ath88 | Or maybe guide me to a more fitting channel for such a question? | 00:00 |
---|---|---|
tomsdale | ath88: security or #security ? | 00:02 |
ath88 | Ill try, thanks. :) | 00:04 |
fluvvell | DigitalDeviant:, sorry got called out. bind9 - its a fairly involved task, sometimes I wonder if I have a handle on it at all. We have dnsmasq for internal dns and bind for our internet records. I have 2 other bind servers on the internet that act as backup dns and are on other sites, I have only remote access to them and use command line and text editing to change records. Webmin looks good, but in the end I trust things work proper | 00:31 |
fluvvell | ly when I see the config files looking the way they should. | 00:31 |
=== erichammond1 is now known as erichammond | ||
uvirtbot | New bug: #627723 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.41-3ubuntu12.3 failed to install/upgrade: subprocess new pre-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/627723 | 01:06 |
thesheff17 | has anyone seen Failed to find device to remove that has udev name '/sys/devices/virtual/net/vnet0' with virsh --migrate --live? | 01:08 |
thesheff17 | *virsh migrate --live | 01:09 |
Hypnoz | I realize this is a weird question for this chan, but anyone know the name of the item that screws a 4 post rack to the floor? | 01:19 |
=== WinstonSmith_ is now known as WinstonSmith | ||
WinstonSmith | Hypnoz, /ironic on screwdriver ? | 01:27 |
Patrickdk | hypnoz, a wrench? | 01:36 |
Hypnoz | its called a bolt-down kit | 01:38 |
Patrickdk | basically what I use | 01:38 |
Patrickdk | http://www.altex.com/Concrete-Floor-Anchor-Kit-Secures-Relay-Racks-To-Floor-RIK01-P139683.aspx | 01:38 |
Hypnoz | was having trouble finding the product | 01:38 |
Patrickdk | concrete floor ancors :) | 01:38 |
Patrickdk | have a box of 50 from lowes | 01:38 |
Patrickdk | though mine are 5/8" | 01:38 |
trimeta | I've checked USN, I've checked "aptitude changelog linux-image-2.6.32-24-server", what are the changes to the kernel that warranted a version bump and may warrant a reboot? | 01:51 |
fluvvell | trimeta, have you got proposed updates turned on ? | 02:02 |
trimeta | I don't think so...this is a relatively standard Lucid install. | 02:03 |
fluvvell | trimeta, server install or desktop? | 02:03 |
trimeta | Server. | 02:03 |
trimeta | Looks like I have the lucid and lucid-updates repositories in sources.list | 02:04 |
fluvvell | it may be the 10.04.1 update that came through for the desktop not long ago. | 02:05 |
trimeta | Perhaps...what did that bring with it? Anything I'd want to sacrifice uptime for? | 02:09 |
pmatulis | trimeta: usn-966-1 and usn-974-1 are 2 that i know of | 02:14 |
trimeta | pmatulis: I don't think it's actually security-related, it seemed to have been pulled from the lucid update server and not lucid-security. | 02:15 |
trimeta | I just mentioned that since it's the first place I check for kernel updates. | 02:15 |
pmatulis | trimeta: lucid-security dumps into lucid-updates after a very short while | 02:15 |
trimeta | Still, this just bumped tonight, and since I don't run Hardy and have updated between now and August 4, I'm pretty sure it's neither of those. | 02:16 |
pmatulis | trimeta: well, when did you last update your package index? | 02:18 |
trimeta | I just ran aptitude update && aptitude safe-upgrade earlier tonight....I don't remember when I did it last, but certainly within the past week. | 02:19 |
trimeta | (the one earlier tonight is what pulled in a new version of the kernel.) | 02:19 |
pmatulis | trimeta: maybe your using a crummy mirror | 02:20 |
trimeta | I don't think it's that bad...besides, I vaguely remember having installed the usn-966-1 update previously. | 02:20 |
trimeta | To be honest, there's no real problem here; I could just reboot and get it done with. I'm just curious what changed. | 02:21 |
pmatulis | trimeta: what mirror are you using? | 02:21 |
trimeta | http://us.archive.ubuntu.com/ubuntu/ | 02:21 |
pmatulis | trimeta: dunno. check your apt logs for more info... | 02:22 |
trimeta | Where do I find those? | 02:23 |
pmatulis | trimeta: under /var/log/apt | 02:23 |
trimeta | I suppose I should have checked there first... | 02:23 |
trimeta | The upgrade appears to have been from 2.6.32-24.41 to 2.6.32-24.42 (both of these being versions of linux-image-2.6.32-24-server). | 02:24 |
trimeta | Hmm...maybe I'm just not reading the changelog correctly, and I've been stupid this whole time? | 02:25 |
trimeta | It mentions change pertaining to this specific version, but they were checked in over a week ago...I know I've updated more recently than then. | 02:26 |
trimeta | Perhaps I just don't understand how the dates in the changelog work? | 02:26 |
pmatulis | trimeta: changelogs show committed times, not released times | 02:29 |
trimeta | Hmm...is there a way to see released times? | 02:29 |
pmatulis | trimeta: i'm not sure. launchpad maybe? | 02:30 |
trimeta | I'll look around...and in the future, try to keep in mind that even if the update in the changelog seems to have happened ages ago (in Linux time), it might still be the update which just installed. Thanks for listening to me be an idiot. | 02:31 |
pmatulis | trimeta: do you have -proposed enabled? | 02:36 |
trimeta | No. | 02:36 |
=== andregondim_ is now known as Andre_Gondim | ||
holmser | does anyone here use ISP config? | 03:13 |
holmser | I was just gifted a new server, and I would like administer both of them from ISP config, but I am having trouble figuring out how to do it. | 03:14 |
=== Andre_Go` is now known as Andre_Gondim | ||
=== dendrobates is now known as dendro-afk | ||
Andre_Gondim | Hi I want to mapping home em temporaty directories at samba, but I didn't found a logon file exampla, anyone may help me? | 04:18 |
JasonMSP1 | im using VSFTPD and I have multiple log files.. standard, .1 .2 .3 | 05:00 |
JasonMSP1 | how can I force a new log to start? | 05:00 |
jmarsden | JasonMSP1: Probably using the logrotate command. man logrotate. Not sure about vsftpd specifically, but many subsystems use this. | 05:12 |
JasonMSP1 | thx | 05:21 |
seezed | anyone here have any experience with group-office | 07:16 |
twb | seezed: the wine thing? | 07:16 |
seezed | nope its a web based project management/groupware app | 07:16 |
joschi | twb: I think you mean crossover office ;) | 07:17 |
seezed | im looking for a groupware app to run on a fresh 10.04 install | 07:17 |
seezed | but im having dramas getting things running, so I was wondering if there was a pre-packaged app anyone had tried | 07:17 |
twb | Oh, right, groupoffice is the OWA clone | 07:17 |
twb | I thought it was packaged | 07:18 |
seezed | OWA? | 07:18 |
seezed | i cant find it in apt, and there is no deb available that I've been able to find | 07:18 |
twb | seezed: outlook web access | 07:18 |
biodegabriel | saucy | 07:19 |
twb | Basically a rewrite of outlook to run on iexplore/activex | 07:19 |
seezed | its a bit more then that | 07:19 |
twb | Fair enough | 07:19 |
seezed | im looking for a web app to host docs, manage project time lines etc | 07:19 |
twb | IME when people say "groupware" they really just mean calendaring stuff | 07:20 |
twb | seezed: maybe something like trac? That's project-oriented | 07:20 |
biodegabriel | seezed basecamphq.com ? | 07:20 |
seezed | yeah i've looked at trac, but it doesnt seem to do the doc hosting stuff | 07:20 |
seezed | biodegabriel: i'm looking for something more along the lines of a self hosted app | 07:22 |
biodegabriel | seezed: http://github.com/dannyweb/BaseApp2 | 07:22 |
seezed | just to make things hard | 07:22 |
seezed | biodegabriel: are you suggesting i make my own? because that's not really practicable | 07:24 |
OWDH | ikonia bruder olaaaaa | 08:21 |
OWDH | bazhang bro ahoy | 08:21 |
OWDH | wtfm where is da fat and ugly holy shit linuks penguin, the called TUKS? TUKS must Die! I am da TUKSKILLA! | 08:35 |
soren | OWDH: Please take this nonsense elsewhere. | 08:40 |
twb | How peculiar | 08:50 |
soren | Kids. What can I say? | 08:51 |
* soren reboots (into maverick) | 08:52 | |
jpds | soren: Hi. | 08:54 |
huats | morning | 09:18 |
ttx | huats: yo! | 09:24 |
huats | hello ttx ! | 09:24 |
soren | jpds: o/ | 09:47 |
uvirtbot | New bug: #627922 in openldap (main) "package slapd 2.4.21-0ubuntu5.3 failed to install/upgrade: le sous-processus script post-installation installé a retourné une erreur de sortie d'état 1" [Undecided,New] https://launchpad.net/bugs/627922 | 10:06 |
siretart | does the ubuntu server team look after bugs in virt-manager? or do you focus on "infrastructure" packages like 'libvirt'? | 10:20 |
twb | I imagine virt-manager has a specific Maintainer: | 10:37 |
* lifeless bets on dustin | 10:40 | |
twb | Grmph | 10:46 |
twb | Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss@lists.ubuntu.com> | 10:46 |
twb | IMO packages that do that should indicate guilty individuals via Uploaders | 10:46 |
theyranos | can anyone tell me what "monitor socket did not show up" actually means? Google has not yielded much of anything helpful. | 11:08 |
twb | theyranos: what issues that warning? | 11:10 |
theyranos | sudo virsh create /path/to/xml | 11:11 |
twb | Sorry, I don't do libvirt | 11:11 |
twb | Wait patiently for someone else and/or try #libvirt (#virt?) | 11:12 |
theyranos | will do. thanks | 11:12 |
theyranos | dang. #libvirt got created when i tried to join it just now. #virt wants a password... but i'll go looking for a libvirt community | 11:13 |
soren | theyranos: #virt is on oftc. | 11:14 |
theyranos | soren: thanks | 11:14 |
soren | theyranos: "monitor socket did not show up" usually means the domain took to long to boot (or didn't boot at all) | 11:14 |
soren | theyranos: Look in /var/log/libvirt/qemu/<name of domain>.log for more info. | 11:14 |
theyranos | you have no idea how grateful I am just for telling me where the heck the log files for virsh are. | 11:15 |
jussi | #ubuntu-virt was redirected to here, so the correct people _should_ be here now... | 11:16 |
theyranos | oh lord... there was an extra space in my xml file. I've been trying to fix this for three hours and that was the entire problem. soren, thank you so very much for the log path. | 11:19 |
uvirtbot | New bug: #627961 in mysql-dfsg-5.1 (main) "package mysql-server 5.1.41-3ubuntu12.6 failed to install/upgrade: függőségi hibák - e csomag beállítatlan maradt" [Undecided,New] https://launchpad.net/bugs/627961 | 11:21 |
ttx | jiboumans, Daviey, kirkland, hggdh: doing UEC ISO testing, I can't get it to work :/ See https://bugs.launchpad.net/ubuntu/+source/eucalyptus/+bug/627963 | 11:23 |
uvirtbot | Launchpad bug 627963 in eucalyptus "CC doesn't start correctly, CLC struggles with certificates" [Critical,New] | 11:24 |
* Daviey looks | 11:25 | |
ttx | Daviey: i'd welcome some outside reproduction | 11:29 |
Daviey | ttx: Okay.. i'm planning to reproduce it shortly.. | 11:30 |
Daviey | I'm expecting it to be a depends that broke it TBH | 11:30 |
Daviey | odd that i hadn't seen this before. | 11:31 |
Daviey | .. and you have seen it twice! | 11:31 |
Daviey | infact, even Carlos hasn't seen it! | 11:31 |
ttx | I did two amd64 installs in a row | 11:31 |
Daviey | Which to me, indicates something underlying busted | 11:31 |
ttx | Daviey: I'm lacking some reference point, but I suspect cloud-cluster.log should not be empty, that's why I say "CC is not started correctly" | 11:32 |
ttx | and then those received/expected certificates dumps every 20s look suspicious | 11:32 |
ttx | I found them while investigating bug 585108 | 11:32 |
uvirtbot | Launchpad bug 585108 in eucalyptus "euca_conf --register-nodes returns 0 but the node is not registered" [High,Confirmed] https://launchpad.net/bugs/585108 | 11:32 |
ttx | looks like that one would be a consequence rather than a cause. | 11:33 |
* ttx lunches | 11:35 | |
Daviey | agreed | 11:35 |
uvirtbot | New bug: #627973 in openvpn (main) "Assertion failed at socket.c:629" [Undecided,New] https://launchpad.net/bugs/627973 | 11:51 |
=== g0rd0n_ is now known as g0rd0n | ||
ttx | Daviey: i386 test in progress | 12:34 |
ttx | Daviey: re: dependency, maybe, the certificate mismatch seems to affect only the C components (CC and NC) | 12:35 |
Daviey | ttx, I'm halfway through amd64 | 12:35 |
ttx | Daviey: I don't run into it with i386. Might be arch-related, or pure luck | 12:50 |
ttx | ... | 12:58 |
ttx | the i386 setup ends up being so slow it even gets the avahi broadcasts wrong | 12:59 |
ttx | eucalyptus-cloud maintains high load | 12:59 |
Daviey | ttx, Hmm - i just got a registration issue on the single machine :S | 13:01 |
ttx | Daviey: describe | 13:02 |
Daviey | ttx, rebooting, will pastebin reg'.log | 13:02 |
Daviey | BTW, shutdown speed is laaaaaging | 13:03 |
ttx | the reg log shows duplicate tries, but with SUCCESS | 13:03 |
Daviey | as in frozen | 13:03 |
ttx | (in my tests) | 13:03 |
Daviey | ttx, Have you been able to reboot? | 13:03 |
ttx | Daviey: why would I ? | 13:03 |
Daviey | mine has been jammed for 3 mins on "Deconfiguring network interfaces" | 13:04 |
ttx | right, I got that | 13:04 |
* Daviey hard powers off. | 13:04 | |
* ttx is focused on the critical issues, but has a backlog of small issues he also needs to file | 13:04 | |
ttx | Daviey: when was the last time you had a working setup ? | 13:05 |
Daviey | ttx, Friday was the last time i did a fresh install. | 13:07 |
* Daviey winces at ipv6 error | 13:08 | |
ttx | Daviey: filed bug 628025 | 13:11 |
uvirtbot | Launchpad bug 628025 in eucalyptus "Duplicate registration tries show up in registration.log" [Low,New] https://launchpad.net/bugs/628025 | 13:11 |
ttx | is it the same one ? | 13:11 |
Daviey | http://eucalyptus.daviey.com/logs/ | 13:14 |
Daviey | ttx, same errro | 13:14 |
ttx | right, it's not the blocking factor | 13:15 |
ttx | something makes duplicate announcements | 13:15 |
ttx | hmm | 13:15 |
ttx | that might explain the expected/received cert issue though | 13:15 |
ttx | Daviey: I'm having this bug also on i386 where everything registered properly | 13:16 |
ttx | so I discounted it as yab (yet another bug) | 13:16 |
Daviey | ttx, http://community.eucalyptus.com/forum/error-errorc94-oxs-error-x509c287-opensslx509ge | 13:17 |
* Daviey screams | 13:17 | |
ttx | Daviey: this one was always present | 13:17 |
ttx | Daviey: https://bugs.launchpad.net/ubuntu/+source/axis2c/+bug/456099 | 13:18 |
uvirtbot | Launchpad bug 456099 in rampart "axis2c.log is full of spurious (and full of typos) errors" [Low,Triaged] | 13:18 |
ttx | so, that one is clearly unrelated (yab) | 13:18 |
zul | Daviey: serenity now! | 13:19 |
Daviey | zul, o rly :) | 13:19 |
ttx | Daviey: I get everything registered on i386 | 13:19 |
Daviey | ttx, I'm going to spin a new install, amd64.... | 13:19 |
ttx | Daviey: (with duplicate messages in registration.log, one success 1 fail for each) | 13:20 |
ttx | trying to run an instance for kicks | 13:20 |
zul | Daviey: serenity now....insanity later | 13:20 |
Daviey | ttx, I'm wondering if a depends has changed recently, and only amd64 has been accepted into the archive; or it FTBFS | 13:20 |
Daviey | guessing WHICH depends is fun. | 13:20 |
ttx | Daviey: comparing ISO contents since Friday will help | 13:21 |
ttx | if only we kept that ISO on cdimage | 13:22 |
* Daviey raises again that snapshot archive would really help in this instance. | 13:22 | |
Daviey | ttx, I can look through ubuntu-changes | 13:22 |
ttx | Was your Friday test an amd64 one ? | 13:22 |
Daviey | yes.. i generally hammer amd64 more. | 13:24 |
ttx | ok. so it would truly be a recent regression, or just a flaky thing we were all lucky with | 13:24 |
* ttx looks up ubuntu-changes as well | 13:25 | |
Daviey | nah, we've ruled out luck i feel | 13:25 |
Daviey | Carlos, or me didn't discover this sooner | 13:25 |
Daviey | brb | 13:27 |
ttx | nothing jumps out in maverick-changes | 13:29 |
ttx | hggdh: ping us when around, we could use another pair of eyes reproducing those | 13:38 |
=== schmidtm_ is now known as schmidtm | ||
PrestonConnors | Hello, I am trying to get unattended-upgrades to NOT install and only notify me of packages that are available for upgrade via E-Mail. I noticed the option APT::Periodic::Unattended-Upgrade "1"; in /etc/apt/apt.conf.d/10periodic via Google searching but this is not an option in my installations of Ubuntu 10.04; what does APT::Periodic::Unattended-Upgrade "1"; do and if I set it to 0 will it NOT install updates and still notify | 13:58 |
hggdh | ttx: ping | 14:13 |
hggdh | ttx: I have an idea re bug 627963 | 14:15 |
uvirtbot | Launchpad bug 627963 in eucalyptus "CC doesn't start correctly, CLC struggles with certificates" [Critical,New] https://launchpad.net/bugs/627963 | 14:15 |
ttx | hggdh: cool | 14:16 |
hggdh | ttx: for a topo1,under /var/lib/eucalyptus/keys, you will find *both* the certs *and* a directory named after your CC | 14:17 |
hggdh | ttx: try replacing either one of the set of certificates. I did it the hard way, and it worked | 14:18 |
hggdh | ttx: somebody seemgly changed the places for (some of) the certificates | 14:18 |
* ttx will try again | 14:19 | |
hggdh | ttx: hard way == replace the /var/lib/eucalyptus/<Cluster Name> certs on all machines | 14:20 |
ttx | hggdh: is this a random error ? Or you always run into it ? | 14:21 |
ttx | just wondering why I'm the first one to see it, on D-1 for beta release | 14:22 |
ttx | reinstalling amd64 UEC rig | 14:22 |
hggdh | ttx: this is new on ubuntu2, I think, did not run on it before | 14:26 |
ttx | huh | 14:26 |
* hggdh is also starting from scratch | 14:26 | |
hggdh | I will try it, but without dacing around like the first time | 14:27 |
marek_ | hi, i have a problem with proxy, i need to do the same thing as mentioned here http://serverfault.com/questions/140125/port-to-subdomain - so i added apache modules and addedd vhosts file, but it is still not working, i even tried to edit proxy.conf to enable "Allow from all" for proxies, but still no luck, how can i debug this problem? | 14:28 |
ttx | hggdh: I see nothing in -ubuntu2 diff that would be relevant | 14:31 |
hggdh | ttx: I am not saying it was a change with 0ubunut2, I said this was new on 0ubuntu2... I sure as hell did not have it before, and just got it now | 14:34 |
hggdh | ttx: but I am still about 20 minutes from finisheing the CLC/CC/SC/Walrus reinstall | 14:35 |
ttx | hggdh: if you can document a workaround on the bug, that would be great (and lower it to High from Critical) | 14:35 |
hggdh | ttx: I will confirm the workaround and lower the importance -- if it actually works, of course -- | 14:36 |
* hggdh wonders how much was luck | 14:36 | |
ttx | I might get there before you do | 14:36 |
hggdh | heh. The race is on ;-) | 14:37 |
hggdh | ttx: one thing I *should* have done was to openssl x509 -text the certs (I am not sure the certs are in x509) | 14:38 |
hggdh | so replace x509 by whatever format needed | 14:38 |
=== oubiwann is now known as oubiwann-away | ||
=== oubiwann-away is now known as ouibiwann | ||
ttx | hggdh: copied keys to <clustername>, retsrtaed eucalyptus | 14:50 |
ttx | and now I have a cc.log | 14:50 |
hggdh | ttx: I can confirm that /var/lib/eucalyptus/keys/cluster-cert.pem and /var/lib/eucalyptus/keys/<clustername>/cluster-cert.pem are different | 14:58 |
ttx | hggdh: amd64/all-in-one unblocked, installing NC now | 14:59 |
ttx | let's see if I hit bug 628055 now | 15:00 |
uvirtbot | Launchpad bug 628055 in eucalyptus "Instances don't go to "running" state: Security Labeling error running aa_change_profile()" [Critical,New] https://launchpad.net/bugs/628055 | 15:00 |
ttx | hggdh: does that one ring a bell ? ^ | 15:00 |
\sh | maswan, ping your problem with the new hp blade series G7 and the new broadcom chipsets...I'll visit tomorrow the testlab of HP Germany...I want to test jaunty, lucid and maverick...anything else I shoud pay attention to when testing the setups? | 15:02 |
hggdh | ttx: no, it does not. I never saw this error... | 15:04 |
ttx | hggdh: was on my i386 test, which for some reason avoided that certificate thing | 15:05 |
=== ouibiwann is now known as oubiwann | ||
hggdh | ttx: weird is that I installed, and I *do* have a cc.log | 15:11 |
hggdh | ttx: but the registration.log shows the error, OK | 15:12 |
hggdh | brb | 15:12 |
ttx | hggdh: no | 15:12 |
ttx | hggdh: the registration.log shows a different error | 15:12 |
ttx | http://launchpad.net/bugs/628025 | 15:12 |
uvirtbot | Launchpad bug 628025 in eucalyptus "Duplicate registration tries show up in registration.log" [Low,Confirmed] | 15:12 |
ttx | that oe is unrelated imo | 15:13 |
maswan | \sh: Hm. Not really, that I can think of. Hm. It is sometime non-trivial to get bios and grub to agree which boot device is which if you have a storage blade, but you might not have that configuration. | 15:13 |
ttx | hggdh: so if you have a cc.log, it's probably a lucky strike | 15:13 |
\sh | maswan, no simple 465G7 | 15:14 |
hggdh | ttx: so... it might be with us for some time now | 15:14 |
hggdh | ttx: I still do not understand why the two different sets of cluster-cert.pem. Ah well, I will go ahead and install the NCs, and see what happens | 15:16 |
uvirtbot | New bug: #628109 in krb5 (main) "package libgssapi-krb5-2 1.8.1 dfsg-2ubuntu0.2 failed to install/upgrade: il sottoprocesso dpkg-deb --control ha restituito lo stato di errore 2" [Undecided,New] https://launchpad.net/bugs/628109 | 15:16 |
maswan | \sh: I've found that on just normal boots, adding crc32c to /etc/modules brings up the network interfaces fast, as a workaround. | 15:17 |
maswan | \sh: but that doesn't help the installer | 15:17 |
ttx | hggdh: I could run an instance on amd64, once I applied your workaround | 15:17 |
\sh | maswan, hmm..what das crc32c do? ;) | 15:17 |
\sh | s/das/does/ | 15:17 |
ttx | so I didn't hit the instance running bug | 15:17 |
maswan | \sh: It's a dependancy of the bnx2x module | 15:17 |
ttx | lowering prio since it may be a one-off or a i386-specific bug | 15:18 |
maswan | \sh: but somehow indirect, for some reason | 15:18 |
\sh | maswan, hmm..kernel module bug ? | 15:18 |
maswan | \sh: Well, it does get loaded eventually (at first it didn't, that's a separate bug that got fixed) | 15:18 |
maswan | or if it wasn't included in the install initrd or something. I forget, this was karmic alpha time, so it's a bit hazy now. :) | 15:19 |
ttx | hggdh: so let me get this straight. You started from scratch and ended up with an install that had a cc.log after registration, and no certificate errors in cloud-output.log ? | 15:19 |
ttx | (on amd64 ?) | 15:19 |
\sh | maswan, well, I will see tomorrow :) | 15:19 |
\sh | maswan, thx for the infos | 15:19 |
maswan | \sh: It's quite easy to see if it hangs for several minutes when detecting netowrk hardware, at least. :) | 15:21 |
hggdh | ttx: correct, on amd64. Previous install (and first on 0ubuntu2) failed wit the cert errors | 15:21 |
ttx | ok, so it's probably not arch-related | 15:21 |
\sh | maswan, hehe...yeah :) | 15:21 |
ttx | I suspect some kind of race | 15:21 |
hggdh | yes. The certs for the cluster seem to be created dinamically | 15:22 |
ttx | like if cluster shows up before the CLC created the certs | 15:22 |
hggdh | ttx: er | 15:22 |
ttx | i386 being utterly slower avoids that issue more often | 15:22 |
hggdh | ttx: I see this http://pastebin.ubuntu.com/486780/ at about the time the cluster certs are being/have been created | 15:23 |
ttx | not sure I'm any wiser now | 15:25 |
* ttx will try his 5th (and hopefully last) UEc install of the day, i386 to confirm/deny bug 628055 | 15:26 | |
uvirtbot | Launchpad bug 628055 in eucalyptus "Instances don't go to "running" state: Security Labeling error running aa_change_profile()" [High,New] https://launchpad.net/bugs/628055 | 15:26 |
ttx | everyone: don't forget to do ISO testing today, see http://iso.qa.ubuntu.com/qatracker/build/ubuntuserver/all | 15:30 |
hggdh | ttx: should we open a bug for this http://pastebin.ubuntu.com/486808/ | 16:15 |
hggdh | ttx: I do not see it really as a problem, seems to be just lack of support for IPv6 | 16:15 |
ttx | hggdh: yes, it's slightly different from bug 628025 | 16:16 |
uvirtbot | Launchpad bug 628025 in eucalyptus "Duplicate registration tries show up in registration.log" [Low,Confirmed] https://launchpad.net/bugs/628025 | 16:16 |
ttx | hggdh: please do | 16:16 |
ttx | (Low, confirmed, since I hit it too) | 16:16 |
hggdh | ttx: ack | 16:19 |
hggdh | Daviey: 09:52:23 ERROR [SystemUtil:Thread-33] com.eucalyptus.util.ExecutionException: ///usr/lib/eucalyptus/euca_rootwrap vgscan error: ERROR: Disallowed command vgscan | 16:19 |
soren | https://launchpad.net/ubuntu/maverick/+queue?queue_state=0&queue_text=swift \o/ | 16:23 |
ttx | smoser: are you going to run the ec2 instances autotest ? | 16:27 |
smoser | yes. | 16:28 |
smoser | i'm running. | 16:28 |
smoser | they're mostly finished, just wating on availability in ap-southeast | 16:28 |
smoser | for amd64 | 16:28 |
ttx | smoser: also if you have a working UEC[tm], could you cover the cloud images ? | 16:28 |
smoser | i have a working-ish uec. | 16:28 |
smoser | (one with local hacks, ie to fix the console output bug) | 16:28 |
ttx | that will do :) | 16:28 |
smoser | but i can try to run them here. | 16:28 |
hggdh | oh. yes, the console-output bug... let me see how the current euca is faring | 16:29 |
ttx | mathiaz, SpamapS, hallyn, kirkland, zul: I trust you're going to cover the remaining cases | 16:29 |
zul | ttx: yep | 16:30 |
ttx | From where I stand, I think we are good for server ISO and cloud images. For UEC we need to investigate the issues to come up with good release notes | 16:30 |
ttx | that's what hggdh, Daviey and me are trying to cover | 16:30 |
kickingintender | i wanna know is it easy to install xserver for ubuntu server | 16:32 |
hggdh | ttx: heh. I restarted Eucalyptus, and now I *do* get the certificate thingy | 16:33 |
ttx | ew | 16:33 |
ttx | you mean it's not even a one-time fix :) | 16:34 |
hggdh | so... I am betting there is some sort of fall-back/timing where euca relies on the ./keys/*.pem until ./keys/clustername> is created | 16:34 |
hggdh | no, I had not fixed it yet | 16:34 |
hggdh | there was *no* problem... until I restarted | 16:35 |
* ttx wonders if upstream tests the topology 1 | 16:35 | |
hggdh | :-) | 16:35 |
ttx | hggdh: maybe they don't, and maybe we shouldn't | 16:35 |
hggdh | I will fix it, and then restart the beast again | 16:35 |
ttx | hggdh: did you have the chance to run topology2 ? | 16:35 |
hggdh | ttx: no, this is a good fit for small deployments | 16:35 |
ttx | hggdh: it's important for demo/eval purposes, yes | 16:36 |
ttx | hggdh: but if they don't support it, we should not either | 16:36 |
hggdh | ttx: question for them on next go-around | 16:36 |
uvirtbot | New bug: #628145 in eucalyptus (main) "Eucalyptus does not understand IPv6" [Low,Confirmed] https://launchpad.net/bugs/628145 | 16:37 |
hggdh | ttx: but yes, I agree now | 16:37 |
kickingintender | how to install x11 for ubuntu server from command line | 16:37 |
kickingintender | i mean gui | 16:37 |
ttx | kickingintender: sudo apt-get install ubuntu-desktop ? | 16:37 |
hggdh | kickingintender: it is a standard X, so you just apt-get install <whatever X you want> | 16:37 |
hggdh | like apt-get install ubuntu-desktop | 16:38 |
hggdh | or apt-get install xubuntu-desktop | 16:38 |
hallyn | ttx: 'upgrade test' i assum emenas install lucid, and then upgrade to maverick? | 16:39 |
kickingintender | so really with x == is it equals to ubuntu desktop | 16:39 |
hggdh | hallyn: yes | 16:39 |
hggdh | kickingintender: no X != ubuntu-desktop | 16:39 |
hallyn | still trying to find the 'non-uec beta test' on the tracker... | 16:39 |
ttx | hallyn: http://testcases.qa.ubuntu.com/Testing/Cases/ServerUpgrade | 16:39 |
hggdh | ubuntu-desktop carries X | 16:39 |
ttx | hallyn: referenced from http://iso.qa.ubuntu.com/qatracker/result/4484/192 | 16:40 |
hallyn | ttx: yes, it doesn't say "start with lucid" though... | 16:40 |
hallyn | wanted to be sure :) | 16:40 |
=== mathiaz_ is now known as mathiaz | ||
ttx | hallyn: that should be it :) | 16:40 |
ttx | Daviey: when you come back: please confirm/reproduce the issues we already found... forward upstream... and maybe propose a releasenote text on the bugs | 16:50 |
Daviey | ttx, ack | 16:56 |
Daviey | ttx, oddly, on install #3 - reboot worked :S | 16:59 |
ttx | Daviey: ... | 17:00 |
Daviey | (on both boxes) | 17:00 |
Daviey | ttx, eucalyptus-cloud is still hammering | 17:01 |
uvirtbot | New bug: #628174 in nis (universe) "ypbind man page does not document -p switch" [Undecided,New] https://launchpad.net/bugs/628174 | 17:06 |
sla | can someone help me with dbconfig-common and aptitude? trying to install phpmyadmin/mantis/mediawiki etc.. all failing to create a database on installation. although i'm sure the mysql root password i provide works | 17:08 |
sla | been trying it for 3 hours now, driving me crazy :S | 17:08 |
hallyn | ok whoever decided that it might be ok for an update to reset the 'don't suspend on lid close' setting should die a slow painful death | 17:09 |
sla | all i get from /var/log/dbconfig-common/dbc.log is: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES). | 17:10 |
sla | unable to connect to mysql server. | 17:10 |
* hggdh tries to repeat the bypass for the changed certificates, and instead opens the door to the Labyrinth :-( | 17:10 | |
Daviey | hggdh, https://bugs.edge.launchpad.net/eucalyptus/+bug/627963/comments/11 | 17:19 |
uvirtbot | Launchpad bug 627963 in eucalyptus "[maverick] Inconsistent certificates prevent CC to start correctly (no cc.log)" [High,Confirmed] | 17:19 |
Daviey | :S | 17:19 |
kpettit | Can anybody recommend a desktop search that doesn't suck up to many resources. | 17:24 |
kpettit | Been trying tracker, but it sucks. Even when it's not indexing the tracker-store sucks up 1/2 my memory. | 17:24 |
kpettit | I've got 500k - 750k files to go though and search on. | 17:25 |
\sh | ./dev/brain and a good directory structure ;) | 17:25 |
hggdh | Daviey: yes... and I installed topo1, everything fine. restarted eucalyptus, bang! | 17:26 |
Daviey | hggdh, *sigh*... things were looking so good. | 17:26 |
hggdh | Daviey: yeah :-( | 17:27 |
kpettit | \sh, be easier if I had that choice. I have a mess of files I'm cleaning up. | 17:28 |
hggdh | Daviey: did you see my ping about vgscan? | 17:28 |
Daviey | hggdh, no ;/ | 17:28 |
hggdh | wrappers.conf lost the vgscan entry | 17:28 |
padhu | ! $sudo apt-get install lamp-server^ ; in this command, why '^' is needed? what it say? | 17:28 |
ubottu | Error: I am only a bot, please don't think I'm intelligent :) | 17:28 |
kpettit | I'm trying to get to the point where it will be orginized, but I'm dealing with what I have. A search would make things easier rather than manually sifting through things. Meta data helps that as well | 17:28 |
hggdh | Daviey: wrappers.conf lost the vgscan entry | 17:29 |
Daviey | hggdh, interesting... when did that happen!? | 17:29 |
hggdh | Daviey: I do not know, just saw the error on 0ubuntu2, did not have time to look at the bzr | 17:29 |
hggdh | Daviey: and, since on 2.0 we default to iSCSI... | 17:29 |
Daviey | hggdh, thanks for raising this.. i'll fix it in bzr | 17:30 |
hggdh | Daviey: my pleasure | 17:32 |
hggdh | oh, this does not really sound correct | 17:32 |
Daviey | huh? | 17:33 |
hggdh | there is no pleasure in finding yet another issue | 17:35 |
Daviey | :) | 17:35 |
Daviey | hggdh, Hmm.. are you sure vgscan was ever in wrappers.conf? | 17:44 |
hggdh | Daviey: at least up to 2.0, yes -- it was required on 1.6 | 17:46 |
uvirtbot | New bug: #625882 in libdbi (main) "libdbi0: ABI breakage without package name change" [High,In progress] https://launchpad.net/bugs/625882 | 17:46 |
Daviey | hggdh, hmm... vgscan isn't in current lucid | 17:52 |
hggdh | Daviey: weird | 18:07 |
hggdh | then it must have been added for 2.0 (I remember Neil stating the code was re-written/factored), and I got confused | 18:08 |
hggdh | dammit | 18:09 |
hggdh | Daviey: I indeed think I was worng, and vgscan is new on 2.0 | 18:10 |
hggdh | Daviey: want a new bug for it? | 18:11 |
uvirtbot | New bug: #628220 in clamav (main) "package clamav-base 0.96.1+dfsg-0ubuntu0.10.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/628220 | 18:11 |
the_file | hi im trying to boot 15 computers into a simple dos program thats actually under 1 megabyte in size, and I want this to be done thru network boot, so I want to set up a machine with linux on it, but don't know a thing about network booting. | 18:14 |
the_file | was wondering how to set up network boot and utilize ubuntu as the server to boot the machines into a dos program | 18:14 |
=== dendro-afk is now known as dendrobates | ||
hggdh | ttx, Daviey: can you search your euca logs for "auth.login.AuthenticationException"? | 18:28 |
the_file | does ubuntu server come with x?. | 18:42 |
the_file | want to use kde or gnome | 18:42 |
the_file | with it | 18:42 |
ScottK | It's not in the default install, but you can add it easiily enough. | 18:43 |
hallyn | zul: feh! i'm trying again cause i may have messed it up, but lucid->mav upgrade test seemed unhappy with mysql | 18:44 |
zul | unhappy how? | 18:44 |
hallyn | zul: near the end of the dist-upgrade, it hung (until i ctrl-c'd) on replacing mysql configuration files | 18:45 |
zul | hmmm...ok ill have to look | 18:45 |
the_file | is there a package that I can download for the ubuntu server that will automatically configure network booting?. | 18:47 |
zul | the_file: no there isnt you might to check google | 18:49 |
=== dendrobates is now known as dendro-afk | ||
=== dendro-afk is now known as dendrobates | ||
Daviey | hggdh, not seeing it :/ | 19:24 |
hggdh | hell | 19:25 |
hallyn | zul: i shouldn't have to configure mysql before doing dist-upgrade right? | 19:25 |
zul | nope | 19:26 |
uvirtbot | New bug: #572635 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade:" [Undecided,New] https://launchpad.net/bugs/572635 | 19:27 |
kirkland | smoser: howdy! | 19:39 |
smoser | hey | 19:39 |
kirkland | smoser: can you take a look at https://wiki.ubuntu.com/Euca2oolsTestCoverage | 19:39 |
kirkland | smoser: any of those gaps on the right you can help test easily against your UEC? | 19:39 |
smoser | well, not *right now*. | 19:40 |
smoser | give me maybe an hour | 19:40 |
kirkland | smoser: sure, that's fine | 19:40 |
hggdh | Daviey, ttx: the certificate issue happens on every reboot | 19:41 |
Daviey | hggdh, interesting | 19:45 |
* Daviey suspects code left somewhere it shouldn't have been during refactoring | 19:46 | |
=== ivoks_away is now known as ivoks | ||
hggdh | Daviey: I also opened bug 628291 for vgscan | 19:51 |
uvirtbot | Launchpad bug 628291 in eucalyptus "wrappers.conf is missing vgscan, seemgly new addtion to 2.0" [Undecided,New] https://launchpad.net/bugs/628291 | 19:51 |
=== kentb is now known as kentb_dell | ||
hallyn | zul: well i'ts doing better so far - last time the first hint of trouble was at the libc upgrade, when it restarted mysql for the nss update, i think it had said it failed to restart mysql | 20:26 |
zul | hallyn: gah...ill an update for myself tomorrow | 20:32 |
=== ivoks is now known as ivoks_away | ||
Overand | Is there a "right" way to add a new software-RAID device to ubuntu server 10.04 - not a fresh install. | 21:03 |
Overand | i.e. I read that the installer uses udev rather than mdadm - and i know *nothing* about this, and wasn't able to really track it down via docs. I've always used an mdadm.conf type setup | 21:03 |
kirkland | ttx: around? | 21:44 |
elv2 | hi | 21:55 |
elv2 | I have a problem with SVN and apache, and the workaround is to delete or rename libc6-i686. Is this safe as my servers shows uname -m i686? | 21:58 |
smoser | kirkland, i can make a pass at that stuff tomorrow. | 22:01 |
smoser | been bogged today with ec2 testing | 22:01 |
kirkland | smoser: okay | 22:01 |
smoser | have o run now. | 22:01 |
kirkland | smoser: yeah, i'm iso testing now too | 22:01 |
ikar | Hey, whats the command for "sftp" upload a directory? | 22:03 |
ikar | nevermind, i found out | 22:07 |
=== luis__lopez is now known as luis_lopez | ||
qman__ | Overand, the installer uses udev for hardware, but mdadm for software RAID | 22:23 |
=== dendrobates is now known as dendro-afk | ||
Takyoji | Any have specific webserver hardening suggestions, such as Single Packet Authentication, basic blacklisting scripts, security modules, chroot for Apache, etc? Anyone used grsecurity before? | 22:40 |
stlsaint | Takyoji: iptables, fail2ban and deny.hosts :D | 22:44 |
stlsaint | Takyoji: grsecurity is nice but is mainly used a larger scale than home use (if your thinking of making a home server) | 22:45 |
stlsaint | Takyoji: also if remote managment go with openssh with key authentication | 22:45 |
Takyoji | It's intended for a public webserver hosted on Linode | 22:45 |
Takyoji | because I'm intending on my making a public service, rather than using it for personal use. | 22:49 |
kees | Takyoji: I recommend using AppArmor to isolate each of your virtual hosts. | 23:03 |
kees | Takyoji: and to use 64bit | 23:03 |
Takyoji | Yes, I have a 64-bit installation | 23:05 |
=== dendro-afk is now known as dendrobates | ||
=== dendrobates is now known as dendro-afk | ||
hallyn | SpamapS: regarding bug 625882, can i set the one against rrdtool to same status as the libdbi one? | 23:33 |
uvirtbot | Launchpad bug 625882 in libdbi "libdbi0: ABI breakage without package name change" [High,In progress] https://launchpad.net/bugs/625882 | 23:33 |
=== dendro-afk is now known as dendrobates | ||
SpamapS | hallyn: I'll be moving them to In Progress as I work on them. I'd set them to Confirmed myself, but its probably best if others take a look at them and agree that they're Confirmed/Triaged... | 23:35 |
hallyn | SpamapS: i'm just sayin', | 23:36 |
hallyn | you set it to the one affected proj, but not the other, | 23:36 |
hallyn | so iw asn't sure if the other was invalid | 23:36 |
SpamapS | right because I haven't started on the fix in rrdtool yet | 23:36 |
hallyn | ok | 23:36 |
hallyn | thx | 23:36 |
SpamapS | it has to be fixed in all the rdepends on libdbi | 23:36 |
SpamapS | So probably "Triaged" if you agree that it does need to be fixed. ;) | 23:36 |
hallyn | SpamapS: maybe i'll just leave it alone then :) | 23:37 |
SpamapS | These are pretty low hanging, easy bugs so it would be cool if some aspiring community members picked them up and fixed them. :) | 23:37 |
hallyn | SpamapS: maybe we need some blogging to encourage community to pick up bugs | 23:37 |
hallyn | SpamapS: was just doing my triaging and wondering why that one was hanging | 23:38 |
SpamapS | hallyn: I think its worthwhile for you to set them to Triaged. The process of reviewing the bug report is important to make sure I'm not just cowboying it in. ;) | 23:38 |
hallyn | set both to triaged? | 23:38 |
SpamapS | no, the New one | 23:38 |
hallyn | ok | 23:38 |
SpamapS | Thats the only reason its showing in the untriaged list | 23:38 |
SpamapS | Whoever gets to triage tomorrow will probably see it again with a few more packages added. :) | 23:39 |
SpamapS | so maybe leave a good comment explaining our conversation. :) | 23:39 |
hallyn | \o/ :) | 23:39 |
SpamapS | jus thro ya slashes in tha ayre .. 'n wave 'em like ya jus don care | 23:40 |
hallyn | yup, it's EOD and getting a little silly :) | 23:41 |
hallyn | SpamapS: zul: you know what'd be useful? a locale hook that auto-creates an english version of all logs | 23:43 |
hallyn | cause there are two bugs i can't make heads or tails of :) | 23:43 |
SpamapS | translate.google.com :) | 23:44 |
hallyn | google doesn't like me ever since i turned on noscript | 23:45 |
SpamapS | hallyn: still chugging away with the transmeta eh? ;) | 23:46 |
hallyn | SpamapS: lol, no, i couldn't run firefox at all on that | 23:46 |
SpamapS | hallyn: why turn off scripts? its pretty much the only sane way to make web apps. | 23:47 |
hallyn | bc i dont' trust your webapps | 23:47 |
SpamapS | wuss | 23:47 |
SpamapS | ;) | 23:47 |
hallyn | i turn them on when i actually want them | 23:47 |
hallyn | (noscript is plenty flexible to make that feasible - else i wouldn't do it) | 23:48 |
SpamapS | The backend stuff is way more scary than the frontend stuff these days. | 23:48 |
SpamapS | So many SQL injection attacks and just plain bad admin passwords.. I think XSS hacks get all the press, but breaches on the backend are the ones that will get your data. | 23:49 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!