[01:17] hey all looking for a little ubuntu installation help [01:25] im trying to set up phpmyadmin on my ubuntu server that im connected to through ssh. the documentation keeps referring to my www fodler but i cant seem to find it.. should i put the phpmyadmin folder in /srv/ ? do i do the same for webpages? === _Techie_ is now known as _TechAway_ [01:42] New bug: #622490 in vm-builder (universe) "VMBuilder.exception.VMBuilderUserError: Must run as root" [Undecided,New] https://launchpad.net/bugs/622490 [02:10] Hi [02:10] I was hoping someone could help me. [02:11] I just installed ubuntu server and installed samba and swat [02:11] how do I launch swat? [02:13] samoangunner: Use a web browser to access it. See https://help.ubuntu.com/community/Swat [02:15] thanx [02:18] do I run swat on the server or on a laptop [02:19] How can I figure out what OS I'm on? [02:22] in terminal type in uname -a [02:23] it will tell what your OS is === _TechAway_ is now known as _Techie_ [03:11] would you say that it is normal for a vm guest (and host) to see relatively high load (and guest acting slow) under ~10-20 mbit datatransfer over ssh? [03:12] Italian_Plumber: mario? [03:13] speaking. :) [03:13] just checking. [03:14] actually, not-really-intending-to-login. :) [03:16] hey guys. I have something that's preventing my server from restarting. Can someone help me pin point it? [03:17] I issue the reboot command as root, and all the normal shutdown messages happen, but the machine itself never restarts [03:19] how far does it go in the reboot process? [03:21] benedikt: sorry. multiple windows on a low res monitor. Please ping me next time. It goes as far as to say *Will now restart [03:21] except it never does [03:27] hmm a bit more info came to light. This problem is on all my servers that have an iscsi initiator. When I shut it down manually before issuing reboot, it can successfully reboot. [03:51] Hi guys, can anyone give me an idea what the deal is with uploading an 8.04 image to an uec clound? I've downloaded th uec image from uec-images.ubuntu.com but it doesn't have a kernel or rambisk image in the package, so when I try and use uec-publish-tarball it fails. Where should I get the ramdisk and kernel images from? Ta Peter. [03:56] argh. I know what happened. The open-iscsi package is in rc6.d is S41, while networking is S35. What the heck guys =/ [03:56] It'll never restart, ever [03:56] I moved networking to S50 and it works fine now [04:11] New bug: #622529 in ipsec-tools (main) "package racoon (not installed) failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/622529 === padhu is now known as Padhu [06:23] can anyone tell me the difference between inetd and xinetd? And why can't I restart inetd when there is a service listed that isn't going? [06:25] fluvvell: xinetd is an advanced alternative to the old bsd inetd. it has more features [06:25] fluvvell: inetd and xinetd only start when the service definitions are ok [06:25] fluvvell: they can't know if it actually starts until someone opens a connection to the respective port [06:26] joschi, yeah well the ports aren't open and they're not accepting connections. The service is listed but unavailable [06:27] fluvvell: post your inetd.conf and relevant log entries [06:28] which log entries do you want ? its " 2000 stream tcp nowait nobody /usr/sbin/tcpd /usr/sbin/nbdrootd /opt/ltsp/images/i386.img " for the relevant line [06:29] Anything running on top of inetd these days is probably wrong. [06:30] twb, why? [06:30] Mainly because it's historical [06:30] fluvvell: 2000 should be a service name from /etc/services IMHO. when in doubt, add one yourself and use that name === alex88[sleep] is now known as alex88 [06:30] I mean, I suppose it'll still WORK [06:31] joschi, its the port I believe. [06:31] inetd lost popularity because it creates a new process on every connection -- similar to traditional CGI. [06:31] fluvvell: yes. but inetd wants to have a textual description from /etc/services [06:32] fluvvell: you also need to correct your command line [06:33] fluvvell: name-from-etc/services stream tcp nowait nobody /usr/sbin/tcpd tcpd /usr/sbin/nbdrootd /opt/ltsp/images/i386.img [06:34] so after editing, how does one restart inetd ? [06:34] twb: it's not wrong using inetd or xinetd for certain services. not every daemon needs to be high performance, connection and process pooling etc. [06:34] fluvvell: yes [06:34] fluvvell: argh, sorry. sudo /etc/init.d/openbsd-inetd restart [06:35] joschi: I suppose so. It's my knee-jerk reaction, though. [06:35] I imagine it sucks when you get twenty classrooms with thirty hosts each all booting up at 9AM [06:36] That would be nice if I had /etc/init.d/openbsd-inetd - Im running ubuntu 10.04 [06:36] fluvvell: it's probably /etc/init/inetd or so. [06:36] (Note: no .d) [06:36] Ah, no thats exactly whats missing and why my system has stopped working!@ [06:36] Hi, can I some how move postfix smtp tmp directory? [06:37] fluvvell: check which inetd implementation you have installed. there's more than one [06:38] incidence: sure. see options ending with "_directory" in postconf(5) (-> http://www.postfix.org/postconf.5.html) [06:38] joschi, yes I'm pretty sure its the openbsd one, I have another server online (not far) that *is* working , and that package is installed [06:38] finally, the port is open! [06:40] joschi: Thanks [06:42] i have access to another computer on my LAN at 192.168.0.99 via SSH. how can i mount it as "/vol" on my local (laptop's) filesystem [06:42] basically i want to work on my desktop with my laptop [06:43] joschi, Thanks from me also - I find that being able to discuss a problem with other people at "server - level" highly invaluable [06:44] quizme_: try sshfs [06:44] The answer was /etc/init.d/openbsd-inetd restart [06:46] Any of you happen to know how I coudl convert DATE_FORMAT(CURDATE(), '%Y%m%d070000') to pgsql? [06:47] joschi thanks i will [06:51] MTecknology: `SELECT CURRENT_DATE + interval '7 hours';` [06:55] joschi: THANKS! [07:32] as far as moving into the networking career field, what is the best distro to work with and get to know? [07:32] I have become decent with ubuntu, but would I be at a loss if a company put me infront of a red hat or centOS? [07:59] fross: well, then install centOS inside a VM and play with it. but if you're into networking, you should make yourself comfortable with IOS, catalyst, JunOS and alike. [08:00] fross: also playing around with different networking daemons like quagga should be on your list. [08:15] hey im trying to connect to a smtp server with my mail client and i get the error STARTTTLS command failed due to local problem [08:15] anyone have any idea what that means? [08:15] am i missing a program? [08:16] hi there guys [08:16] glick: STARTTLS is the signal to enable SSL. [08:16] Check your SSL config [08:17] twb, which ssl config? [08:17] at the server or client? [08:17] i would like to ask, why is example configuration file for ubuntu that is in /usr/share/doc/mysql-server-5.1/example cannot be used ? [08:17] i tried the configuration file my-small.cnf and it is not working [08:18] thesyko: Read the errors in /var/log/daemon.log.2.gz [08:18] btw, i'm using ubuntu 10.04 desktop with mysql 5.1 server [08:18] thesyko: Read the errors in /var/log/daemon.log [08:18] ok [08:18] I don't know. [08:18] If you were using msmtp(1) you could run it with -d to test [08:18] glick: msmtp is an smtp client [08:19] There is no client configuration for starttls, afaik [08:19] so it would be the server configuration [08:20] now i'm using back the default configuration file that comes with mysql 5.1 [08:20] and it works [08:21] Jeeves_: I was thinking something along the lines of the server using a self-signed cert [08:22] joschi: Hey, thanks for the advice. Much appreciated [08:22] http://dpaste.com/232699/ [08:22] thats my main.cf file [08:22] i think ssl is set up correctly [08:22] glick: you're using sendmail? [08:22] no postfix [08:22] Oops, nm [08:23] glick: /var/log/mail.err would probably be able to tell you more [08:24] Jeeves_, there are no error messages [08:24] mail.log isnt much more helpful either [08:27] Try #postfix [09:17] i followed the ubuntu server guide to installing and configuring postfix [09:18] i got certs from go daddy [09:18] yet when when i try to connect to the smtp server using ssl or tls it wont connect [09:18] yet if i connect without ssl it works [09:18] i definately need to use ssl [09:21] glick: there definately should be some log entries about the issue. you can try to increase postfix's verbosity by adding "-v" to the processes in your master.cf (see master(5), http://www.postfix.org/master.5.html) [09:21] glick: also make sure that postfix can read the SSL certificate and the private key files and that these files are correct (e. g. don't use the CSR...) [09:22] joschi, what do you mean dont use the csr? [09:22] glick: you've created a certificate request and sent it to go daddy to get your certificate. [09:22] oh yeah [09:22] glick: don't accidentally use the CSR in your postfix configuration [09:22] no im not using the csr [09:23] i musing the crt and key files [09:35] yayayyyy i finally got it working! [09:35] i am the greatest! [10:46] how can i find out my machines power supply information? [10:55] xampart: /sys/devices/class/BAT0 or so? [10:55] xampart: or lshw [11:18] in postfix sending an email to one of my email addresses gets rejected, i dont understand why [11:18] in my main.cf i have this line which i suspect is to blame [11:19] smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/recipient_access,reject_unauth_destination [11:22] twb: is there a way to confirm that hdd's get enough power? [11:23] I don't know [11:35] is it usual lshw gets stuck [11:41] New bug: #622642 in mailman (main) "package mailman 1:2.1.13-1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/622642 === oubiwann is now known as oubiwann-away === oubiwann-away is now known as oubiwann [12:24] join/ #ubuntu-server [12:24] . plz help me to config my apache2 for perl on ubuntu 10.4.!!!!!!!!!1 [12:24] hi [12:25] plz help me [12:26] just upgraded ubuntu server to 10.4 and seems my mac cannot see any of my samba shares now [12:27] same for windows 7 machines also [12:27] has samba changed again [12:27] plz help me to config my apache2 for perl on ubuntu 10.4.!!!!!!!!! i'm waiting for answering of frineds. [12:28] anyone know why given this config file i cant send an email to customer_support@mydomain [12:28] http://dpaste.com/232768/ [12:29] it comes back as rejected [12:29] code 550 [12:32] glick: Where are you sending from? Where are you sending to? What's the exact error message? Does the user exist? Does DNS work? etc. etc. [12:32] the user exists, dns works, im sending from myaddress@google.com to customer_support@mydomain.com [12:34] You're running http://www.mydomain.com, but you haven't got a working MX? [12:34] That seems hard to believe. [12:34] Somehow. [12:34] no im not running that domain [12:34] lol [12:34] that was a variable [12:34] for my actual domain [12:34] Then stop halfway anonymising your infor. [12:35] Well, so you say. [12:35] My current guess is: You're not using the right domain. [12:36] Anyone knows about Ubuntu elastic cloud? [12:36] also how do I setup ubuntu server to work with my monitor, the default does not work [12:37] I'm wondring how can I install it into one huge machine.. instead of two ones. [12:37] glick: It's simple, really. Your config file saysmyhostname = mail.boss.com [12:37] whoops [12:37] glick: It's simple, really. Your config file says myhostname = mail.boss.com, but you say you're sending to customer_support@mydomain.com. They don't match. You lose. [12:42] cannot even get console on my server via keyboard, HOW DO I CHANGE THE VIDEO DISPLAY [13:22] morning === mathiaz_ is now known as mathiaz [13:29] morning zul [13:31] hey hggdh [13:41] $(*&%$&*%)$& [13:41] saturday i made backups to dmcrypt'ed usb disk. sunday, repartitioned and installed maverick. today, figured i'd recover some config files. of COURSE, maverick wno't mount the backups. [13:42] just as it did when i went from karmic to lucid [13:42] maybe a lucid kvm partition will read them [13:44] ;S [13:44] Daviey: welcome back! [13:45] thanks hallyn o/ [13:46] recon' this means i should find my mumble config info somewhere else so we can scrum in a bit :) [13:55] Why oh why does the landscape client take up 937 megs of virtual memory...... [13:56] (as one example) [13:58] Omahn: resident memory? [13:58] hggdh: About 54. [13:59] hggdh: But it does mean the swap file is pretty much full, just with landscape. [14:04] Omahn: not necessarily. WHat does 'vmstat'show (this will be one single line now)? [14:04] smoser, Are you online yet? [14:04] hggdh: This is a different box, I've turned it off on the other box: [14:05] procs -----------memory---------- ---swap-- -----io---- -system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 2 0 104 170824 85436 357428 0 0 1 8 2 3 4 4 92 0 [14:05] Daviey, here. whats up ? [14:05] and welcome back [14:05] smoser, ta. Wanted to ctach up with you, about the kernel upgrade in euca issue? [14:05] hggdh: That vmstat is from a box only up for 97 days, the other was up nearly 250. [14:06] New bug: #622694 in munin (main) "PC freezes because of munin" [Low,Incomplete] https://launchpad.net/bugs/622694 [14:06] hm..i think that its fine now. you're talking about https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/615529 ? [14:06] Launchpad bug 615529 in eucalyptus "eucalyptus instance reboot fails: Guest moved used index from 0 to 2639" [Medium,Fix released] [14:07] Daviey, ^ [14:07] smoser, Oui [14:08] hggdh: Fresh startup on one of my boxes consumes over 350 megs of virtual memory. Just seems a tad excessive. [14:08] Daviey, i think that realistically, the solutoin i put in place is the right one. [14:09] smoser, Ok.. so you have no concerns at the moment? [14:09] no, not really. [14:09] smoser, Just want to understand if i can remove it from my list of things to watch :) [14:09] awesome, top stuff smoser [14:09] basically i had forgotton that 'boot=on' was important [14:10] ahh [14:10] boot=on is now added somewhere? [14:11] hallyn, Have you spotted bug 622588? [14:11] Launchpad bug 622588 in qemu-kvm "[kvm] pci_add_option_rom: failed to find romfile "pxe-virtio.bin"" [Undecided,New] https://launchpad.net/bugs/622588 [14:11] Omahn: and you can tag this VM to landscape? [14:12] hggdh: By 'tag' do you mean register? [14:13] hallyn: ping....er...nevermind [14:13] hggdh: If so, yes, it's registered. [14:13] Omahn: I mean you are sure this VM usage is from landscape [14:13] hggdh: Absolutely. [14:13] hggdh: Top shows VIRT/SWAP usage for each of the landscape processes. It's also the same across all our servers. [14:14] Daviey: i hadn't yet, no [14:14] hallyn, That could have potential to be a humdinger. [14:15] Daviey: isn't that the error it has always given, as long as i've used kvm in ubuntu? [14:15] it proceeds to work no? [14:16] hallyn, agreed, i've seen that warning lots... but he bug reporter suggests total malfunction. I suspect the error he stated is a red herring. [14:16] Omahn: good enough for a bug, I guess. Could you open one please? [14:16] hallyn, apport being less than helpful :/ [14:17] asking for clarification... [14:17] hallyn, It was actually zul that spotted that bug [14:17] hggdh: Will do. [14:17] hey folks .. we now have a "cloud" forum, and a first question :) http://ubuntuforums.org/showthread.php?t=1558900 [14:18] kim0, oh nioes [14:18] :) [14:18] Who wants the owner of answering the very first question hehe [14:19] hggdh: Looks like a bug already exists. [14:19] https://bugs.launchpad.net/landscape-client/+bug/459243 [14:19] Launchpad bug 459243 in landscape-client "landscape-client consumes too much memory and CPU time" [Low,New] [14:19] kim0, Well volunteered :) [14:19] Yaay [14:20] Daviey: hey there .. shouldn't you be in #ubuntu-cloud as well :) [14:20] kim0, indeed [14:20] jump in [14:23] Omahn: yes indeed, describes your issue. Can you please add data there? [14:24] Omahn: how long the client has been running, mem allocation, etc. [14:24] hggdh: Done. [14:24] hggdh: Ah, it doesn't show startup date. I'll add that. [14:34] I do iscsi-boot. this works fine but the system never does a clean shutdown. It stops open-iscsi to early resulting in ext4 errors (quite logically since the root parition is gone) [14:34] how do I fix this? [14:37] is there a fix for getting a blank screen during boot up of server in 10.4? [14:37] Yeah, roll back to 8.04 [14:37] ... [14:38] If you've managed to install before that happened, you could try blacklisting the fucking KMS drivers [14:40] No need for swearing ... [14:41] Is there anyone who had the same problem as I have? [14:41] Is iscsi-boot an upstart job or traditional init? [14:42] upstart most likely [14:42] rebooting [14:43] eg turned power off and on as it hangs [14:43] Just wondering whether the order or startup/teardown can be modified, so the filesystems are unmounted before iscsi is shutdown/unloaded [14:43] Yeah that would be helpfull [14:44] I don't know if it needs write access to shutdown open-iscsi by the way [14:46] perhaps I'm better off letting it die with the system [14:50] what was the offical way of adding and removing services from runlevels agian? [14:51] update-rc.d [14:51] thanks [14:52] I always confuse it with the gentoo one. rc-update [14:52] update-rc.d doesn't apply to upstart-based jobs, though (AFAIK) [14:57] really I thought it used init's stucture to handle boot order etc [14:57] and what to boot and what not [15:00] Well, guess what, Ubuntu decided they didn't like things working [15:05] Hi! Is there a way to check on the web which packages of 10.04 LTS are considered as "server packages" and hence receive 5 years of support? The "supported software" link on http://www.ubuntu.com/server doesn't work. [15:06] stittel: aptitude tells you nowadays [15:06] I suspect that means it's in the Packages database and you can just use grep-dctrl [15:07] twb: I would like to check before installing Ubuntu, i.e. I am not running Ubuntu yet, so I can't check it with these command. [15:07] Hmm, that's odd, now I can't see it [15:07] stittel: there's also a Python script I was using before. [15:07] ...re grep-dctrl, I guess it's in a secondary database that's only installed on desktops by default. [15:08] stittel: bzr clone http://bazaar.launchpad.net/%7Enijaba/ubuntu-maintenance-check/trunk/ [15:10] twb: As I said, I am not running Ubuntu yet and would like a way to check the packages supported as "server packages" on the web. http://packages.ubuntu.com doesn't seem to provide that information and on http://www.ubuntu.com/server the "supported software" link is dead. [15:11] twb: Isn't there another place to check it? Even a text file containing all "server" packages would make me happy. :) [15:11] stittel: Any server package that's in main. [15:11] New bug: #622742 in bacula (main) "Bacula Storage-daemon dies with segfault if a File-daemon can’t be contacted" [Undecided,New] https://launchpad.net/bugs/622742 [15:11] kim0, what do i win for giving the first answer on forums ? [15:11] stittel: https://help.ubuntu.com/community/ServerFaq#What%20%28packages/repositories%29%20are%20maintained%20%28supported%29? [15:12] smoser: Yaaaay :) [15:12] Ugh - maybe just check here : https://help.ubuntu.com/community/ServerFaq [15:12] smoser: a hug! [15:12] everyone .. please give smoser a hug [15:12] * kim0 hugs smoser [15:12] jpds: It's not always clear to me what is considered a server package or not. For instance, "SpamAssassin" can be run as a daemon or just as client as well es on a desktop for local or on a server for server-based spam filtering. [15:13] I have said it once and I will say it again, apt should not mess with runlevels or start/restart services on its own [15:15] sherr: Well, OK, so it's just these packages http://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.lucid/server-ship because http://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.lucid/supported-common is empty. [15:15] And that also would mean that exim4 is not supported for 5 years, even though it is a server package from main. :-/ [15:16] stittel: yes [15:16] The "five year support" thing is a crock [15:16] twb: Hmm, I think our legal department would dispute that. [15:16] what is the hug : beer conversion rate ? [15:17] stittel: the list you have given looks short [15:17] exim4's 'supported' field claims '5y' [15:18] stittel: it contains less than 440 packages and dapper has support for over 780 - exim4 is one of them [15:18] kklimonda: Then something is wrong, because https://help.ubuntu.com/community/ServerFaq#What%20%28packages/repositories%29%20are%20maintained%20%28supported%29 states "Server packages are maintained for 5 years, and defined as all packages that are part of the the seeds "server-ship" or "supported-common" are supported for five years." [15:18] stittel: http://people.canonical.com/~ubuntu-security/dapper/supported.txt this list may give you an idea of sort what is supported. [15:19] stittel: but I think the only good way of checking support status at this time is to install Ubuntu yourself and run ubuntu-support-status.. [15:20] but then I just got an exception trying to run it on my server :D [15:20] kklimonda: last time I looked that python script I linked to worked [15:20] kklimonda: I could try it on my Ubuntu netbook if "ubuntu-support-status" works without installing the package. [15:21] kklimonda: According to your list some stuff I run like SquirrelMail or SpamAssassin are not supported. [15:21] Uh, actually SquirrelMail is just "universe". [15:21] stittel: that's the problem with this list - it's for dapper and spamassassin was still in universe in dapper [15:23] stittel: got moved to main in jaunty so it's supported for 5 years on lucid [15:23] The "ubuntu-support-status" program just aborts on Lucid for me - "Exception: No date tag found" [15:23] Maybe that script isn't supported [15:23] sherr: yeah, it's reported already [15:25] Thank you everybody! Since a lot of packages (SquirrelMail, SpamAssassin, jabberd, openntpd) don't seem to be supported, I guess I will stick to Debian for the moment, even though I don't like their unpredictable release and support policy. [15:28] stittel: spamassassin is supported (other are not though) [15:29] GAH! a lucid kvm vm can mount the cryptsetup partition on external usb, the maverick host can't [15:29] stittel: you mean "release when it's ready" as opposed to "release when it's not ready" ? ;-) [15:29] * twb glares upstart jobs for NFS [15:31] twb: Well, to know the release date of the next Debian release some time in advance, you need a crystal ball. And security support for the old release is "release date of the new release + 1". That makes the entire thing a bit unpredictable. :) [15:32] stittel: I realize it's a problem [15:32] twb: And if you should choose to install Debian now, you can expect less than 2 or even 1 1/2 years of security support, because the next release can be expected to come out within the next 6 to 12 months. [15:32] stittel: I just have't been particularly impressed since we switched to Ubuntu 8.04 back in late `07 [15:33] IMHO A lot of the problems with 10.04 is down to upstart and the lack of a complete migration to upstart. The current half attempt causes us many issues. [15:34] twb: I doubt that you switched to ubuntu 8.04 in '07 - unless you like using bleeding edge alpha/beta distributions ;) [15:35] We don't start deploying a twelve-month project on a release that's going to be twelve months old [15:35] The prisoners didn't actually get to use the system until well after April, but that doesn't mean we weren't targeting it and developing and testing on it. [15:38] Upstart seems to be the main cause of trouble for me in 10.04 i.e. LP bug 350936 [15:38] Launchpad bug 350936 in libvirt "Should shut down domains on system shutdown" [Low,Triaged] https://launchpad.net/bugs/350936 [15:38] sherr: it and plymouth, perhaps [15:38] I got round that happily now using "molly-guard" [15:38] molly-guard is a good Best Practice [15:38] Yes. I'm sticking it on everything now. [15:39] I dunno about it fixing bugs, but I use it to avoid fat-fingering the wrong machine into oblivion [15:39] sherr: that shouldn't have anything to do with upstart. I don't think libvirt ever did that on shutdown, though I could be wrong [15:41] that bug is not easy to fix cause you can send an acpi shutdown event, but that doesn't mean the guest did shut down in a timely fashion, or even responds to acpi events [15:41] I'm not the one looking at that bug, but afaics, it isn't particularly an upstart issue [15:43] If you read through the bug report, it appeared very hard to use "virsh" bfore a shutdown, to even attempt a clean shutdown of guests. Stuff seems to be killed too quickly (/etc/init.d/sendsigs). [15:43] A lot of people, including me, wasted hours trying to sort it out. Many reboots ... [15:44] I learned quite a bit in the process though (including a bit about upstart) :-) [15:58] soren: hey. so I've noticed your uml work with libvirt, which is cool. however, will openstack by using uml primarily? will it still support kvm? [16:01] sherr: for your information, upstart looks at the rd.* dirs to decicde what to start and probably also uses it to determen boot order. althought it might calculate it trough the dependencies (stated in the initscript) [16:04] a_ok: thanks. It's a pain trying to get a working "virsh list" during machine reboot or shutdown though. That's without modifying both libvirt-bin.conf and sendsigs (as per comment #8 in bug). [16:05] How do people shutdown guests on host shutdown or reboot with KVM/qemu? Is this stuff run in the "enterprise"? e.g. ubuntu-cloud? Or is the power just pulled from the guests? Seems wrong. [16:11] ttx: wb btw [16:12] SpamapS: o/ [16:17] hey guys with ufw is it possible to allow a app rule through only an interface? [16:18] I need to start looking at building out and managing a bunch of ubuntu servers. They will all have alot of the same code, but some different stuff as well. Any suggestions for managing config's, deploying updates, etc? [16:18] what i am trying to do is allow OpenSSH only through eth0 [16:20] webpragmatist: I haven't tried ufw, if it doesn't there are a ton that will. That's a pretty common feature [16:20] kpettit: well the question is specific to ufw [16:20] ufw has profiles for apps [16:21] webpragmatist: just don't open net port 22 :P [16:21] the_archit3ct: I understand the idea... i'm just trying to use ufw with the apps [16:21] what i am trying to do is allow OpenSSH only through eth0 [16:21] answering that [16:22] webpragmatist: yes [16:22] is there a prebuilt package for 389 directory server for lucid yet? [16:22] jdstrand: can your provide the syntax for using allow on interface for app? [16:23] !search maria [16:23] Found: [16:23] !search mariadb maverick [16:23] ufw allow OpenSSH on eth0 ? [16:23] ssureshot: I don't think so [16:23] webpragmatist: sudo ufw allow in on eth0 to any app OpenSSH [16:24] Is mariadb going to be available in Ubuntu 10.10? [16:24] webpragmatist: it requires the extended syntax when specifying an interface. see man ufw for details [16:24] kklimonda: bummer guess I need to downgrade my test box [16:24] jdstrand: ya i was trying to piece it together from man wasn't working thanks [16:25] sure [16:26] jdstrand: i kinda think that the app rules are annoying [16:26] jdstrand: is there an extended status? [16:26] webpragmatist: they are totally optional [16:26] webpragmatist: yes. ufw status verbose [16:26] webpragmatist: also ufw status numbered [16:27] is svn or similar good at keep config file histories? Was thinking of using some sort of source code repository to manage config files on multiple linux machines. Mainly for backup, cloning, testing, etc [16:27] ah okay now it's no longer annoyying :) [16:27] kpettit: take a look at etckeeper [16:27] jdstrand: I assume a limit is the same as an allow... so you wouldn't need both [16:27] jdstrand: checking... [16:28] kpettit: oh, actually, that is for the local machine. scratch that [16:28] webpragmatist: you can't have both. you choose one of allow, deny, reject or limit [16:28] yeah I have 6 or so servers now. ANd could possible scale up to a hundred or so. SO I need to setup a system to help me put out default configs and keep history or changes and such. [16:29] kpettit: does something like cfengine or puppet support that? [16:29] I'm thinking about that as well. [16:29] cfengine scares me. I haven't tried puppet [16:29] Last place I worked at did cfengine and they all hated it with a passion. I'll check on puppet [16:30] kpettit: i use csync2 [16:30] but i only run two servers [16:30] and it's hardly as powerful as puppet afaik [16:30] All of my servers are on cloud. Rackspace and GoGrid. So I'll probally use there api's to manage cloning and backup's. But I wanted to have something seperate to do config stuff [16:30] webpragmatist: I'll check it out, thanks [16:31] ah, puppet won't do the trick. IT keeps things in sync and I need the ability to have things different. [16:33] http://www.google.com/url?sa=t&source=web&cd=13&ved=0CCEQFjACOAo&url=http%3A%2F%2Fen.wikipedia.org%2Fwiki%2FComparison_of_open_source_configuration_management_software&ei=0ZRyTMbWHNGk4QaviZTeCA&usg=AFQjCNFfJc8CNQCE8Io_6JPzvpf9pUtSfA [16:34] sherr: Sweet, thanks === luis__lopez is now known as luis_lopez [17:01] New bug: #622810 in vsftpd (main) "after logging into ftp (vsftpd) ubuntu crashes" [Undecided,New] https://launchpad.net/bugs/622810 [17:04] Daviey: welcome back, and please have a look at bug 622818 ;-) [17:04] Launchpad bug 622818 in eucalyptus "unexpected errors after a sequence of tests" [Undecided,New] https://launchpad.net/bugs/622818 [17:04] hey hggdh ! Top work last week :) [17:08] hggdh, Interesting! === andregondim_ is now known as Andre_Gondim [17:11] Daviey: heya! welcome back! [17:11] yo mathiaz o/ [17:11] ttx: back welcome well as! heya! [17:13] Daviey: I thought that you might need some incentive after a rather good time last week :-) [17:14] Daviey: any news from your RT request for euca access? [17:14] hggdh, no - none.. i think they are probably ignoring my RT tickets now :) [17:16] heh [17:37] have any of you guys tried amqp? Was thinking of using that for admin type tasks to get tasks out to multiple servers [17:37] smoser: ping? [17:37] RoAkSoAx, here [17:39] smoser: are desktop images also to be testdrived? [17:39]