[00:02] Hypnoz: is it possible to do this? "sudo tar zcvf - SOURCEDIR | ssh user1@remotehost 'cd DESTDIR; tar zxvf - '" but, preserving the file permissions and ownership? [00:03] * SpamapS drums his fingers as he waits for mysql to build in a PPA......... [00:04] I was thinking about his approach, but couldnt preserve ownership and stuff, so I did "tar zcvf - SOURCEDIR | ssh user1@remotehost "cat > /DESTDIR/DESTFILE.tar.gz"" so now I have a huge tar file I cannot extract )) [00:04] * SpamapS also drums fingers waiting for mongodb to build [00:04] progre55_: that is possible, I've done it before. [00:04] SpamapS: which one? [00:04] progre55_: precede your 'cat' with a touch/chmod/chown command [00:05] progre55_: oh you want the contents to have the same uid's/gid's ? [00:05] yeah [00:05] cause it's a huge dir [00:05] with lots of files.. [00:05] progre55_: are the UID's/GID's the same on the destination box? tar usually uses names so they will map right on the dest host [00:06] yep [00:06] progre55_: so whats wrong then? Not sure what you want to do that the command you gave won't do [00:08] SpamapS: the dir on server 1 is owned by root and mysql, but the user I'm ssh'ing it with is different.. so with the first approach all the files were under that user's ownership [00:09] but with the second approach, I dont have enough space on my second server to untar the dir.. cause the dir is 19.3 Gb, the tar is 8.5 and I only have 25Gb [00:12] progre55_: well thats because you're not allowed to create files as another user unless you are root [00:13] well yeah I know that ) [00:13] so... be root [00:13] and that's why I was asking if it's possible to do it.. [00:13] progre55_: why not just use rsync? [00:13] hm.. that's an idea ) [00:13] * SpamapS realizes he is taking it for granted that you would know about rsync. :) [00:14] but dont really know the syntax, never used it ) [00:15] very similar to scp [00:15] rsync localdir/ user@remotehost:remotedir/ [00:15] the trailing slash on the source is important [00:15] if omitted, the destination will be where to put a dir called localdir, if its there, them remotedir will be made to look like localdir. Make sense? [00:17] hmm.. yeah =) [00:17] but how does it connect? [00:17] I mean, does it ask for password or smth? [00:17] progre55_: it goes over ssh [00:17] oh ) [00:17] progre55_: so it'll ask for ssh credentials [00:17] okay ) [00:18] thanks man, I'll try it now.. [00:18] rsync is amazing [00:18] you are a changed man now that you have discovered it [00:18] haha =) [00:18] let me experience it first )) [00:19] rsync is like pizza and sex.. even when its bad, its good. [00:35] hmm.. rsync creates the dir itself, but doesnt copy the files, says "skipping directory ." [00:35] SpamapS: ^^ [00:36] progre55_: rsync -a [00:36] I ususally do -av [00:36] progre55_: or -r [00:36] yeah, -av is good [00:36] will show progress as it goes if you add -P [00:36] (and will keep partial files which is good if you have giant files and low bandwidth) [00:37] progre55_: -a means keep permissions and ownership the same too [00:37] sort of mimics cp -a [00:37] * SpamapS signs off [00:38] aha, cool, thanks [00:46] hm.. I like rsync a lot =) [00:51] New bug: #629929 in apache2 (main) "MM (10.10) does not connect to the internet" [Undecided,New] https://launchpad.net/bugs/629929 [01:16] <_Techie_> is there any reason that root would have excessive amounts of files on the hard drive, http://i161.photobucket.com/albums/t212/xperiment62/usage.jpg [01:17] _Techie_: is this only looking in /root/ or across the whole system? [01:17] <_Techie_> thats looking @ / [01:19] as root, try running cd / && du -sh * [01:19] maybe keep digging down into the larger foldres to find where things are getting large [01:20] <_Techie_> ooh, i see where a ton of it is now [01:20] <_Techie_> website backups [01:21] <_Techie_> thanks heaps Hypnoz, i know exactly what to do now [01:24] <_Techie_> also is there a bug in 9.10 that causes it to cache alot to RAM [01:25] <_Techie_> RAM was flushed of hard drive cache ~ 25 minutes ago, and now the RAM usage is at 1.08gigs, with 232.15 MB of that being processes [01:30] other than chkrootkit, does anyone know other root kit checkers or similar programs? [01:44] EvilPhoenix: $ apt-cache search rootkit [01:44] chkrootkit - rootkit detector [01:44] rkhunter - rootkit, backdoor, sniffer and exploit scanner [01:44] unhide - Forensic tool to find hidden processes and ports [01:44] JanC: thanks [01:44] (you could have done the same apt search, of course ;) [01:45] JanC: apt-cache search is being evil on my system [01:45] cant even find already installed packages [01:46] i'm reinstalling it all tomorrow [01:46] well, if you are infected by a rootkit, no program is guaranteed to find it, of course... === dendrobates is now known as dendro-afk [02:00] where besides the hostname file are hostnames stored ? === progre55__ is now known as progre55 [02:39] dominicdinada: in the kernel [02:39] dominicdinada: or kernel-aware [02:40] dominicdinada: man sysctl [02:40] pmatulis: ok i will check i === dendro-afk is now known as dendrobates === dendrobates is now known as dendro-afk [04:51] hello [05:30] quick newb question [05:30] nothing needs to be restarted for php.ini changes to take effect, right? [06:06] question: is there a way to upgrade a ubuntu server to centos remotely ? [06:23] "Upgrade" [06:26] is there anyone here that will help me purge out ispconfig and all the other crap that comes with it? I can setup a remote session so you can access my ssh [07:33] Hi alll [08:31] hey, any service configuration utils--similar to the one on centos--on ubntu? [08:36] New bug: #630028 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5.4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/630028 [11:29] I installed virtualbox on my 10.04 server, and now I am stuck wondering, can I avoid installing X11 and still use it? [11:31] hey, anyone here? === _Techie_ is now known as _TechAway_ [12:27] q_a_z_steve: VirtualBox itself runs well without an X server. but I think all existing packages depend on X.org, so you'd need to repackage or compile/install vbox yourself [13:03] I have this DHCP/DNS server which i JUST got working properly with ddns-update and all (DHCP updating the DNS and such). What is not irritating me is that when I add an server to dhcpd.conf file as reserved - the DNS does not get update upon lease. Why? O_o === dendro-afk is now known as dendrobates === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates === dendrobates is now known as dendro-afk [15:33] 10.04.1 x64 server -- MySQL wont start.... i see this in 'messages' .... http://pastie.org/private/vdkr4casa2zah1gnxn8o8a [15:33] any ideas? [15:33] `status mysql` => mysql respawn/post-start, (post-start) process 2385 [15:33] the pid changes every few seconds [15:33] i assume its in some sort of loop [15:35] LowValueTarget: seems like AppArmor doesn't like your mysqld to access the new config file /usr/wp/conf/mysql/my-normal.cnf [15:36] you'll either need to disable the apparmor profile for mysqld (bad) or modify the existing profile to allow access to that file [15:37] joschi: ha! I just stopped apparmor and started mysql [15:37] works like a charm [15:38] i need to find where the mysql profile is for apparmor [15:38] LowValueTarget: yes, but if it's a public accessible system, you should invest some time in reading about apparmor and how to use it [15:38] /etc/apparmor.d/usr.sbin.mysqld [15:39] kklimonda, joschi I just add the path in there? [15:39] LowValueTarget: you could do that [15:39] is that a list of "allowed" paths [15:39] LowValueTarget: it's a little bit more, but that's certainly part of it [15:39] then permissions for each [15:39] ill read up on it [15:40] LowValueTarget: https://help.ubuntu.com/10.04/serverguide/C/apparmor.html [15:40] LowValueTarget: for starters just duplicate the line for /etc/mysql/my.cnf in the apparmor profile and adjust the path of the duplicated line [15:43] i did. Thanks joschi === dendro-afk is now known as dendrobates [16:13] Bleh. [16:14] Now I have to figure out how to convert this fricken upstart init for libvirt-bin into a proper LSB init script. [16:15] Because upstart doesn't have ANY kind of proper LSB error codes at all for CRM management. === dendrobates is now known as dendro-afk [16:38] Hello, anyone familiar with this problem?: mysql -u root gives ERROR 1045 (28000): Access denied for user 'root'@'localhost'. I have removed all mysql packages and reinstalled them making sure I do not set a root password. Still it does not work. [16:40] wildem : mysqladmin -u root ? [16:40] Cannot find an answer on the web [16:41] TANATHOS: mysqladmin -u root didnt work before but now it seems to work [16:41] mysqladmin --user=root password 'my_root_password' [16:41] actually that should be the sintax [16:41] *syntax [16:42] Then i get the same error [16:42] or if i try to set up a database [16:42] because [16:42] you should use [16:42] mysql -u root -p [16:42] and the input the password [16:42] I have set password blank [16:42] when i installed the packages [16:43] wildem: not a very good ideea but still [16:43] yeah, just for ease of development atm [16:43] set a password and then 'mysql -u root -p' [16:43] with mysqladmin --user=root etc? [16:43] yes [16:44] mysqladmin --user=root password 12345' [16:44] mysqladmin: connect to server at 'localhost' failed [16:44] error: 'Access denied for user 'root'@'localhost' (using password: NO)' [16:44] except with one more ' [16:44] :)) there is no ' [16:44] before 12345, accidentally deleted it [16:44] i removed the password before pasting ^^ [16:44] there was a ' before [16:45] wildem, add -p and see if it'll ask you for a password [16:45] I was thinking how to explain him that [16:46] effj, TANATHOS: tried that [16:46] still same problem edcept using password: yes [16:46] wildem: mysql -u root -p password [16:46] TANATHOS, oh sorry, you had already written it above, didn't see, kinda just switched to this window :/ [16:47] TANATHOS: but there is no passowrd set :/ [16:47] effj : no problem [16:47] :) my usuall advice to mysql problems is "install postgresql" :) , yes i knoe, it isnt helpful [16:47] Jesus [16:47] wildem: last time, set a password with mysqladmin then try to connect with -p argument [16:47] I removed all mysql-related packages [16:47] reinstalled, without supplying a passowrd [16:48] and still it does not work :( [16:48] i cannot set a password with mysqladmin TANATHOS [16:48] Should I be able to do that? [16:48] wildem: it probably left old db files to some dir ( usually its in /var/something/something ) [16:48] wildem: you should be able to do that if it's the first install [16:49] its not the first install, it's a reinstall of mysql now [16:49] simplexio: I'll have a look [16:50] the initial root user has no password in mysql and you should be able to set it with mysqladmin [16:50] there is a way of resetting the root passwd [16:51] simplexio: Would it leaving old DB-files keep some old root password? [16:51] TANATHOS: I take it that this should not happen? # mysqladmin --user=root password 'password' [16:51] wildem: /etc/init.d/mysqld stop [16:51] mysqladmin: connect to server at 'localhost' failed [16:51] error: 'Access denied for user 'root'@'localhost' (using password: NO)' [16:52] stopped the service [16:52] wildem: sudo mysqld --skip-grant-tables & [16:52] wildem: mysql -u root mysql [16:53] wildem: UPDATE user SET Password=PASSWORD('YOURNEWPASSWORD') WHERE User='root'; FLUSH PRIVILEGES; exit; [16:53] that should reset your passwd [16:53] TANATHOS: thanks [16:53] hmm sudo mysqld --skip-grant-tables got me stuck in a process [16:54] cant even ctrl + c out of it [16:54] it takes a while [16:54] not too much depending on your box [16:54] ah [16:54] now [16:55] UPDATE user SET Password=PASSWORD('YOURNEWPASSWORD') WHERE User='root'; FLUSH PRIVILEGES; exit; [16:55] TANATHOS: is PASSWORD the old password? [16:55] no [16:56] that's a field [16:56] ah [16:56] not to used to mysql queries [16:56] im a front-end programmer [16:56] wildem: you need to change online what's between '' [16:56] yeah [16:57] I'm not a programmer at all [16:57] :) [16:57] TANATHOS: It seems to have worked! [16:57] thanks a million :) [16:57] you are very welcome [16:57] I'll make sure I set passwords in the future [16:58] !ubottu [16:58] Hi! I'm ubottu's favorite infobot, you can search my brain yourself at http://ubottu.com/factoids.cgi | Usage info: http://ubottu.com/devel/wiki/Plugins | Bot channels and general info: https://wiki.ubuntu.com/IRC/Bots [16:58] !ubottu mysql [16:58] I forgot how I should use her [16:58] :) [16:58] hehe [17:00] anyone here using denyhosts? [17:00] RoyK: just ask [17:01] I just wonder if the distributed thing - how does that work? will any login attempt or block result in the IP being blocked by all denyhosts users? if so, it's quite hard to test this without hassle [17:02] RoyK: I'm sure you mean the package denyhosts which denies ssh access after some failed attempts [17:04] indeed [17:04] RoyK: to be honest I usually use fail2ban easier to use and apt-get-able [17:04] denyhosts is apt-get-able as well [17:04] in lucid, at least [17:05] ups sorry my bad then ( as I told you I never used it) as far as I know is that you can set it to ban a ip after several failed attempts to login [17:05] and for more you can set sshd service not to allow root logins [17:05] well, I guess I'll be going back to fail2ban - that works well [17:07] use a test box for denyhosts - that's what I do most of the time [17:07] well, it's on a test box [17:07] so hand out the ip and we'll help ya [17:07] :)) [17:07] I just worry if denyhosts will ban my IP if I test a login failure [17:07] 213.236.233.237 [17:07] on my way [17:08] :) [17:09] not banned so far [17:09] Sep 4 18:08:53 droetker denyhosts: Added the following hosts to /etc/hosts.deny - 194.106.155.145 (unknown) [17:09] got a ban [17:09] :)) [17:09] thanks :) [17:09] I am banned [17:09] :) [17:09] you are very welcome [17:09] now, do you have a lucid test box? [17:10] jesus it's been a while since I spent time in here [17:10] RoyK: I am in the middle of changing ISP's I don't have internet for the next two days :) [17:10] what do you need it for [17:10] just try to install denyhosts and see if 194.106.155.145 is in the hosts.deny file [17:10] s/see/check/ [17:11] I don't think it works that way [17:12] it's supposed to be distributed - my hosts.deny file already contained 30 hosts at the time of install [17:12] if you have the synchronize data thing installed [17:12] I just apt-get install'ed it [17:12] but 30 hosts is way too few if all users would sinchronize they'r files [17:13] sure, but can you still test? [17:13] check /var/log/denyhosts [17:13] to see if there is any log about synchronization [17:14] erm [17:14] 2010-09-04 17:32:45,672 - denyhosts : INFO denyhosts synchronization disabled [17:14] but then - why was there 30 IPs in hosts.deny? [17:14] RoyK, if it would be a distributed thing in your local deny.hosts you would have entries poppin up that got there from other users [17:14] RoyK: there is a setting saying synchronization on / off [17:15] if you want to use it [17:16] ok guys have a good day c ya [17:19] WinstonSmith: it _is_ distributed, but I didn't enable that [17:19] RoyK, yes i saw that later. but where did the deny.hosts entries came from then? [17:24] no idea [17:26] WinstonSmith: perhaps the package installer added them - if so, that's not very nice [18:06] New bug: #625698 in php5 (main) "php5-fpm assert failure: *** glibc detected *** /usr/sbin/php5-fpm: double free or corruption (fasttop): 0x0a87a958 ***" [Undecided,New] https://launchpad.net/bugs/625698 [18:07] New bug: #625695 in php5 (main) "php5-fpm crashed with SIGSEGV in php_log_err()" [Undecided,New] https://launchpad.net/bugs/625695 [18:25] seems running alpha distros in production isn't a good idea ;) [18:37] anyone run the coherence upnp server on their 10.04 lts server? [18:37] python-coherence is the package. it doesnt come with an init script, which i found odd [20:21] New bug: #630391 in unixodbc (main) "Missing libodbc.so symbolic link" [Undecided,New] https://launchpad.net/bugs/630391 [20:22] does a security update indicate a kernel update which will require a restart? [20:27] * Datz has his answer [20:31] New bug: #630396 in whois (main) "update .dz ccTLD whois server" [Undecided,New] https://launchpad.net/bugs/630396 === harrisonk is now known as harrisonk_zzz [21:09] <_Maximo_> hello, would it be possible to install ubuntu server over a slackware install via ssh remotely? === _Maximo_ is now known as flip [22:24] hi [22:24] fala ae [22:28] oi [22:32] oi [22:55] hey, im putting ubuntu server on a laptop as a ssh server [22:56] so like would i ssh to the server, then ssh from the server to the desktop I want to ssh to? [23:03] What is a good solution to give users upload/download access to files without them having shell access? [23:04] JasonMSP : using FTP ? [23:05] yes but from what I understand FTP isn't a great solution when it comes to security. [23:05] true [23:05] but easiest probably [23:05] echo "/sbin/nologin" >> /etc/shells [23:06] useradd -s /sbin/nologin $username [23:06] is simplest [23:06] sftp should work with /sbin/nologin [23:07] also an option :) [23:10] thx [23:10] i've got VSFTPD working on my system, but haven't been able to get a secure connection to work. [23:12] JasonMSP: sftp is for ssh ftp [23:12] well, sftp I was thinking about :) [23:16] ssh ftp would require shell access though would it not? I also have passwords disabled so that would require access via key which would be too much for customers. [23:17] JasonMSP: sftp doesn't need shell access [23:18] hmmm... ok [23:19] Hello, I have a problem with Wake On Lan in Ubuntu Server 10.04. When I shutdown the computer, it doesn't keep the interfaces on. In ethtool it says wake-on: g [23:20] Razican: maybe BIOS issue? [23:21] In the BIOS I have configured WOL to enabled [23:24] I have in BIOS ACPI shutdown: S3 | S5: enabled | Wake on LAN: enabled [23:40] hey guys, is it possible to create a rule within UFW to always trust eth0, and only apply firewall rules to eth1? [23:49] intel352: see the manpage (maybe search for "interface") [23:49] (so, yes, it's possible) [23:50] thx [23:50] JanC, just a note, when i was looking at the manual, all references to interface kept referencing an IP specifically [23:51] I want to use the actual interface, not IP, so I can create a generic server image [23:54] intel352: teh example given is "ufw allow in on eth0 to any port 80 proto tcp" [23:54] JanC, ah, nice, thx, i missed that [23:54] much appreciation!