where?17:50
alex88i mean, what should i change?17:50
sorenalex88: Why do you want it to start later?17:51
alex88because it runs before network, i'm on a vps, and i've set to listen to single ip, and the ip is set later17:51
alex88so it says error 255 and it not start17:52
hallynalex88: hook whatever you want to wait on into the 'pre-start script' section17:52
hallyni.e., 'while [ ! -f /var/run/network-started ]; do : ; done ]' or something17:52
alex88hallyn: insert a sleep command there?17:52
hallynsure17:52
alex88thank you17:53
sorenalex88: Even better:17:53
sorenalex88: change /etc/init/ssh.conf to read: start on net-device-up INTERFACE=eth017:54
sorenSo when eth0 is up, upstart will automatically start ssh.17:54
alex88soren: wait a sec, i'll post my syslog17:55
alex88http://pastebin.com/Ua2WVEwy for this vps i have venet0:0 and venet0:1 as public ip, venet0 has 127.0.0.117:56
sorenYikes.17:57
sorenWhy not have 127.0.0.1 on lo?17:57
alex88vps... http://pastebin.com/rNWPpLYq this is ifconfig17:59
kirklandhggdh: okay, eucalyptus_2.0~bzr1231-0ubuntu1_source.changes uploaded to Maverick18:04
alex88soren: as you can see i have on both lo and venet'018:05
sorenalex88: and you think the time ssh is started is your biggest problem? :D18:07
kirklandhggdh: i'm testing locally here18:12
Italian_PlumberI love how  easy it is to install a GUI on a server18:13
mdlueckI am considering upgrading a 9.04 server to 9.10 / 10.04 maybe today... have one Q. Should I run the upgrade from the server console, or is via SSH fine? Will the upgrade process kill the SSH daemon and thus disconnect my session?18:14
Italian_Plumberrunning updates over SSH is best accomplished using the "screen" utility18:15
Italian_Plumberthat way if you get disconnected the process continues18:15
Italian_Plumberthere are probably other ways too18:15
mdlueckI have not heard of "screen" except on windows of course. ;-)18:15
Italian_Plumberscreen is an awesome utility... you type "screen"18:16
Italian_Plumberthen it will create the screen "session".18:16
Italian_Plumberyou can type "CtrlA, D" to get out of the session, but it's still running.18:16
Italian_Plumberyou type "screen -r" to get back to it18:16
Italian_Plumberthat's a simple example.18:16
Italian_Plumbersudo apt-get install screen18:17
mdlueckI issue that on the remote server, or before I start the ssh session from my Ubuntu workstation?18:17
Italian_Plumberon the remote server18:17
mdlueckOK18:17
mdlueckI will check into that, thanks!18:17
Italian_Plumberotherwiste the screen is running on your workstation, so you would still have problems if you were disconnected.18:18
Italian_Plumberread up on screen...it has lots of options18:18
mdlueckI was thinking perhaps it was an alternative to SSH18:18
Italian_Plumberit's not...18:18
Italian_Plumberyou would ssh to your remote machine, then type "screen"...18:18
mdlueck(me knods)18:19
Italian_Plumberyou could also start the screen if you were logged into that remote machine's console, then unattach from the screen and log out.... then go to where you are now, ssh, and re-attach to that same screen18:20
Italian_Plumberyou would join your regularly scheduled screen, already in progress.18:20
mdlueckcool18:20
mdlueck"saved sessions" for Linux term18:21
Italian_PlumberI use screen in conjunction with rtorrent18:21
Italian_PlumberI'm constantly unattaching and logging out, then logging in from a different location and re-attaching.18:21
Italian_Plumberyou can also log  and save the output of the screen.18:22
RoyKscreen is a nice tool :)18:23
RoyKctrl+a c to create a new screen etc18:24
RoyKman screen18:24
Italian_PlumberRoyK, what other features do you use?18:24
mathiazhggdh: kirkland: so 10.04.1 UEC testing is completed and successful?18:24
kirklandmathiaz: hggdh said that the problem he saw earlier was due to a typo on his part in his testing script18:25
RoyKItalian_Plumber: ctrl+a <esc> to enter copy and scroll mode - use vi commands (ctrl+u/d etc) to scroll18:25
RoyKor just man screen - there's probably more fun in there than I use18:26
Italian_Plumberoh I probably never discovered those features because I despise vi with a passion. :)18:27
alex88mdlueck: check also byobu....nicer thing...18:27
RoyKItalian_Plumber: might be possible to switch to other modes - my advice is to learn vi(m) and use it - it rocks!18:27
Italian_Plumberheh... I understand why I should know vi... I just go out of my way to make sure pico or nano is installed on any machine I use18:29
Italian_Plumberalex88: I've never heard of byobu... what does  that do?18:29
Italian_Plumbervi reminds me too much of FreeBSD. :)18:31
Italian_Plumberif Ubuntu is linux for human beings, FreeBSD is linux for people with too much time on their hands18:32
kirklandItalian_Plumber: http://launchpad.net/byobu18:33
alex88Italian_Plumber: in 10.04 it adds some themes, showing network, ram, disk info and also display opened terminals and activity18:33
kirklandItalian_Plumber: it's a text based window manager, allowing you attach/detach from sessions, and configure a set of notifications about system stats18:34
Italian_Plumberfor machines with a GUI?18:34
hggdhmathiaz: yes, tested completed successfully18:35
mathiazhggdh: great - thanks for the help!18:35
pmatulisanybody use NIS here?18:35
alex88Italian_Plumber: gui and not18:37
alex88is possible that i get 404 for each tracker? how can i check if my isp is blocking that?18:42
RoyKItalian_Plumber: menus belong in restaurants18:44
alex88RoyK: and in windows?18:46
RoyKalex88: yeah, and KDE/Gnome and Aqua and CDE and so on18:48
RoyKbut neither of those belong on a server18:49
alex88oh sure.. :)18:49
alex88any answer to my question? :)18:49
RoyKwhat was that again?18:51
alex88< alex88> is possible that i get 404 for each tracker? how can i check if my isp is blocking that?18:51
RoyKurl?18:51
alex88RoyK: can i pm18:52
RoyKbrb18:52
RoyKb18:53
alex88RoyK: don't know if you've received..can i pm you?18:53
RoyKyes18:54
ssureshotI can't seem to find where the friendly name is set for my reports that are running and being set through php... the friendly name is Website.. I need to change this any ideas?18:54
RoyKssureshot: friendly name??19:06
ssureshotFrom: Website (friendly name) -- email address is correct though19:08
RoyKssureshot: if trying to send email from php, asking on ##php might be better - in short, you want to build an email envelope and then send it19:10
ssureshotRoyK: I'm kinda curious if this a php issue or an MTA issue... I have 2 servers one gento using sendmail (works like it should) and an ubuntu server wtih the same web apps with postfix.. that has the wrong name19:12
RoyKssureshot: I usually start with installing postfix - I'm not really comfortable with exif (the default MTA)19:13
RoyKapt-get install postfix - try again19:13
raubvogelDoes anyone know if syslog-ng 3 will make it to the repositories soon?19:13
ssureshotRoyK: postfix is installed and working, is there an alias I can use for the friendly name?19:14
RoyKssureshot: seems your webapp needs configuring19:14
RoyKssureshot: it probably sets that 'friendly name' and tries to send the email19:14
patdk-wkya, postfix just passes input to output, it doesn't modify anything19:15
patdk-wkunless you attempt to configure masquerade settings or something (I have only done that using sendmail though)19:15
ssureshotroyk: roger that.. I think I might need to research the mail command in php.ini then19:15
RoyKssureshot: nope - the webapp19:15
raubvogelssureshot:  which webapp are you using?19:15
patdk-wkphp.ini only sets that stuff for windows :)19:15
RoyKssureshot: the e-mail envelope is creating it19:16
ssureshotcustom webapps19:16
RoyKwell, create a decent email envelope in it19:16
RoyKit's not up to php to do that19:16
RoyKI guess you can do it in the php settings, but that's rather ugly19:16
ssureshotI will do some research on the envelope then... right on.. thank you both19:17
raubvogelAlso, are you using postfix as a full MTA or just to send out emails?19:17
patdk-wknext question, why are my emails going to spam? :)19:17
raubvogelpatdk-wk: because they like you? ;)19:18
RoyKpatdk-wk: probably because you don't create a decent envelope for them :þ19:18
PupenoHow do I manually trigger the unnatended upgrades? They seem not to be happening.19:18
ssureshotraubvogul: postfix is an internal relay server..19:18
RoyKPupeno: apt-get update && apt-get dist-upgrade19:18
PupenoRoyK: that's not unnatended upgrades, that's the normal upgrades.19:19
RoyKI really don't know how to 'trigger' unattended updates19:19
patdk-wkput, apt-get upgrade && apt-get dist-upgrade && reboot, in cron? :)19:19
jgcampbell300hello, I have spent about a week trying to get openchange server installed on ubuntu and I have been reading today about groupware ... the question i am coming up with is this ... what exactly is the difrence in something like an exchange server and something like Citadel or "groupware" ... from a glance it seems to be doing the same thing19:19
RoyKpatdk-wk: yeah, every hour19:20
jgcampbell300Pupeno: http://serverfault.com/questions/111201/how-to-get-automatic-upgrades-to-work-on-ubuntu-server .... found that on a search19:21
RoyKPupeno: pkgsync can also be nice, but be careful19:21
patdk-wkdunno, I have never used it, my friend does though19:22
raubvogelssureshot: so you mean you are using postfix as a mail relay server19:22
mdlueckItalian_Plumber: screen works slick-O, thanks for suggesting it! Backup done, on to the upgrade! :-)19:23
Italian_Plumberyou're welcome... always glad to hlp19:24
ssureshotraubvogel: correct it's on the local machine that is my internal webserver also...19:25
jcastrohey zul19:25
zuljcastro: hola19:25
jcastrozul: turn on full text feeds in your wordpress so your blogs don't truncate on planet19:25
zuljcastro: yeah i thought I turned that on19:26
jcastronice job on memcached!19:27
zuljcastro: thanks19:30
kirklandhggdh: hey, is auto-registration working for you in Maverick?19:36
kirklandhggdh: it didn't work for me... i had to manually register everything19:36
SpamapSkim0: are you around? can you join us for the server team meeting?19:40
uvirtbotNew bug: #619388 in samba (main) "package samba-common 2:3.3.2-1ubuntu3.5 failed to install/upgrade: el subproceso post-installation script devolvió el código de salida de error 1" [Undecided,New] https://launchpad.net/bugs/61938819:41
hggdhkirkland: it works. Sometimes19:42
hggdhkirkland: sometimes it does not. I have not yet opened a bug on it, low prio for me...19:42
hggdhkirkland: I have found that leaving servers from a previous install running (and with the -publication active) can confuse auto-registration19:43
kirklandhggdh: so you've been manually registering services?19:43
hggdhkirkland: every other install or so, yes19:43
kirklandhggdh: that's annoying19:44
hggdhsounds like a race...19:44
hggdhkirkland: another thing -- the -publication services *usually* do not stop if you 'stop eucalyptus'19:45
hggdhkirkland: and usually do not restart if you 'start eucalyptus'19:45
Italian_Plumberalex88: does byobu install with apt-get?19:46
=== IdleOne is now known as NattyOne
hggdhItalian_Plumber: yes19:46
Italian_PlumberE: Couldn't find package byobu19:46
kirklandhggdh: have you had any trouble bundling/registering images?19:47
hggdhkirkland: no, not there (unless the SC is down)19:47
=== NattyOne is now known as IdleOne
hggdhItalian_Plumber: what Ubuntu version?19:47
Italian_Plumberoh.. could be it... hardy19:47
hggdhItalian_Plumber: yes, I think this is it... I do not think byobu made it to Hardy19:48
Italian_Plumberwhat version does it work on?19:48
hggdhkirkland: new issue?19:48
kirklandItalian_Plumber: it is available for Hardy in the PPA19:48
Italian_Plumberi'm currently working in a vm to test it out... I'd be glad to update to a newer version of ubuntu19:49
kirklandhggdh: yeah, possibly...19:50
hggdhdammit19:51
hggdhkirkland: does hang on bundle/register? If so, I have seen it on an SC down19:57
kirklandhggdh: doesn't hang;  python throws an error19:58
hggdhthat's different indeed20:02
mdlueckItalian_Plumber: Upgrade to 9.10 went very smoothly. Starting the 10.04 upgrade now.20:11
kirklandhggdh: have you seen a CLC think that it's ip address is 169.254.169.254 ?20:11
hggdhkirkland: if this is the output from 'ifconfig', yes20:12
hggdhkirkland: not sure about the final byte, though20:12
=== IdleOne is now known as Narwhal
=== Narwhal is now known as IdleOne
=== IdleOne is now known as Narwhal
=== unreal_ is now known as unreal
=== sla is now known as sla_1
=== sla_1 is now known as sla
=== sla is now known as sla3
=== sla is now known as sla56
mdlueckFrazzle razzle... 9.10 to 10.04 upgrade seemed to go well, via SSH and console, accepts my ID/pw, then goes to la la land... Suggestions please?20:54
mdlueckVery weird, I left the room for a few mins, and when I came back I was logged in. hhhmmm....21:20
kirklandhggdh: okay, i just uploaded eucalyptus_2.0~bzr1231-0ubuntu2_source.changes21:21
kirklandhggdh: i had to re-fix something i fixed before, but i think Daviey dropped the patch during the quilt migration21:21
kirklandhggdh: i'm going talk to upstream21:22
=== nxvl_ is now known as nxvl
smoserhggdh, ping21:29
smosermaverick uec, have you seen functional euca-get-console-output ?21:29
smoseri get empty response, although the node controller's /var/lib/eucalyptus/instances/admin/i-48580863/console.log is popuated21:29
hggdhkirkland: k. Anything I should worry about?21:32
kirklandhggdh: well, i just re-fixed the eth0:169.254.169.254 error21:32
kirklandhggdh: this might be the source of some of the registration problems21:33
hggdhkirkland: ugh. I will download the diff, and rebuild locally, then21:33
kirklandhggdh: it's building now21:33
kirklandhggdh: it'll be built in launchpad in ~10 minutes21:33
hggdhsmoser: I do not really remember -- I *think* yes21:33
hggdhkirkland: I will wait, then21:34
kirklandhggdh: yeah21:34
hggdhsmoser: but I will be able to check in about one hour21:34
kirklandhggdh: here's the good news, though ....21:34
* hggdh perks up21:34
kirklandhggdh: i was able to register all components, run an instance, and ssh to it :-)21:34
kirklandhggdh: that's the first time i have personally done that against euca 2.021:34
hggdhyay!21:34
kirklandhggdh: gives me a bit of confidence21:35
hggdhso there's hope...21:35
hggdhsmoser: what version of euca? this latest rev should have a fix for console output21:36
smoserwhatever kirkland just loaded21:37
mdlueckIn server 10.04, where has /etc/default/grub been moved to this time?21:37
uvirtbotNew bug: #619455 in dovecot (main) "package dovecot-postfix 1:1.2.9-1ubuntu6.1 failed to install/upgrade: подпроцесс установлен сценарий post-removal возвратил код ошибки 1" [Undecided,New] https://launchpad.net/bugs/61945521:41
hggdhsmoser: this is a regression, then21:42
=== unreal_ is now known as unreal
sherrHello - I hope someone can help21:52
sherrI am using Server 10.04 as a KVM host (to Debian Lenny) and I want to make sure the guests are properly shutdown when the host is rebooted. But I can't get it working and the guests always end up killed. This really worries me for production use because FS corruption might happen.21:53
sherrFrom the command line, all the scripts work :21:53
sherrvirsh shutdown <guest> - works21:53
sherrvirsh list - works21:53
sherrBut as a sys-v init script - or an upstart script - virsh doesn't seem to work i.e.21:53
sherrvirsh list -> empty/nothing21:53
sherrvirsh shutdown <guest> -> does nothing21:53
sherrThey don't work in runlevel 6.21:53
sherrSurely people want to shut down guests on a reboot properly (e.g. UEC). How?21:54
sherrMy upstart exec script and output is here : http://pastebin.com/n6rnkVbC21:54
sherrCan anyone help?21:54
=== roda_ is now known as roda
hggdhkirkland: OK, starting to test 0ubuntu222:03
=== nxvl_ is now known as nxvl
hggdhkirkland: when you had registration issues were you running an all-in-one, or distributed?22:33
kirklandhggdh: all in 122:33
hggdhkirkland: no prob here, at least right now, with regs22:35
kirklandhggdh: cool22:36
delimitersherr: install acpid22:40
sherrdelimiter: on the guest? acpid is installed.22:41
delimitersherr: ya, cool22:41
sherrAnd the host has <acpi/> in the XML definition of the guest.22:42
sherrIt works from the command line i.e. virsh list / virsh shutdown guest22:42
sherrWhy does virsh not work from an init/upstart script (runlevel 6)?22:43
delimitersherr: no idea, sorry22:43
sherrThanks anyway.22:43
delimiterrunlevel 6 = reboot22:44
delimiterthat your intention?22:44
sherryes22:44
sherrI want a host reboot to shut down guests cleanly, automatically.22:44
delimiterand killing the kvm procs doesn't trigger a clean shutdown within the guest?22:45
RoAkSoAxkirkland: where can i find the Cloud in your pocket ISO?22:46
sherrdelimiter: Not tried that. But I suspect not. Let me try from the command line ....22:46
kirklandRoAkSoAx: http://blog.dustinkirkland.com/2010/06/cloud-in-your-pocket-uec-liveiso.html22:46
RoAkSoAxkirkland: thanks :)22:47
sherrdelimiter: I did a kill on the KVM pid, guest died. On reboot, I see an EXT3 "recovery required" as usual, so it appears to be an unclean shutdown as far as I can see. As usual.22:49
delimitersherr: that is really bogus, the system (host) should issue a shutdown to each running guest on reboot22:56
alvinsherr: It's being worked on: bug 35093622:57
uvirtbotLaunchpad bug 350936 in libvirt "Should shut down domains on system shutdown" [Low,Triaged] https://launchpad.net/bugs/35093622:57
sherrYes, been banging my head on this all day. It doesn't work using "virsh" in an init script for level 6. Someone else said level 0 doesn;t work either.22:58
alvinIt doesn't work at all yet, but there are some pointers in the bug report. Didn't try them yet.22:58
sherrAh. I did do a search earlier ... let me look.22:58
delimiterwell those aren't your normal "runlevels" either22:58
alvinthere are no runlevels anymore as far as I know22:59
delimiterthat is a very narrow view of the universe :)22:59
alvinlol, could be :-)23:00
sherrThere are runlevel modes in upstart though : start on runlevel [016]23:01
sherrThat's a big bug ... lots to read. I'll take a look further tomorrow and see if I can get anything working.23:01
sherrLike many, this is serious for me. I'm testing test VM's now, but production is a different matter ...23:02
sherrThanks alvin and delimiter.23:03
=== jjohansen is now known as jj-afk
uvirtbotNew bug: #619502 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.41-3ubuntu12 failed to install/upgrade: Package is in a very bad inconsistent state - you should  reinstall it before attempting a removal." [Undecided,New] https://launchpad.net/bugs/61950223:21
SpamapSthat one keeps coming up23:21
SpamapSI wonder if we're packaging a file that gets mucked with by maintainer scripts or something23:21
ruben23guys i have several errors on startu can i hols the screen or pasue the loading is so fast can barely identify the error on a ubuntu server23:22
Crewsr3I'm getting started with EC2 and set up an AMI and install postgre and now I need to connect to the postgre db.  I'm trying to tunnel to it but I'm getting an error.  Does the ubuntu AMI have ssh tunneling locked down and if so how to I open it up?23:27
qman__Crewsr3, by default, SSH tunneling is not locked down23:29
qman__the configuration is in /etc/ssh/sshd_config23:29
Crewsr3I've been looking this file over and set up everything to open this up but I'm still not able to get tunneled into23:31
sbeattieSpamapS: hunh, odd, it looks like some sort of debconf locking issue.23:38
SpamapSCrewsr3: try passing  '-v' to ssh so you get some debugging information (three -v's will give you a ton of debugging)23:40
=== oubiwann-sick is now known as oubiwann
=== oubiwann is now known as oubiwann-away
SpamapSCrewsr3: though unless you've given the user you're using to connect a password, connecting over tcp/ip will be dependent on ident .. which probably won't work.23:41
SpamapSCrewsr3: unless you ssh as root, and forward ident back to your local machine, which you don't want to do on so many levels. ;)23:42
SpamapSCrewsr3: actually I take that back, ident will work if you run a local identd23:42
sbeattieSpamapS: hrm, also looking at dmesg, it appears that XFS is in use; do you have other example bugs, as I'm curious if they're using XFS as well.23:44
sbeattieSpamapS: re bug 619502 that is23:44
uvirtbotLaunchpad bug 619502 in mysql-dfsg-5.1 "package mysql-server-5.1 5.1.41-3ubuntu12 failed to install/upgrade: Package is in a very bad inconsistent state - you should  reinstall it before attempting a removal." [Undecided,New] https://launchpad.net/bugs/61950223:44
SpamapSsbeattie: https://bugs.launchpad.net/ubuntu/+source/mysql-dfsg-5.1 .. I see 6 with a 'bad inconsistent state' mentioned. All invalid or triaged.23:45
sbeattieoh bah, reading the dmesg *for comprehension this time* just shows that something is querying for filesystems, not that xfs is actually used anywhere.23:47
ruben23 guys i have several errors on startu can i hols the screen or pasue the loading is so fast can barely identify the error on a ubuntu server23:51
uvirtbotNew bug: #619520 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.41-3ubuntu12.3 failed to install/upgrade: Package is in a very bad inconsistent state - you should  reinstall it before attempting a removal." [Undecided,New] https://launchpad.net/bugs/61952023:56

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!