[00:39] Madwill, lots of pepole here willj ust think I'm being a stick in the mud [00:39] but lxc != openvz [00:41] lxc is not as robust as openvz was (or that I understand it was). You cannot trust a UID 0 process in your lxc container. [00:41] maybe robust wasn't the right word for that. [00:42] it makes no promises that you could do such a thing. [01:39] Anyone install/use Tryton? [04:01] New bug: #629234 in vsftpd (main) "package vsftpd 2.2.2-3ubuntu6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/629234 [04:16] New bug: #629236 in samba (main) "Can't install samba in 10.04.1 fresh install" [Undecided,New] https://launchpad.net/bugs/629236 === cs278|work is now known as Guest96508 [04:40] upon actually installing ubuntu server 10.04, will there be an option to encrypt everything before the install continues? [04:59] Hi all. I'm having some issues with Dell's Hardware RAID controller, Ubuntu 10.04, Dell T3500. Is this the right place to ask? [05:01] New bug: #629247 in libvirt (main) "Failure to alter VM's MAC address with virsh" [Undecided,New] https://launchpad.net/bugs/629247 [05:16] A little off topic and random. I just looked at the lines of code in Nginx - 137,212 LoC === viezerd- is now known as viezerd [05:37] Necesito montar un servidor con ubuntu, podrian ayudarme? [05:45] !es [05:45] En la mayoría de canales de Ubuntu se habla sólo en inglés. Si busca ayuda en español o charlar entra en el canal #ubuntu-es. Escribe "/join #ubuntu-es" (sin comillas) y dale a enter. [05:47] ok thank you. [05:47] De nada. [07:01] How do I check whether I've set an "internet host name" for my 10.04 server install? like "hostname" but for web server identity.. [07:02] q_a_z_steve: where are you hearing about this "internet host name"? From e.g. apache's logs? [07:03] It probably means telling the daemon in question what FQDN to use, and/or putting same in /etc/hosts. [07:03] twb: well I'm not even sure I've set one yet. I've killed my box and just ran through a million lines of aptitudes since [07:04] q_a_z_steve: check "hostname --fqdn" first, I guess [07:05] twb: well that shows .lan so I probably haven't set one at all yet. [07:05] right? [07:07] That is most likely provided by the OpenWRT or whatever that is running your network [07:07] Or *was* running your network at the time you installed ubuntu [07:08] Unless your host has a public IP on the internet, getting a correct FQDN probably isn't important. [07:11] well obviously I *want* a domain name eventually to be tied to this web server... [07:14] twb: but you don't think that's an issue yet, right? [07:39] qman__: hi! [07:40] noticed that all the VMs had a shared virtual Optical drive. I removed that from all VMs and restarted them. eversince that, the errors have not reappeared. [07:41] will be monitoring this further over the next 2 days. [07:44] TeTeT: You awake? [07:45] intelliant: I saw your conversation yesterday - how was the CDROM shared between guests? I have 2 guests, each with a CDROM, and each KVM definition has : [07:45]

[07:45] But I would think that is "private" to each guest (i.e. 2 separate cdroms) [07:46] Jeeves_: barely ;) need to visit the dentist in the next 10 minutes, will be back in an hour [07:46] TeTeT: Ah. I'll give you something to think about at the dentist [07:46] dhcp4!~ [07:46] (I need it to run ISC dhcpv6 :)) [07:47] :-\ [07:47] PresuntoRJ: ? [07:47] Jeeves_: hmm, check out the PPA from Mathieu Trudel, he has a new network manager and probably also a dhcp4 client in it [07:47] Jeeves_: or he had a patch to remove the need for it, don't remember it exactly [07:48] I need the server and relay, but I'll have a look at his ppa. Thanks! [07:48] sherr: http://pastebin.com/Fryb0esQ [07:49] Mathieu only has networkmanager [07:49] i agree to what you are saying but this is just one observation [07:49] bummer [07:49] sherr: I still beleive the problem may lie elsewhere [07:49] maybe there are debian experimental packages for it? [07:49] Oh, that's a good one [07:50] best to test those in a vm, things can go awfully wrong with the experimental packages in my experience [07:50] may be over the weekend I will add the cdrom back and wait for the errors. [07:51] TeTeT: Yeah, I'll try that [07:51] Debian renamed it to isc-dhcp [07:51] which makes sense, given the fact that there are more dhcpd's around [07:54] intelliant: thanks. I have a "block" device, you have a file. Similar otherwise. Well, let's wait and see - I hope it works for you. [08:11] New bug: #629304 in mysql-5.1 (main) "-DMYSQL_CLIENT_NO_THREADS and undefined reference to `my_pthread_fastmutex_init'" [Undecided,New] https://launchpad.net/bugs/629304 [08:33] Jeeves_: any success with the experimental packages? [08:33] TeTeT: Yes [08:33] I've got isc-dhcp-relay running [08:34] All I gotta do know is figure out how dhcpv6 works :) [08:34] But first a shower, to really wake up :) [08:46] New bug: #629318 in bacula (main) "package bacula-director-mysql 2.4.4-1ubuntu9 failed to install/upgrade: Unterprozess installiertes post-installation-Skript gab den Fehlerwert 1 zurück" [Undecided,New] https://launchpad.net/bugs/629318 [08:52] grrr, people that post bugs in their own language-- [09:37] hey can anyone help me my server tottally just blew up in my face and i have no idea what to do [09:37] hello [09:38] who install oracle 11gR2 on ubuntu 10.04? [09:41] i uninstalled a package then ran some updates and now when i try to boot i get "fsck from util-linux-ng 2.17.2 /dev/sda1: clean, 132765/4800512 files, 7904061/19182080 blocks (check in 2 mounts) init: udevtrigger main process (276) terminated with status 1 init: udevtrigger post-stop process (281) terminated with status 1 [09:42] !ask | Scorpion [09:42] Scorpion: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [09:42] !details | Scorpion [09:42] Scorpion: Please give us full details. For example: "I have a problem with ..., I'm running Ubuntu version .... When I try to do ..., I get the following output: ..., but I expected it to do ..." [09:44] PresuntoRJ: I know you. [09:45] ;-; please can anyone help me i have a lot of people who use this server and im still learning some of the more in depth things and i just cant figure this problem out [09:45] X-2: of course :D [09:49] LordKitsuna: how come "blew up" ? electrical explosion? hdd failure? bad upgrade? [09:50] well i say that when a big error that prevents me from doing what i want to do happens [09:50] its just a figure of speech [09:51] as i said i uninstalled a package (bandwidthd to be exsact) then ran apt-get update follwed by apt-get upgrade (couldnt tell you what it upgraded) then all that error happnened [09:54] I have used bandwithd before... maybe there is an HDD error that went unoticed before you have tried this upgrade, because there is nothing in the package that could cause a failure to bot [09:54] Hmm [09:54] LordKitsuna: do you remember what is your filesystem? ext4? ext3? reiserfs? [09:55] ext4 i think [09:55] iirc [09:55] For things that are managed by upstart, for example, avahi-daemon, what is "good practice" to do to not have that service started/stopped except manually, rather than automatically? [09:55] LordKitsuna: do you have a livecd with you? when was your last backup ? [09:55] last backup...ummm ummm not tooo long ago also yes i have a live cd of ubuntu desktop with me [09:57] my power is being flashy it had better not go out this would be the worst possible timing [09:58] so what should i do with the live cd PresuntoRJ [09:58] could you try to power it on from the livecd? in there, try running (before you mount the HDD) a fsck to your partitions? let it complete the process before you try to boot it again [09:58] how can i create localhost in ubuntu [09:58] ??? [09:59] LordKitsuna: tune2fs also gives you some feedback on the health of the harddrives [09:59] sd-d_: ? [09:59] im not 100% sure how to run fsck (still learning ubuntu) do i just type it in a termanal? [09:59] sd-d_: 127.0.0.1 ? [10:00] PresuntoRJ, like we open a directory in browser in asp.net [10:00] LordKitsuna: most linux are the same... fsck /dev/partition (he correct name) [10:00] LordKitsuna: try $ man fsck to read the manual [10:00] PresuntoRJ, ur close .. [10:00] $ man also works for most commands [10:01] sd-d_: you want to access your filesystem from a web browser? [10:01] yes ... [10:01] PresuntoRJ: that's called DAV [10:01] :P [10:01] I think there is a python trick for that [10:02] python -m SimpleHTTPServer [10:02] You can do that with any old browser [10:02] make sure you have the tcp port opened on your firewall [10:02] but thats pretty unsafe [10:02] I usually use "busybox httpd" or thttpd [10:02] bleh my live cd takes forever to boot, ill let you know what happens once i actually get to it [10:02] twb: I think he mean from another computer [10:02] PresuntoRJ, was that for me ?? [10:03] Well, both of those export the working tree via HTTP as the current user on a given port -- just like Python's built in HTTPd implementation [10:03] sd-d_: yes... try from the folder you want to browse $ python -m SimpleHTTPServer [10:03] twb: never tried with busybox... I'll give it a try [10:04] PresuntoRJ: unfortunately you'd need the larger busybox in Ubuntu -- the one they give you to boot with doesn't have the httpd applet :-( [10:04] sd-d_: they are both incredibly unsafe... do it for LAN access only... set a proppet firewall rule (with ufw) for that [10:04] But "busybox httpd" works on any Debian box you're likely to run into :) [10:04] twb: cool [10:05] sd-d_: do you know how to use ufw to set up a firewall rule ? [10:05] sd-d_: why do you want to access the directory tree in a web server? Maybe there's a better way, like rsync. [10:05] server....you could use apache couldnt you? then put the files you want under the /var/www [10:06] LordKitsuna: yes [10:06] i hardly know what im talking about so just ignore me if tahts a stupid idea lol [10:06] Or really, you should use /srv/www or so -- /var/www is vestigial [10:08] all i know is i run a gazzel website (well kinda im more or less a chooser and my friends do the coding bit) and i can host shit in the /var/www so i just thought id throw it out as an idea [10:11] LordKitsuna: those are all pretty stupid ideas, even mine, if you don't know what you are sharing... at least with apache you could set up a password (htpasswd), and share only your home files, and choose not to follow symlinks... and NEVER FORGET to set a firewall to prevent access from where you do not trust in the first place [10:12] LordKitsuna: but anyway, if its only temporary... [10:12] PresuntoRJ, the file system shows as EXT3/4 (waht?) and i cant figure out how to use fsck right lol ill keep trying tho [10:12] hi! i accidentially did a ``chown -R foo: /``. Is there some (semi-)automated way to restore permissions to system defaults? [10:13] oh wait [10:13] hells yea [10:13] there is a gui for fsck [10:13] twb: if its for the access per-se, why not keep it to ssh/scp ? [10:14] LordKitsuna: a couple of questions... GUI for fsck? cool... and ? GUI? are you running your server with a GUI ? really? [10:14] LordKitsuna: not wrong, just unusual [10:14] PresuntoRJ, the check finished like instantly and said it was clean also no as i said i have a ubutu desktop live cd with me not server so natrually it had a gui [10:15] LordKitsuna: not judging here... I do this at home too... just said it was unusual [10:15] LordKitsuna: clean for every partition (if more than one, of course) [10:17] PresuntoRJ: that, too. [10:17] actually i know why it was so fast now, i did it via command line just to be sure and got the following error "permission denied while trying to open /dev/sda you must have read/write to the file system or be root [10:17] PresuntoRJ: but you can hand out rsyncd access to anonymous users, and it supports DAV-style listings. [10:17] It really depends what he wants to achieve [10:17] and no my server itself has no GUI but i figured it would be easyer to just use my ubutu desktop live cd to fix it [10:18] LordKitsuna: try sudoing it first... sudo fsck /dev/partition [10:18] LordKitsuna: what is this alleged "gui fsck" called? [10:18] LordKitsuna: or gksudo if its a GUI application [10:18] PresuntoRJ: you don't need to use gksudo to launch a GUI -- the difference between gksudo and sudo is how it asks for a password. [10:18] twb: its the system/admin disk utility [10:19] twb: or whatever the name in english... it has a little drive icon (in pt-BR: Utilitário de Unidades) [10:19] twb: you can mount, umount, check, format, etc [10:20] twb: I think even partition, though I prefer and trust gparted for that [10:20] If you open up a terminal and run xprop, then click on the window, what is the WM_CLASS ? [10:20] (That's usually the "real" app's name) [10:20] twb: I use gksudo for GUI basically cause I would tell him to run via Alt+F2 also... ;) [10:21] PresuntoRJ, and when i use sudo fsck i get "device or resource busy while trying to open /dev/sda filesystem mounted or opened exclusively by another program? [10:21] LordKitsuna: umount it first, from the livecd [10:21] i did its not mounted [10:21] LordKitsuna: never try to fix a drive/partition while in use (mounted) [10:21] LordKitsuna: wiered [10:22] LordKitsuna: do you have it opened with gparted? [10:22] LordKitsuna: try $ sudo lsof -n | fgrep sda1 [10:24] PresuntoRJ, this might sound really stupid but how do you make the | (i copyed that from your message) i cant find that on my keyboard [10:27] PresuntoRJ, oh wait nvm i found it, it had a break in it on my keys so it looked like something else [10:29] PresuntoRJ, lsof :WARNING cant stat () tmpfs filesystem /cow output information may be incompleate lsof: WARNING cant stat() fuse.gvfs-fuse-deamon file system /home/ubuntu/.gvfs output information may be incompleate [10:32] LordKitsuna: no worry... the WARNINGS are for unaccessible folders (usually there) [10:33] LordKitsuna: if there is no hit for sda1 (guessing your partition is /dev/sda1 , of course) I am not sure what could be happening to prevent the fsck [10:34] PresuntoRJ, well i tried sda then sda1 and 2 just to be sure and those are the errors i got for all of them [10:35] LordKitsuna: are you sure that is the name of the HDD on your system? [10:35] LordKitsuna: it should have worked if it is correct and unounted [10:35] umounted [10:36] For things that are managed by upstart, for example, avahi-daemon, what is "good practice" to do to not have that service started/stopped except manually, rather than automatically? [10:36] I mean, upstart's nice and all, but there's no actual management system to manage it like there are SysV/LSB style init scripts. [10:36] Psi-Jack: what do you mean? [10:36] PresuntoRJ, yea its just shown as "/dev/sda" in the mounting manager and it shows as unmounted [10:37] PresuntoRJ: like, to stop a LSB script from starting during init, you'd update-rc.d -f servicename remove [10:37] I want to stop avahi-daemon from starting up on it's own. [10:37] Psi-Jack: i think they have more or less the same goal... where upsatart is an attempt to rewrite init.d in a kind of better way... not sure how... there is literature for that in the ubuntu site [10:37] !upstart [10:37] Upstart is meant to replace the old Sys V Init system with an event-driven init model. For more information please see: http://upstart.ubuntu.com/ [10:38] Yeah, not really covering my topic, actually. [10:38] Heh [10:38] LordKitsuna: but there are partitons under it? sda1 or sda2 ? [10:38] The only way I can figure to stop a service from auto-starting, is to remove it's event states. [10:38] LordKitsuna: which is root? which is boot? which is home? [10:39] As-in, editing /etc/init/avahi-daemon, and commenting out the start line. [10:39] Psi-Jack: you could try sudo chmod 644 the script file [10:39] It's not a script file. [10:39] it's a .conf file for upstart. [10:39] Psi-Jack: or update-rc.d --remove it [10:39] Again [10:39] Not an LSB script. [10:40] :) sorry [10:40] upstart's not handled by rc.d's, it's handled by upstart. [10:40] Which is why I'm asking the question I'm asking. :) [10:40] PresuntoRJ, im not 100%sure i thought i had it as default (it put /home and stuff in seperate parts) but it looks to all be one [10:41] PresuntoRJ, i did i few installs of it so its hard to remember what it ended up with in the end [10:41] Psi-Jack: but upstart still run the init scripts... just under upstart now [10:42] PresuntoRJ, i checked with the disk utility its all one partition [10:42] PresuntoRJ, or at least thats what it says [10:42] There's a big difference between /etc/init.d/ and /etc/init/ [10:42] LordKitsuna: you could try a bit of a labor here [10:42] create a /mnt/sda1 folder [10:42] then a /mnt/sda2 [10:42] and so on [10:42] mount them there , manually [10:43] browse for a while until you figure out who is what [10:43] you know what goens in your /home, dont you? [10:44] Psi-Jack: have you looked in /etc/default [10:44] Psi-Jack: http://upstart.ubuntu.com/misc/upstart.pdf [10:45] PresuntoRJ: For? There's nothing in /etc/default/ for avahi-daemon [10:45] ill need to have my friend do all this [10:45] hes the one who knows what hes doing [10:45] ill just end up breaking it more [10:45] thanks for the help [10:45] And that PDF is pretty much so old it's not even useful, nor it's contents useful. LOL [10:46] upstart's design ideas started in 2006, when this document was made. heh === ivoks_away is now known as ivoks [10:47] jdstrand: I know we've briefly chatted about it a number of times now, but we've never really gotten anywhere... ufw and libvirt's use of iptables... How can we make them better friends? [10:48] Psi-Jack: sorry, never read it... :D just found it [10:48] heh [10:48] jdstrand: I don't know if we've discussed this particular approach before, but how about if ufw had a concept of a "transient rule", i.e. a rule that gets added through ufw, but doesn't persist across reboots. [10:48] PresuntoRJ: Well, no offense, but it's obvious you know pretty much nothing about upstart, so you really can't help. ;) [10:49] Psi-Jack: no offense at all [10:49] Psi-Jack: we try to learn as well as we try to teach and help [10:49] Like I said, it /seems/ the only way to get, for example, avahi-daemon, to not run at startup, is to comment out the start rule it has, so it has no start event to trigger it's startup. [10:50] Psi-Jack: if upstart was not kind of obscure, it would be obvious for you too [10:50] upstart is by far, an incomplete replacement to LSB init scripts. [10:50] Psi-Jack: worst case scenario, at /etc/rc.local you could call for a service avahi-daemon stop [10:50] ugly ! [10:50] I mean, it doesn't even have anything even close to error tracking/handling needed for things such as CRM management of services. [10:51] Psi-Jack: I believe it was not the intention... it does asynchronous and inter-dependents starts pretty well... [10:52] Yeah. It works well, beyond it's limitations. [10:52] Psi-Jack: and it might do exactly what you asked for, I just don't know how to help you my self [10:52] But, it's limitations outweighs it's actual usefulness, which is it's bad side. ;) [10:52] PresuntoRJ: I really don't think it does, actually. [10:53] No matter what, I have to hack up the .conf file itself to make it stop, there's obviously no other way. [10:54] Psi-Jack: the most obvious trick I could think of would be move the avahi-daemon.conf to avahi-daemon.conf.disabled ... [10:54] I have basically two choices. Hack the avahi-daemon.conf and comment out the start rules. Alternatively, add a /etc/default/avahi-daemon file with START=false and hack the avahi-daemon.conf to check for it during the pre-start and make it exit if START != true [10:54] PresuntoRJ: Which disables it completely from even manually starting if I wanted to. [10:55] Psi-Jack: and from what I have found now, update-rc.d also works to disable most upstart scripts [10:55] No, it doesn't. [10:55] It has absolutely no effect, actually, because upstart doesn't care a spit about what's in /etc/rc#.d [10:56] Psi-Jack: good to know [10:56] All the /etc/init.d/'s are to upstart controlled services are is symlinks to upstart's control interface/ [10:56] That's it. ;) [10:56] Ubuntu 10.04 doesn't even use the old init system at all during boot up. [10:57] It's actually upstart itself that handles starting the /etc/init.d LSB scripts, now. [10:59] Heh [10:59] Psi-Jack: lol [11:00] Even upstart's faq is out of date now, too, because it said to reload the upstart configuration, use initctl reload, but that fails because it's missing a job name. [11:00] It's actually initctl reload-configuration now. [11:01] I dunno.. At this point, I'm thinking upstart is a dead-end project of Canonical's. It had great ideas, just not implemented well or fully, after 4, gaining quickly on 5 years now. [11:01] Psi-Jack: have you read about initctl ? [11:01] initclt list [11:01] etc [11:01] PresuntoRJ: Yep. [11:02] Like I said, the actual docs on upstart.ubuntu.com are out of date, already. [11:02] Psi-Jack: it is sad [11:03] I'm wondering how Fedora's systemd will end up being. [11:03] They're moving to it next release I hear, since it's finally just about ready for actual production use. ;) [11:03] Heck, it might even make it into RHEL6, but I'm not sure of that, yet. [11:06] I remember Solaris's SMF init system. Amazing stuff, great ideas, well done, even. [11:07] upstart was ideally going to be similar, but better, but... It fails. ;) [11:10] Psi-Jack: you should file a bug report on upstart... at least it call their attention [11:10] On what? The whole damned thing's still not even close to production quality. LOL [11:11] hehehehehehe. [11:12] There's even a brainstorm on how systemd is better than upstart and ubuntu should replace upstart with systemd. ;) [11:12] And ironically, the votes are also in favor of it. [11:12] systemd *is* better than upstart [11:13] It's just not production-ready [11:13] twb: Yeah. I've been noticing that. [11:13] It /almost/ is. [11:13] They were actually going to roll it out in f13, but it didn't quite make it. [11:13] personally of the three, I've been most impressed by Squeeze's startpar [11:13] startpar? hmmm [11:13] Never heard of startpar [11:14] Since 1) it works; and 2) it's backwards-compatible; and 3) the speed gain is on the same order as upstart or systemd [11:14] Psi-Jack: As of Squeeze, Debian defaults to reordering sysvinit jobs based on LSB headers, and running them in parallel. [11:14] Psi-Jack: I have found a "start on never" condition you should try on the upstart avahi-daemon.conf file [11:15] Psi-Jack: it should not start up on boot, and still be available for manual instructions [11:15] PresuntoRJ: Which would be the same as not giving it a start rule at all, simply commenting it out. LOL [11:15] Psi-Jack: :-p [11:15] heh [11:15] I'm also *really* not sure about putting init in the hands of the kinds of people that get off on dbus. [11:16] Psi-Jack: I still do many init.d scripts my self... [11:16] Psi-Jack: that's why I never got to understand the upstart model [11:16] I've done both, for many years. [11:17] Well, upstart, only a few months. [11:17] But, yeah, I go in constantly having to fix broken "LSB" scripts because they're definitely and obviously NOT LSB. [11:17] Everytime I see "set -e" in an init script, I cringe. [11:18] Psi-Jack: pretty much every LSB header in Debian should be fixed now [11:18] Since it's a requirement for that startpar stuff I was talking about [11:18] That is, absolutely, and posatively, ALWAYS the /worst/ thing you could possibly do in an LSB init script, is set -e [11:18] twb: is this startpar also event driven ? does it respawn dead daemons? [11:18] PresuntoRJ: no [11:18] Yeah, startpar fail then. [11:18] PresuntoRJ: it's a conservative/incremental improvement [11:19] SMF, upstart, and systemd, all have the advantage of watchdogging each service so if it stops, it can respawn it. [11:19] inittab also did it quite well a looong time ago [11:19] Whereas upstart and systemd are more like "works as long as you don't do anything interesting" [11:19] I will say this though. [11:20] upstart IS still better than djb's daemontools. THAT was pure junk. [11:20] twb: pls, don't try to customize our scripts, they were meant for out of the box only ! [11:20] :-/ [11:20] PresuntoRJ: by "interesting" I mean things like booting / and /home off NFS [11:20] Ahhhhh.. [11:20] You know, like unix has been doing since the 80s [11:21] twb: ldap? anyone? [11:21] systemd is targetting F14. Which should be ... [11:21] twb: I really miss CDE from time to time [11:21] It completely and totally fails to work in lucid due to cyclic dependencies and race conditions in upstart jobs [11:21] Look, I'll show you my workaround... [11:21] Just around the corner now. [11:21] lest all go back to system 4.4 (pre BSD, pls) [11:21] twb: heh, ouch! Yeah. I can see that. [11:22] printf %s\\n >/etc/init/mountall-net.conf 'description "Mount network filesystems"' "start on startup" "script" "sleep 2;while :;do pkill -USR1 mountall||:;sleep 0.1;done" "end script" [11:22] Yuck! [11:22] Yes, that's right, I just ignore events and have it try to mount any not-yet-mounted network filesystems every tenth of a second, FOREVER [11:23] Yikes. [11:23] mountall(8) is a half-assed kludge because upstart forgot to solve mounting filesystems [11:24] twb: let the io wars begin ! [11:24] Again, AND anew! [11:25] * X-2 grabs his old commandor64 [11:26] yeah, it seems systemd took all the good ideas from SMF. ;) [11:29] In fact, systemd uses ideas from both SMF and launchd, which is fantastic. [11:29] That's /exactly/ what I've been waiting for for decades. [11:29] heh [11:38] yeah, I'm gonna try the alpha version of fedora 14, since it uses systemd. Wanna see it in action for myself. [11:58] Hi there [12:00] I need a help with a bind server on ubuntu. I configured my DNS server I tested it from another server ... when I use command dig mail.domain doesn't work but if the command is dig domain it works. [12:00] I badly need mail.domain to be resolved [12:22] soren: hey. I've not really had time to add ufw support to libvirt. I kinda figured that I needed to add FORWARD (and these days maybe ebtables too) support to ufw first. that said, all the necessary chains should already exist in ufw (ie, even though ufw doesn't manage the forward chains via the cli, the chains are there) [12:22] soren: so transient rules would be quite easy [12:24] soren: well, though I don't do anything with POSTROUTING-- strictly FORWARD [12:25] Right. [12:25] jdstrand: Have you looked at the nwfilter stuff at all? [12:27] (currently) [12:29] soren: no [12:30] jdstrand: Ok. [12:32] soren: reading about it now, it seems their use of chains and subchains is quite compatible with ufw === zoopster1 is now known as jpugh === jpugh is now known as zoopster [12:33] soren: in that libvirt and ufw should stay out of each other's way currently, and that adding support to ufw wouldn't be horribly difficult (though, we'd need some new infrastructure) [12:37] jdstrand: Yeah, not maverick material, clealy. [12:37] clearly, even. [12:38] jdstrand: It sounds really neat. I'm trying to get it working right now. [12:39] cool [12:54] jdstrand: Oh, I never got around to asking you about this... Now that we run kvm guests as libvirt-qemu:kvm, what about disk image ownership? Does it get mangled or does libvirtd fiddle with ACL's or something? [12:55] soren: it gets mangled. but it did before too-- just to root:root [12:55] ?!? What, really? [12:55] Why would it do that? [12:55] soren: yes-- 0.8.3 does this sort of thing automatically [12:55] Oh, did it drop CAP_DAC_OVERRIDE ? [12:56] I didn't look at the implementation, I saw the results [12:56] * soren still finds that *incredibly* offensive. [12:56] yeah, you are not ht eonly one [12:56] and there is no way to disable it that I know of, cause it happens in the DAC security driver, which the other security drivers stack on top of [12:57] soren: under some circumstances, it will put the files back after it is done with them [12:58] soren: that is not true of disk images, but is true of things like a usb key. unfortunately, having it use your actual cdrom device (eg /dev/sr0) will change that until your next reboot (when udev puts it back to what it is supposed to be) [13:03] jdstrand: dynamic_ownership in qemu.conf seems to be handy. [13:03] # Whether libvirt should dynamically change file ownership [13:03] # to match the configured user/group above. Defaults to 1. [13:03] # Set to 0 to disable file ownership changes. [13:03] #dynamic_ownership = 1 [13:03] soren: oh, I did not see that [13:03] soren: nice. though, we can't turn that to '0' by default without breaking *a lot* [13:03] I only just found it now by tracing back through the DAC override code. [13:04] soren: but it is good to know it is there [13:04] jdstrand: Yeah. Sadly. [13:04] mdeslaur: ^ [13:04] Do we have /any/ idea why it's not based on acl? [13:04] soren: I would imagine for maximum portability [13:05] one would think it could try acl first then fall back [13:05] It wouldn't be hard (nor unusual for libvirt) to attempt fancy new things, and if it fails, fall back to old, crappy things. [13:05] but I've not looked at it [13:05] yeah [13:05] it's done things like that with qemu for forever [13:07] yeah, +1 for acls...the chowns it does sucks === xfaf is now known as zul [13:19] :( someone dropped my favourite virt-viewer patch. [13:24] soren: what was it? [13:33] mdeslaur: The one that let me not have to put "-c qemu:///system" on its command line every single time. [13:34] soren: :( [13:34] * soren headdesks [13:34] Oh, well. [13:35] * soren fixes libvirt [13:35] soren: please add it back [13:35] mdeslaur: I'll fix it properly this time. [13:46] How do I shed one of group memberships? [13:46] I mean, just for a single process, until it terminates. === harrisonk_zzz is now known as harrisonk [13:47] From the commandline. [13:49] is there a log of everyone that logs in to a server? [13:50] harrisonk: /var/log/auth.log [13:50] thanks [13:50] hi [13:51] I have a weird issue of ubuntu server getting freezed, I do not see anything in dmesg, kern.log and syslog, daemon.log [13:51] is there a way to investigate it further ? [13:51] I have enabled mcelog too [13:51] Please suggest/guide [13:51] I am running Ubuntu Server Hardy 8.04 [13:52] help.ubuntu.com [13:53] then click on the server guide at the bottom [13:53]