| astm | [root@perseus ~]# showmount -e mynfsserver | 00:38 |
|---|---|---|
| astm | mount clntudp_create: RPC: Port mapper failure - RPC: Unable to receive | 00:38 |
| astm | i'm with a problem on ubuntu server 10.04 | 00:39 |
| astm | in some clients the nfs server just works but in a specific client it doesn't. | 00:39 |
| astm | can anyone help me? | 00:40 |
| astm | problem solved. thanks.. | 00:50 |
| osmosis | is there something lspci, but for getting info about what HDs are installed in my system? | 01:02 |
| === jjohansen is now known as jj-afk | ||
| astm | osmosis: lshw, lshal | 01:04 |
| astm | osmosis: parted | 01:04 |
| osmosis | astm, cool | 01:04 |
| === ivoks is now known as ivoks-afk | ||
| Andre_Gondim | I need to copy all folder except one, how may I do this? cp -R /folder .... | 01:33 |
| demonspork | what is a good network usage monitor for Ubuntu? I would love if there was a good one that could keep daily/weekly/monthly usage stats as well as a live load count - even better if auto generates the report in HTML or something | 01:49 |
| pmatulis | demonspork: cactii mabye | 01:52 |
| pmatulis | !info cacti | demonspork | 01:54 |
| ubottu | demonspork: cacti (source: cacti): Frontend to rrdtool for monitoring systems and services. In component universe, is extra. Version 0.8.7e-2 (lucid), package size 2033 kB, installed size 5488 kB | 01:54 |
| kinygos | Andre_Gondim: perhaps one of the experts here may answer, but i'd suggest rsync with an --exclude switch | 01:54 |
| Andre_Gondim | kinygos, thanks | 01:55 |
| kinygos | Andre_Gondim: anytime | 01:56 |
| kinygos | the Full Circle interview with Leann Ogasawara has been shared on facebook...in case she didn't know she's now famous :) | 01:59 |
| kinygos | would the following command delete the partition table on my disk /dev/sdb... | 02:13 |
| kinygos | dd if=/dev/zero of=/dev/sdb bs=512 count=1 | 02:13 |
| pmatulis | kinygos: that will blow away the boot sector, which contains the partition table | 02:18 |
| kinygos | pmatulis: awesome, thanks :) | 02:19 |
| kinygos | for some reason, running that command not only cleared the partition table on disk /dev/sdb, it also cleared a warning about an invalid flag 0x0000 against /dev/sda | 02:20 |
| kinygos | but i've also lost the disk identifier... | 02:22 |
| Andre_Gondim | kinygos, do you know the syntax? to copy all folder except one? | 02:25 |
| kinygos | Andre_Gondim: i've been using the following (again, i'm a noob so the experts may jump in)... | 02:27 |
| kinygos | Andre_Gondim: rsync -auHxv --exclude=/not_copied --exclude=/dest /* /dest | 02:28 |
| kinygos | Andre_Gondim: check the switches though, for example, -H is to preserve hard links, you may not want that | 02:29 |
| Andre_Gondim | where are the source? | 02:29 |
| kinygos | in my command there, the source is /* | 02:30 |
| Andre_Gondim | hmm ok | 02:30 |
| kinygos | and the destination was /dest | 02:30 |
| twb | You should always specify the trailing slash of directories in rsync calls | 02:31 |
| kinygos | Andre_Gondim: sorry...the command should be: | 02:31 |
| kinygos | rsync -auHxv --exclude=/not_copied/* --exclude=/dest/* /source/* /dest/ | 02:31 |
| kinygos | twb: absolutely right...my mistake, my mistake | 02:32 |
| Andre_Gondim | let me try | 02:33 |
| kinygos | Andre_Gondim: and in that command, the source directory being copied is /source/ which cannot contain /not_copied/ so i will now go to sleep | 02:33 |
| Andre_Gondim | kinygos, many thanks | 02:33 |
| kinygos | Andre_Gondim: anytime, apologies for any confusion | 02:34 |
| Andre_Gondim | no problem ;) | 02:34 |
| n3kl | I am new to libvirt and struggling to get the network to work like I think it should. Is this a good place to ask about it? | 03:19 |
| demonspork | Cacti. I have been over the manual for over an hour and I haven't even successfully gotten it to graph or even begin monitoring my network usage. Anyone have any pointers? my current break point is that I have no idea what I am doing with snmp, all of the guides just say "enter your snmp community" WHAT DOES THAT EVEN MEAN | 03:40 |
| n3kl | a community is like a password. When you go into cacti, you will want to add devices, yes? So when you add the device, you should be able to turn on snmp, then choose the version and set your community and graphs | 03:42 |
| n3kl | you can test to see if snmp is woking with snmpwalk from another box | 03:42 |
| twb | n3kl: yes, or #virt (#libvirt?) | 03:43 |
| n3kl | or locally, but iirc you need to change your /etc/default/snmpd to listen on another interface | 03:43 |
| n3kl | twb: thanks | 03:43 |
| DaveWM | what package would i install to get ciphers for sshd working, i searched apt for blowfish and arcfour but it lists a lot of packages, not sure what i should install | 05:05 |
| DaveWM | i'm working off of a openvz minimal ubuntu server template, so i guess some of that stuff was left out | 05:06 |
| DaveWM | nm, got it working | 05:08 |
| twb | DaveWM: sshd ciphers are compiled in | 05:11 |
| twb | DaveWM: you can choose which are enabled (and their order of preference) by customizing the Ciphers value in sshd_config or ssh_config. | 05:12 |
| twb | Note: the Cipher option (singular) only applies to legacy SSHv1 connections, and you really shouldn't use SSHv1. | 05:13 |
| DaveWM | twb : thanks , i'm trying to get x11forwarding to perform a little better over mobile connection | 05:17 |
| twb | Anything telling you to set "Cipher blowfish" is obsolete; ignore it. | 05:17 |
| twb | Oh, X11. You should look into NX. | 05:18 |
| DaveWM | yea i read plenty stating it as being faster | 05:18 |
| DaveWM | twb : what all would i have to do to set that up? i just did apt-get install nxproxy | 05:25 |
| twb | I don't use NX, so I cna't help | 05:26 |
| DaveWM | ah, ok, well thanks for the tip anyway, looks like a good idea | 05:26 |
| demonspork | crap. I can't check snmp from another machine, my other machine is down | 05:26 |
| DaveWM | twb : using nx running xterm remotely, its oddly faster than a normal ssh session to that server ?? heh | 05:56 |
| DaveWM | still not really great, i was hoping to run quassel irc client remotely, but i think its a bit too resource heavy for that sort of thing on this connection, i dunno | 05:57 |
| twb | If you aren't encrypting NX you probably should be. | 05:58 |
| qman__ | I prefer the irssi + screen method | 05:58 |
| twb | I dunno why you wouldn't just learn irssi and run it in screen on a server | 05:58 |
| DaveWM | i like GUI, heh | 05:58 |
| twb | GUIs are for pussies | 05:58 |
| DaveWM | i am what i eat | 05:58 |
| === zz_sailerboy is now known as sailerboy | ||
| DaveWM | bare in mind i'm like 70% windows and only 30% linux... and that 30% has really mostly spawned recently | 06:00 |
| sid | hi | 06:03 |
| demonspork | so I get graphs that generate and update properly in cacti for localhost users, processes, load and memory | 06:22 |
| demonspork | but the graph for my snmp traffic monitoring isn't generating | 06:23 |
| _Techie_ | has anyone had experience with ioncube loader? | 06:23 |
| demonspork | I think it is because I have no idea what to put for Index Value in the Custom Data section of the data source | 06:23 |
| cedm | hi | 06:39 |
| cedm | can anyone let me know if I can upgrade an EC2 ubuntu server from 9.10 to 10.04 LTS with a plain dist-upgrade? | 06:40 |
| cedm | as in the same way as upgrading a local machine? | 06:41 |
| cedm | ok... how about just upgrading the kernel via a apt-get update && apt-get upgrade? is it safe? will the server automatically pick up the newest kernel on reboot? | 06:46 |
| cedm | nevermind... | 06:59 |
| savid | Hi, I have a crontab in /etc/cron.d, but it doesn't appear to be running. Any ideas what might keep it from running? I have a simple test which does not seem to be working: * * * * * root /bin/echo "TEST" &> /var/log/test.log | 07:16 |
| savid | oh nm, I keep forgetting crontab files can't have "." in the name | 07:17 |
| _Techie_ | has anyone had experience with ioncube loader? | 07:25 |
| DaveWM | twb : apparently i could have saved myself some trouble, i didnt realize that quassel has a client/core(server) component to it, so no need to forward the GUI, just gotta run the client and connect to the core remotely | 07:28 |
| twb | Whatever man | 07:28 |
| RoAk | kirkland, if I wanted to setup a UEC in VM's, should I use briged networking or with NAT will be enough? | 07:29 |
| === Barre_ is now known as Barre | ||
| _ruben | guess i should give up on trying to have dots in my non-fqdn hostname and go for a naming scheme based on dashes or whatever instead | 08:24 |
| UweBollsFunder | hi | 08:30 |
| UweBollsFunder | I'm planning to install Ubuntu Server in a VM. Does it matter whether I select 32-bit or 64-bit? Are there some packages only made for one but not the other? | 08:30 |
| UweBollsFunder | is...uh...anyone around? | 08:33 |
| xampart | yes | 08:37 |
| UweBollsFunder | I already got my answer in #ubuntu: the 64-bit version would not have run at all in Vmware. Thanks anyway though | 08:37 |
| _ruben | 64bits works fine in vmware, *if* your host supports it | 08:38 |
| _ruben | then again, vmware's a company, not a product | 08:38 |
| UweBollsFunder | Yeah, sorry, I meant Vmware Workstation , which is a 32-bit program. | 08:39 |
| _ruben | UweBollsFunder: doesnt matter either, it depends on if your cpu supports 64bits virtualization extensions (amd-v or intel-vt) | 08:40 |
| UweBollsFunder | btw, give a medal to the guy who designed that "Get Ubuntu Server Edition download" page. 3 steps, collapsed by default, with a "Show me how" button that provides screenshots. Page is very minimal but extremely informative. | 08:42 |
| UweBollsFunder | ruben: oh, I see. Yeah, mine doesn't, it's a lower-end C2D. | 08:42 |
| _ruben | ah | 08:44 |
| UweBollsFunder | I can always buy a fancier one if I ever need it | 08:44 |
| UweBollsFunder | we'll see how this goes | 08:45 |
| === sailerboy is now known as zz_sailerboy | ||
| UweBollsFunder | how stable is mdadm between upgrades? Is it the sort of software I should never update because it's risker than sticking with the version that created the RAID? | 08:46 |
| _ruben | never had any problems myself with mdadm upgrades, ymmv though :) | 08:49 |
| UweBollsFunder | allright | 08:57 |
| UweBollsFunder | thanks, and gn | 08:57 |
| Osmosis | good mornig everybody | 09:17 |
| Osmosis | somebody know a way to intall a deb package with dpkg that accept console clauses | 09:17 |
| Osmosis | i need install a software remotely and this is a problem | 09:17 |
| Osmosis | my doubt is how install an aplication that force to you to acept some clause in the middle of the instalation | 09:18 |
| Osmosis | and i want install remotely and can not accept this clausules | 09:18 |
| Osmosis | and i do with a Script, so no option like ssh dpkg or something like that | 09:18 |
| _ruben | those things tend to be controlled through debconf, so with debconf-setselections you can pre-set the proper value, might need to use debconf-getselections or the logfiles to find out the proper debconf entry | 09:20 |
| Osmosis | _ruben where you from? | 09:24 |
| _ruben | .nl | 09:25 |
| tom_w | hi... what do i need to create a dyndns like service with bind9? (not update clinet for external service) | 09:30 |
| _ruben | tom_w: what is it exactly what you are looking for ? | 09:33 |
| Osmosis | ruben what is the name of the package i can not installed | 09:34 |
| tom_w | several routers on dsl should be able to change thir subdomain entries on a local DNS server | 09:34 |
| tom_w | found a howto... http://idefix.net/~koos/dyndnshowto/dyndnshowto.html | 09:39 |
| tom_w | ty | 09:39 |
| Osmosis | _ruben already have in my system debconf, that is the aplication? only have one page in the man and dont explain basicaly nothing | 09:41 |
| _ruben | Osmosis: debconf-set-selections is installed by defaul, for debconf-get-selections you need to install debconf-utils | 09:50 |
| Osmosis | already done thanks | 09:50 |
| overlord_tm | My computer need more time every boot to detect LVM drives. On fresh install it booted just fine, then next day i had to change rootdelay to 90 in order to boot. Today even 90s is not enough :/ What could be cause of that? im using 2VG, each on its own md device, using RAID1 | 10:13 |
| overlord_tm | railing disks? | 10:13 |
| overlord_tm | failing* | 10:13 |
| kinygos | is it strange that /boot is not on the primary partition flagged as the boot partition? | 10:18 |
| twb | kinygos: no | 10:24 |
| twb | the bootable flag is ignored by grub | 10:24 |
| kinygos | twb: thanks :) | 10:28 |
| overlord_tm | how can i check if disk is ok? smartctl? anything else? | 10:31 |
| twb | overlord_tm: smartctl can tell the disk to run self-tests | 10:31 |
| twb | smartctl on its own is unlikely to find anything | 10:32 |
| overlord_tm | what should i do then? i have booted with sysrescuecd and it took 3 minutes to detect logical volumes | 10:32 |
| overlord_tm | yesterday 90s was enough, two days ago it booted in seconds | 10:33 |
| twb | The command is something like "smartctl /dev/sda -T short" | 10:34 |
| twb | The manpage should be clear | 10:34 |
| twb | I'd also ask hdparm if it's in DMA5* mode or so, and check dmesg and logfiles for warnings | 10:35 |
| overlord_tm | twb, i have just executed long test :) | 10:35 |
| twb | Also, maybe you plugged the (external) disk into a USB-1 bus, or you added another device to the machine which slows down the probe cycle | 10:35 |
| twb | overlord_tm: do a short test first | 10:35 |
| overlord_tm | ok | 10:36 |
| overlord_tm | yeah, i did, but it didnt get any faster when i unpluged and rebooted | 10:37 |
| twb | There's a small chance that a full power-off will help | 10:37 |
| overlord_tm | twb, another thing i noticed was that copy speed was dropping. Yesterday it was bout 40MB/s, today i barely reached 12MB/s | 10:43 |
| twb | I don't really care | 10:44 |
| sid | when i try to boot ubuntu 10.04 it gives message mount of filesystem failed CONTROL-D will terminate this shell and retry | 10:59 |
| sid | <sid> snd gives prompt | 10:59 |
| kinygos | can anyone spare 2 mins to look at my rsync command and tell me if i'm doing something silly (i've rebuilt my server so many times) ? i'm trying to copy the contents of one disk into a set of raid partitions that i've mounted in /raid/. what worries me is i'll be doing this on a running system: # rsync -auHxv --exclude=/raid/* /* /raid/ | 11:21 |
| kinygos | (i spent yesterday trying all sorts of ways to do file copies on a running system and failed miserably) | 11:22 |
| overlord_tm | remount read only the filesystem you read from? | 11:23 |
| kinygos | it's a remote server...and i don't have access to external media :( | 11:24 |
| overlord_tm | using LVM? | 11:24 |
| kinygos | i wasn't planning to | 11:24 |
| overlord_tm | i never copied files from live system, you never know in which state it was copied | 11:25 |
| overlord_tm | i either shutdown or use lvm snapshot | 11:26 |
| sid | when i try to boot ubuntu 10.04 it gives message mount of filesystem failed CONTROL-D will terminate this shell and retry | 11:27 |
| overlord_tm | sid, have you checked? http://ubuntuforums.org/showthread.php?t=1305434 | 11:28 |
| === oCean_ is now known as oCean | ||
| === _Techie_ is now known as _TechAway_ | ||
| RoyK | is there a way to completely disable fb on boot? | 12:03 |
| Daviey | SpamapS: When you get this, can you update bug #644587 to state reasons for removal, and the future direction please? | 13:08 |
| uvirtbot | Launchpad bug 644587 in drizzle "Please remove drizzle from maverick (was: fails to build from source on maverick)" [High,Confirmed] https://launchpad.net/bugs/644587 | 13:08 |
| === ivoks-afk is now known as ivoks | ||
| mianosm | Hey guys, could someone tell me why this might happen? http://pastebin.com/uhrrDg8Z | 13:54 |
| === zz_sailerboy is now known as sailerboy | ||
| Babbleback | why when i install an ide drive to use as a back up I get errors on startup about the drives automatically mounted and it stating that the mount points are busy and it doesn't finish starting up? | 14:03 |
| Babbleback | haven't had a chance to format and add the new drive to fstab yet because I can't start up with it installed | 14:03 |
| === sailerboy is now known as zz_sailerboy | ||
| Alan | How do i get ubuntu server to automatically get an IPv6 address? | 14:05 |
| Alan | I've got an IPv6 router running on my network now, and all the other machines manage it fine... | 14:05 |
| Babbleback | should just show up as hda after its recognized in the BIOS correct? | 14:06 |
| xfaf | Daviey: about that nmbd bug i havent been able to reproduce it can you? | 14:26 |
| === ivoks is now known as ivoks-afk | ||
| uvirtbot | New bug: #652545 in apache2 (main) "package apache2.2-common (not installed) failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/652545 | 14:45 |
| SpamapS | Daviey: bug 644587 updated | 14:55 |
| uvirtbot | Launchpad bug 644587 in drizzle "Please remove drizzle from maverick (was: fails to build from source on maverick)" [High,Fix released] https://launchpad.net/bugs/644587 | 14:55 |
| Daviey | SpamapS: Awesome... the release team wanted a little more clarification.. it's "Fix Released" now \o/ | 14:55 |
| SpamapS | yep | 14:56 |
| SpamapS | cjwatson: thanks for that btw. :) | 14:56 |
| cjwatson | ok | 14:56 |
| * SpamapS wonders if cjwatson ever sleeps. | 14:56 | |
| cjwatson | so does my wife | 14:56 |
| ScottK | Want more clarification? | 14:57 |
| SpamapS | ScottK: on cjwatson's wife's perception of cjwatson's sleep schedule, or the bug? | 15:00 |
| ScottK | I wasn't sure, so I was seeking clarification. | 15:01 |
| ScottK | SpamapS: It didn't need to go in the bug, but don't forget once drizzle is in Natty, you can ask for a backport to get it in earlier releases. | 15:03 |
| SpamapS | ScottK: I often forget about backports, good point. | 15:05 |
| SpamapS | That reminds me that I need to backport the latest moinmoin to lucid | 15:05 |
| SpamapS | ScottK: whats the word on backporting something in main, that has new requirements not in main in the targetted release? | 15:06 |
| ScottK | SpamapS: Backports doesn't care about Main/Universe. | 15:06 |
| SpamapS | sweeeeet | 15:06 |
| === doko_ is now known as doko | ||
| uvirtbot | New bug: #653020 in apache2 (main) "apache2 crashed with SIGSEGV in T.312()" [Medium,New] https://launchpad.net/bugs/653020 | 15:17 |
| jetole | join #android | 15:24 |
| uvirtbot | New bug: #653027 in clamav (main) "package clamav-freshclam 0.96.1 dfsg-0ubuntu0.10.04.2 failed to install/upgrade: problemas de dependencias - se deja sin configurar" [Undecided,New] https://launchpad.net/bugs/653027 | 15:26 |
| progre55 | hi people. Having a problem creating a directory, although doing it under root priv. and have +w priv for the folder | 16:02 |
| progre55 | I get "mkdir: cannot create directory `scripts': No such file or directory" | 16:03 |
| progre55 | the dir /srv is in place | 16:03 |
| hggdh | Daviey: just a Q: what about euca-add-user? | 16:06 |
| tacomaster | i was wondering because i had read on a ubuntu server forum that updating regularly is hazardous is that true? | 16:30 |
| zoopster | huh? updates are provided because the fix a serious problem or security issue - it's hazardous to NOT update regularly | 16:32 |
| tacomaster | zoopster: ok ty because that sounded wrong but its what it said | 16:32 |
| mathiaz | JamesPage: o/ | 16:33 |
| JamesPage | mathiaz: o/ | 16:33 |
| mathiaz | JamesPage: have you worked around the couchdb issue for the iso testing system? | 16:34 |
| JamesPage | mathiaz: yes but not much success - unable to get vm's to boot of a cloud hosted instance. | 16:34 |
| mathiaz | JamesPage: how does it fail? | 16:34 |
| JamesPage | mathiaz: gPXE randomly can't get files from the server - I can screenprint some of the errors if that would be helpful | 16:35 |
| mathiaz | JamesPage: yeah - if you can easily reproduce them | 16:36 |
| mathiaz | JamesPage: I'd have a look at the error messages | 16:36 |
| JamesPage | mathiaz: I'll spin one up now :-) | 16:36 |
| JamesPage | mathiaz: current hudson cloud instance is setup to configure the couchdb instance on a per slave basis so easy to change :-) | 16:38 |
| mathiaz | JamesPage: hm - what do you mean? | 16:38 |
| mathiaz | JamesPage: is there a couchdb running on each slave now? | 16:38 |
| JamesPage | mathiaz: pinged you and email a few minutes ago - take a look | 16:39 |
| mathiaz | JamesPage: ah - minutes... | 16:39 |
| * mathiaz gets new email | 16:39 | |
| JamesPage | mathiaz: basically each slave can be configured to point at different couchdb instance so can be localised if need be | 16:39 |
| mathiaz | JamesPage: nice | 16:40 |
| mathiaz | JamesPage: I think we should move couchdb to each slave for now | 16:40 |
| JamesPage | mathiaz: also takes quite a long time to upload initrd and kernel on my adsl to the cloud! | 16:40 |
| * mathiaz nods | 16:40 | |
| mathiaz | JamesPage: eventually we'll look at getting rid of couchdb | 16:40 |
| mathiaz | JamesPage: but for now everything is glued together | 16:41 |
| mathiaz | JamesPage: and it seems that running couchdb on the slave is the easiest workaround for now | 16:41 |
| JamesPage | mathias: agreed and it works; current successful tests where run in this way. | 16:41 |
| JamesPage | *mathiaz: | 16:41 |
| JamesPage | mathiaz: just tricky on desktop installs as conflicts with desktop-couch | 16:42 |
| mathiaz | JamesPage: I've just read your email | 16:43 |
| mathiaz | JamesPage: so it seems that local couchdb is the way to go for now | 16:43 |
| mathiaz | JamesPage: IMO it makes much more sense | 16:44 |
| mathiaz | JamesPage: that way (ie local couchdb) | 16:44 |
| JamesPage | mathiaz: I agree - keeps the test execution completely local with control in the master. | 16:44 |
| mathiaz | JamesPage: I'll try to setup a second slave on monday | 16:44 |
| mathiaz | JamesPage: it may be interesting to have an option to set whether to upload artifacts or not | 16:45 |
| mathiaz | JamesPage: I plan to setup my hudson slave on a server running in a DC | 16:45 |
| mathiaz | JamesPage: so uploading artifacts shouldn't take so much time | 16:45 |
| mathiaz | JamesPage: however for a DSL connection it may be better | 16:45 |
| JamesPage | mathiaz: suspect it gets more that 400Kbps upload! | 16:45 |
| mathiaz | JamesPage: or may be skip some artificats | 16:45 |
| mathiaz | JamesPage: IIUC initrd and kernel are the biggest files | 16:46 |
| mathiaz | JamesPage: how about not uploading these to the hudson master | 16:46 |
| JamesPage | mathiaz: makes sense - they don't add huge value | 16:46 |
| mathiaz | JamesPage: all the other files are smaller - it shouldn't take that much time | 16:46 |
| mathiaz | JamesPage: and we'd still have some debugging information in case | 16:46 |
| JamesPage | mathiaz: OK - I will work on this on Monday before you try your slave setup | 16:47 |
| mathiaz | JamesPage: great - is the trunk up-to-date? | 16:47 |
| JamesPage | I'll push at the end of today (so next 10 minutes) | 16:47 |
| tacomaster | quick question people keep saying that samba is best for sharing if you have windows computers in your network but what if i only have ubuntu linux computers and no windows computer is there a better file sharing software out there? | 16:47 |
| mathiaz | JamesPage: great - could you update the TODO file with the discussion point above? | 16:48 |
| mathiaz | JamesPage: to summarize: | 16:48 |
| mathiaz | JamesPage: 1. update documentation to outline couchdb setup on slave instead of master | 16:48 |
| mathiaz | JamesPage: 2. don't upload kernel and initrd as artifacts | 16:48 |
| mathiaz | JamesPage: that's all? | 16:49 |
| JamesPage | mathiaz: yep - no problem - I think that covers it. | 16:49 |
| kinygos | tacomaster: i'm not an expert here (they're all kinda busy with maverick) so my noobish answer is NFS | 16:49 |
| mathiaz | JamesPage: excellent - keep up the good work! | 16:49 |
| tacomaster | kinygos: lol its fine if there busy i will probally figure it out sooner or later and ty for the advice on NFS :P | 16:50 |
| kinygos | tacomaster: here's a page that may shed some light for you https://help.ubuntu.com/community/SettingUpNFSHowTo | 16:50 |
| tacomaster | kinygos: lol funny i had just found the page on google as you linked it | 16:51 |
| kinygos | tacomaster: lol..sorry, i was a bit slow :) | 16:52 |
| tacomaster | kinygos: lol no reason to be sorry ty for the consideration | 16:52 |
| JamesPage | mathiaz: TODO updated and branch now up-to-date in LP. | 16:54 |
| sh00ter | hi all | 16:54 |
| mathiaz | JamesPage: awesome! | 16:54 |
| JamesPage | mathiaz: :-( it took a really long time but my test PXE boot from ec2 is actually working now. | 16:55 |
| JamesPage | mathiaz: they where failing before..... | 16:55 |
| mathiaz | JamesPage: oh well | 16:55 |
| mathiaz | JamesPage: given that you've got a working setup with couchdb on the slave | 16:55 |
| === [1]iclebyte is now known as iclebyte | ||
| mathiaz | JamesPage: it doesn't really matter now | 16:55 |
| mathiaz | JamesPage: couchdb running on the slave makes more sense anwyay | 16:56 |
| JamesPage | mathiaz: will you be using -server for your slave install? | 16:56 |
| mathiaz | JamesPage: I'm not running the desktop edition on the system I plan to convert to a hudson slave | 16:56 |
| mathiaz | JamesPage: (if that's what you meant?) | 16:56 |
| JamesPage | mathiaz: thats great - allows you to avoid the desktop-couch conflict | 16:57 |
| === _sjm_ is now known as sjm | ||
| === luis__lopez is now known as luis_lopez | ||
| kinygos | does grub want to mount the / or /boot partition? (grub legacy) | 17:30 |
| === ivoks-afk is now known as ivoks | ||
| Daviey | ScottK: Regarding bug #651138 , zul said he would look at it today. | 17:39 |
| uvirtbot | Launchpad bug 651138 in likewise-open "likewise-open fails to build from source in maverick" [High,Confirmed] https://launchpad.net/bugs/651138 | 17:39 |
| ScottK | Daviey: Thanks. | 17:39 |
| kentb | does anyone know how to overcome the automated install error during an automated install of a Node Controller?: "The file needed for preconfiguration could not be retrieved from http://#2 192.168.123.10:8774/preseed/preseed.conf" | 17:56 |
| kentb | my cc, clc, walurs, & ss are all on the same node | 17:56 |
| kentb | or machine rather | 17:56 |
| SpamapS | kentb: thats a very odd url its showing | 18:02 |
| SpamapS | http://#2 192.168.123.10:8774/preseed/preseed.conf | 18:02 |
| SpamapS | kentb: maybe a type-o in the configuration? | 18:02 |
| kentb | yeah, this about the only related bug I could find on it, but, I don't have more than one CC on my network: https://bugs.launchpad.net/ubuntu/+source/eucalyptus/+bug/524147 | 18:04 |
| uvirtbot | Launchpad bug 524147 in eucalyptus "UEC NC failed to fetch preseed.conf from CC using lucid-server-amd64-20100218" [Medium,Invalid] | 18:04 |
| kinygos | is there an easy way to completely wipe a physical disk? i'm still trying to get raid on my live box, and when i ask my isp to reset the box, they only reset the first disk | 18:09 |
| kinygos | live box? i meant remote server | 18:10 |
| * RoyK can't wait to get his hands dirty on the new 120TB boxes arriving next week | 18:10 | |
| SpamapS | kinygos: lol.. still? | 18:16 |
| RoyK | kinygos: dd? | 18:18 |
| === harrisonk is now known as harrisonk_away | ||
| kinygos | SpamapS: you have no idea :( i've found articles that make it sound like it should be easy, like http://nixcraft.com/getting-started-tutorials/432-setting-up-raid-1-mirroring-running-remote-linux-system.html, but i fail at the first step | 18:19 |
| RoyK | kinygos: how many drives? | 18:19 |
| kinygos | RoyK: 2 physical disks | 18:19 |
| RoyK | kinygos: sd[ab]? | 18:19 |
| SpamapS | kinygos: you were doing so well last time. Where did it fail this time? | 18:20 |
| kinygos | RoyK: yep | 18:20 |
| kinygos | SpamapS: installing grub... | 18:20 |
| SpamapS | kinygos: nobody could help you in here? | 18:20 |
| kinygos | SpamapS: everyone seemed busy, so i've been searching online... | 18:21 |
| RoyK | kinygos: boot on an install cd, switch to console two after the drivers have been loaded, for dev i a b; do dd if=/dev/zero of=/dev/sd$dev bs=1M count=1k; done | 18:21 |
| RoyK | kinygos: boot on an install cd, switch to console two after the drivers have been loaded, for dev in a b; do dd if=/dev/zero of=/dev/sd$dev bs=1M count=1k; done | 18:21 |
| RoyK | even | 18:21 |
| kinygos | RoyK: unfortunately, that's my challenge...it's a remote server, and i don't have access to any external media :( | 18:21 |
| uvirtbot | New bug: #652815 in eucalyptus "eucalyptus-common 2.0+bzr1241-0ubuntu4 not configured after package upgrade" [Undecided,New] https://launchpad.net/bugs/652815 | 18:22 |
| kinygos | RoyK: but that command is useful to blat my sdb at least :) | 18:22 |
| kinygos | shall i post to ubuntuforums, or is that a form of cross-posting given that i've been asking for help in here? | 18:25 |
| RoyK | kinygos: explain your setup, please | 18:27 |
| SpamapS | RoyK: he's got a lame hosting provider that will only image his box, no install media possible. | 18:27 |
| SpamapS | RoyK: so we were trying to walk him through creating a broken raid1, copying everything to it, then booting off it | 18:28 |
| SpamapS | kinygos: so how eactly did it fail to install grub? | 18:28 |
| SpamapS | exactly rather | 18:28 |
| RoyK | ah - right - I remember from last night | 18:28 |
| SpamapS | been like 3 days now | 18:28 |
| kinygos | RoyK: i'm just having it rebuilt now. as SpamapS says, i have a dedicated server with 9.04 on one disk. a second disk is installed, but not mounted or partitioned. | 18:28 |
| kinygos | SpamapS: here's the last set of steps i took: 1. copied partition layout from sda to sdb with sfdisk -d /dev/sda | sfdisk --force /dev/sdb | 18:29 |
| RoyK | kinygos: then run dd to erase that drive and try to create a broken mirror there | 18:29 |
| kinygos | SpamapS: 2. changed partition types to raid auto with # for partition in 1 5 6 7 8; do sfdisk --change-id /dev/sdb $partition fd; done | 18:30 |
| uvirtbot | New bug: #653152 in dovecot (main) "package mail-stack-delivery 1:1.2.12-1ubuntu7 failed to install/upgrade: subprocess new pre-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/653152 | 18:31 |
| kinygos | RoyK: here's where i've had a lot of confusion...sda has a swap partition and an extended partition that contains 4 logical partitions... | 18:32 |
| kinygos | RoyK: so originally i was trying to mirror the disk, i'm now trying to mirror each partition | 18:33 |
| RoyK | kinygos: I don't think you can create a mirror of an existing non-mirrored partition or disk | 18:34 |
| RoyK | kinygos: just get the data over, install grub, try to boot on the new broken mirror | 18:34 |
| kinygos | RoyK: that's what i thought...so that's what i've been trying to do, but i failed to install grub... | 18:34 |
| kinygos | SpamapS: 3. i created corresponding raid partitions with # for partition in 1 5 6 7 8; do mdadm --create /dev/md$partition --level=1 --raid-disks=2 missing /dev/sdb$partition; done | 18:35 |
| RoyK | kinygos: try over, please, first dd zeros over the first gigabyte or so on the secondary drive, then make new partitions and so on there, copy the data, try to install grub | 18:35 |
| SpamapS | kinygos: sounds great | 18:35 |
| kinygos | RoyK: ok, that's what i'm doing just now | 18:35 |
| RoyK | yeah, sounds good | 18:35 |
| kinygos | apologies all in this channel, i should've put this in a pastebin | 18:36 |
| RoyK | it's just a line | 18:36 |
| RoyK | no problem | 18:36 |
| SpamapS | kinygos: All of that sounds right. So that should have created empty partitions. the next step would have been to mkfs/mkswap on them | 18:36 |
| RoyK | multiline pastes should go to pastebin | 18:36 |
| RoyK | at least > 3 | 18:36 |
| kinygos | Spamaps: yep..that's what i did, # mkswap /dev/md1 | 18:36 |
| kinygos | # for partition in 5 6 7 8; do mkfs.ext3 /dev/md$partition; done | 18:36 |
| RoyK | kinygos: I think you should use ext2 for /boot | 18:37 |
| kinygos | RoyK: /boot on sda is ext3, i was going like-for-like | 18:38 |
| RoyK | just use ext2 - well - just in case | 18:38 |
| kinygos | ok | 18:38 |
| RoyK | some grub versions are a bit, well, grubby | 18:38 |
| kinygos | lol | 18:39 |
| kinygos | SpamapS: so next i created a directory /raid, mounted /dev/md1p6 in there, then created /raid/var, /raid/home, and /raid/boot, and mounted the corresponding /md1p partition | 18:40 |
| kinygos | partitions | 18:40 |
| kinygos | SpamapS: then attempted to copy all data with rsync -auHxv --exclude=/raid/* /* /raid/ | 18:40 |
| RoyK | kinygos: just use /, not /* | 18:41 |
| RoyK | in case there are hidden files around | 18:41 |
| kinygos | RoyK: excellent :) | 18:41 |
| RoyK | and -u is not needed in this | 18:42 |
| kinygos | SpamapS: sorry, i missed 2 steps before i did the copy... | 18:42 |
| RoyK | also, with -x, you'll only copy the root fs | 18:42 |
| RoyK | so you need to rsync each fs | 18:42 |
| RoyK | and then you won't need to exclude /raid, since -x does that | 18:43 |
| kinygos | oh, i wonder if that's why it hasn't worked | 18:43 |
| RoyK | kinygos: but so far it looks good, just man rsync first :þ | 18:43 |
| kinygos | before the copy, i did 2 other things, one of which i don't understand (...) | 18:44 |
| RoyK | kinygos: what was that? | 18:45 |
| kinygos | RoyK: 1. mdadm -Es >>/etc/mdadm/mdadm.conf (which i think puts the uuid of the raid disk into the conf file) | 18:45 |
| RoyK | pastebin mdadm.conf | 18:45 |
| kinygos | RoyK: 2. update-initramfs -u (which i have no idea what it does) | 18:45 |
| RoyK | normally mdadm.conf won't be needed | 18:45 |
| RoyK | that's normally read from the drives in recent kernels (after y2k or so?) | 18:46 |
| kinygos | RoyK: my server is currently being rebuilt, so i won't have any files for a bit | 18:46 |
| RoyK | kinygos: you probably won't need to update-initramfs since you copy the bunch over | 18:47 |
| uvirtbot | New bug: #653154 in dovecot (main) "package mail-stack-delivery (not installed) failed to install/upgrade: subprocess new pre-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/653154 | 18:47 |
| RoyK | update-initramfs updates the drivers database, the drivers loaded before the root fs is mounted | 18:47 |
| kinygos | RoyK: at last, a straightforward description of what that does :) thanks!! | 18:47 |
| RoyK | or - well - it creates a cpio archive of needed drivers | 18:47 |
| RoyK | but still the same, really | 18:48 |
| RoyK | anyway - your initrd file resides in /boot and will be copied if you copy that filesystem with rsync | 18:48 |
| kinygos | so once i'd copied all the data over, at least i thought i had, but it seems i hadn't because of the -x switch, i tried to install grub on the second harddisk | 18:48 |
| RoyK | kinygos: chrooting into /raid might help a lot | 18:49 |
| RoyK | chroot /raid | 18:49 |
| RoyK | then check if things look familiar | 18:49 |
| RoyK | from there, install grub | 18:49 |
| RoyK | onto /dev/sdb | 18:49 |
| kinygos | ok..that may have been the issue...when i launched grub, i called root (hd1), then setup (hd1) which failed | 18:51 |
| kinygos | i then rebooted and escaped into the grub menu there... | 18:51 |
| kinygos | i entered find /boot/grub/stage1 and got file not found...which baffled me because i can still boot into the first disk | 18:52 |
| RoyK | well, try again with chroot | 18:52 |
| kinygos | RoyK: but what you've suggested sounds right, so i'll do that and report back...it may be a while as i need to wait for the re-imaging to be complete, but thank you very much for your time and advice...i really appreciate it | 18:53 |
| === Barre_ is now known as Barre | ||
| RoyK | np :) | 18:54 |
| RoyK | kinygos: can you pastebin 'mount' now? | 18:54 |
| kinygos | RoyK: what do you mean? the mount commands i was using? | 18:58 |
| kinygos | RoyK: or the output from running mount? | 18:58 |
| RoyK | just which filesystems are mounted where - the output of 'mount' | 18:58 |
| kinygos | RoyK: my server is being rebuilt, apologies :( | 18:59 |
| kinygos | brief afk..real life issue | 18:59 |
| Dravekx | oh cool. i didnt know this was a channel lol | 19:06 |
| MTecknology | Dravekx: they can get kinda whiny over there ;) | 19:07 |
| MTecknology | just ask your question though - no need to ask to ask | 19:07 |
| Dravekx | I have lamp setup on ubuntu server and want to jail users in their home directories so they can create web pages in a certain directory. how can I do this and can someone help me set this up? | 19:07 |
| Dravekx | not sure I said that right. | 19:08 |
| Dravekx | I want to allow each user to have a folder ( say public_html ) that, when they go to the web and point to foo.com/~user it will display the contents of /home/user/public_html/ | 19:09 |
| Dravekx | Ive had this setup before, but my server crashed and bought a new one. | 19:10 |
| Ekips | http://heriman.wordpress.com/2008/08/05/enabling-apache-user-home-public_html-directory-in-ubuntu/ | 19:10 |
| Ekips | I guess that's the easiest way ;) | 19:11 |
| Dravekx | Ekips, ahhh!! that looks right!! thanks. :) | 19:11 |
| Ekips | np :) | 19:12 |
| Dravekx | any idea how I can jail users over ssh so they cant login and cd around the server? | 19:17 |
| patdk-wk | dravekx, ya, use ssh | 19:19 |
| patdk-wk | and do you actually mean jail? not chroot | 19:19 |
| patdk-wk | cause, ssh logs in users, that is all it does | 19:19 |
| patdk-wk | or did you mean scp/sftp? | 19:19 |
| Dravekx | patdk-wk, scp/sftp :) | 19:20 |
| Dravekx | sorry lol | 19:20 |
| patdk-wk | well, sftp is easy, scp not so much | 19:20 |
| patdk-wk | scp is just normal ssh really | 19:20 |
| patdk-wk | it's easy to chroot users, using sshd.config | 19:20 |
| Dravekx | patdk-wk, honestly, when I create a user, I want them to have access and view to nothing but their home directories | 19:21 |
| patdk-wk | http://www.howtoforge.com/chrooted_ssh_howto_debian | 19:21 |
| patdk-wk | that is old | 19:21 |
| patdk-wk | I wonder if ubuntu has a new enough ssh for this in lucid, I haven't checked | 19:21 |
| Dravekx | I found this one, but not sure if it's what I'm talking about: http://www.marthijnvandenheuvel.com/2010/03/10/how-to-create-a-chroot-ssh-user-in-ubuntu/ | 19:22 |
| patdk-wk | actually, that url I posted wasn't the one I thought it was :) | 19:22 |
| patdk-wk | http://blogs.techrepublic.com.com/opensource/?p=229 | 19:23 |
| patdk-wk | that was more what I was looking for | 19:23 |
| patdk-wk | and it looks like lucid sshd is good | 19:23 |
| Dravekx | ahhhh | 19:23 |
| * RoyK can't wait to get his hands dirty on the new 120TB boxes arriving next week | 19:33 | |
| Dravekx | that's a lot of space | 19:34 |
| kinygos | RoyK: i'm not sure if you still have time, but my server has been reimaged, and i've pasted output from mount, fdisk -l, and cat /etc/fstab here http://dpaste.com/251612/ | 19:34 |
| RoyK | kinygos: I don't get it - why aren't the md devices mounted? | 19:36 |
| kinygos | RoyK: this is the initial setup, i haven't done anything to it yet... | 19:37 |
| uvirtbot | New bug: #332156 in kvm (main) "Network issues with hardy guests/hosts, using default nic and virtio" [Medium,Fix released] https://launchpad.net/bugs/332156 | 19:37 |
| RoyK | kinygos: you obviously need to mount the md devices before you can copy anything to them, don't you think? | 19:37 |
| kinygos | RoyK: ofc :) i'll do that now and run the commands again...brb | 19:38 |
| RoyK | kinygos: just make sure /raid isn't full of old crap first | 19:38 |
| RoyK | kinygos: you don't want that if it's not on a separate filesystem, do you? | 19:38 |
| === You're now known as ubuntulog | ||
| kinygos | RoyK: indeed | 19:41 |
| === jjohansen is now known as jj-afk | ||
| kinygos | RoyK: i've just mounted my raid partitions, i've not called chroot yet...my mount and fdisk -l output can be seen http://dpaste.com/251617/ | 19:54 |
| === ivoks is now known as ivoks-afk | ||
| kinygos | off topic, i know...but i just saw this, very funny, reckon peeps in here may appreciate the humour http://www.youtube.com/watch?v=FL7yD-0pqZg | 20:21 |
| Dravekx | patdk-wk, I set it up as followed and now my users get this error: Error skipping startup message. Your shell is probably incompatible with this application (BASH is recommended) | 20:26 |
| Dravekx | :S | 20:27 |
| qman__ | Dravekx, not sure what you're doing, but ubuntu's default shell is actually dash, so specify bash if you can | 20:30 |
| patdk-wk | actually, that example only works for sftp | 20:31 |
| Dravekx | qman__, Im trying this: http://blogs.techrepublic.com.com/opensource/?p=229 | 20:31 |
| patdk-wk | as I said, scp is really normal ssh, so to limit scp, you would have to limit the shell itself | 20:31 |
| Dravekx | its not working for sftp | 20:31 |
| Dravekx | keeps giving the error | 20:31 |
| qman__ | I have that set up on one of mine | 20:32 |
| patdk-wk | I'm using it too | 20:32 |
| Dravekx | I'll double check. | 20:32 |
| qman__ | IIRC /bin/false is not ok | 20:33 |
| qman__ | try /sbin/nologin instead | 20:33 |
| qman__ | my users are configured that way, so I'm pretty sure that's what I ran into | 20:34 |
| Dravekx | almost. SFTP is saying 'access denied' now and refusing the user password. | 20:38 |
| Dravekx | maybe permissions? | 20:39 |
| qman__ | could be | 20:41 |
| qman__ | there's an odd stipulation that the user's home directory must be root-owned | 20:41 |
| patdk-wk | I forget, been a few years since I set mine up :) | 20:41 |
| qman__ | and not writable by anyone else | 20:41 |
| === jj-afk is now known as jjohansen | ||
| Dravekx | nope. access denied. | 20:46 |
| Dravekx | I set the user home to root:root | 20:46 |
| Dravekx | what's the default for user shell access? | 20:53 |
| Dravekx | nvm I got it | 20:57 |
| === ivoks-afk is now known as ivoks | ||
| === billybigrigger_ is now known as billybigrigger | ||
| === _TechAway_ is now known as _Techie_ | ||
| kinygos | RoyK: i've just tried to install grub after chroot to my mounted drive, and i get the error /dev/sdb: Not found or not a block device... | 21:22 |
| silentwater77 | hi , i would like to run apparmor on an openvz container(vps at my hoster). but the great google-oracle told me it's not possible. same with selinux. When this is true, which alternatives are possible | 21:29 |
| jjohansen | silentwater77: it is possible | 21:30 |
| jjohansen | but it requires some work on your part | 21:30 |
| jjohansen | silentwater77: which version of ubuntu | 21:30 |
| uvirtbot | New bug: #653248 in php5 (main) "package php5-common (not installed) failed to install/upgrade: Unterprozess dpkg-deb --control gab den Fehlerwert 2 zurück" [Undecided,New] https://launchpad.net/bugs/653248 | 21:30 |
| silentwater77 | 10.04 | 21:31 |
| silentwater77 | minimal 32 bit | 21:31 |
| jjohansen | silentwater77: okay, the problem is that the setup tools aren't in place | 21:31 |
| jjohansen | and the maverick kernel supports this better | 21:32 |
| jjohansen | but either should work | 21:32 |
| silentwater77 | i looked everywhere. in openvz forums i read that apparmor wont be supported | 21:32 |
| jjohansen | right they don't support at the moment | 21:32 |
| jjohansen | and probably won't until some more base work is done | 21:32 |
| jjohansen | and then we can propose a patch for openvz | 21:33 |
| jjohansen | silentwater77: basically apparmor has the concept of profile namespaces | 21:33 |
| silentwater77 | i understand. you telling me thats even possible maed my day | 21:33 |
| jjohansen | you create a new namespace and then launch the container in it | 21:33 |
| jjohansen | the container then loads its profiles into the namespace | 21:33 |
| jjohansen | there is work on a pam_module to do this setup for you and a few other tools but its not done yet so it is all very manual atm | 21:34 |
| silentwater77 | i understand. the thing is i dont have access to the host system as i just rent a vps | 21:35 |
| jjohansen | Ah | 21:35 |
| jjohansen | well that is a problem atm | 21:35 |
| jjohansen | maybe | 21:35 |
| jjohansen | it is possible to create a new namespace within the container, but its more tricky | 21:36 |
| jjohansen | namespaces are inherited so having it setup before the container is created is ideal | 21:36 |
| silentwater77 | hmm...maybe i better wait then and until its possible i have to chroot everything | 21:37 |
| jjohansen | but with a little hackery it could be done in early boot | 21:37 |
| jjohansen | silentwater77: oh and the same thing can be done with chroots, where the chroot gets its own namespace, and can load its own profiles | 21:37 |
| jjohansen | but again its hackery atm | 21:38 |
| jjohansen | silentwater77: Natty should have much better support for this as that is when the tools are scheduled to land | 21:38 |
| silentwater77 | hackery isnt my thing right now. im pretty new to linux, but willing to learn | 21:38 |
| jjohansen | alright, if you have AA questions feel free to ping me, or ask on #apparmor on irc.oftc.net | 21:39 |
| silentwater77 | thank you! i really appreciate your help | 21:39 |
| silentwater77 | have you got a link to some AA hackery at early boot reading for me ? | 21:40 |
| jjohansen | silentwater77: no, I'd have to make it up as I went, its something I've meant to get to writing but have not gotten around to yet | 21:41 |
| jjohansen | silentwater77: the best place to do it would be in the initramfs as part of startup before upstart gets started, so that upstart is in the new namespace and all of its children | 21:42 |
| jjohansen | so it is not the simplest of hackery | 21:42 |
| silentwater77 | ok, this tells me i really should keep my hands off... i had enough trouble with starting mysql by upstart after reboot | 21:44 |
| silentwater77 | anyway, i really thank you for your help! | 21:45 |
| raubvogel | In which of the 3 named.conf files do I put the acls in? | 21:55 |
| ryuchao009 | hello | 22:15 |
| _Techie_ | is there any major security flaws with webmin, that i should be worried about... im already making it so that you cant access the port directly, and forcing SSL on all connections | 22:34 |
| demonspork | I have a single physical interface with 5 IP adresses, each IP has various uses and users and I want to monitor and possibly graph usage statistics for connections made to each of these IP addresses | 22:44 |
| demonspork | what would be the simplest way to do this? | 22:44 |
| demonspork | I am working with cacti right now, and the learning curve is turning out to be quite the obstacle | 22:45 |
| demonspork | HOW IS SHOT GRAPH? | 22:45 |
| patdk-wk | cacti defently is not user friendly | 22:45 |
| demonspork | yeah, but so so powerful | 22:45 |
| patdk-wk | atleast when you need to build something custom from scratch | 22:45 |
| patdk-wk | I find munin more powerful and friendly :) | 22:45 |
| demonspork | munin | 22:46 |
| patdk-wk | I only use cacti when I have to, and just drop in preformed packages | 22:46 |
| demonspork | how quickly do you think I could go from setup to monitoring traffic on a per IP basis instead of a per Port basis | 22:47 |
| patdk-wk | that all depends on how long it takes you to setup iptables rules, and a script to collect that data | 22:47 |
| demonspork | per physical port | 22:47 |
| demonspork | oh, so iptables is used to log the traffic with that setup? | 22:48 |
| patdk-wk | personally, I use shorewall, so I use the shorewall munin script, and make shorewall accounting rules | 22:48 |
| patdk-wk | no, iptables is used to count the traffic | 22:48 |
| demonspork | k | 22:48 |
| demonspork | well, iptables is another thing I am still learning, as I haven't used it much because the server I ran in my dad's office for years was behing an NAT firewall and I just used port fowarding through that to provide services | 22:49 |
| demonspork | behind* | 22:49 |
| demonspork | now I have an internet facing box and I am actually having to learn some more stuff | 22:49 |
| patdk-wk | dunno, I did iptables and ipchains by hand for years | 22:49 |
| patdk-wk | but shorewall is so much simpler | 22:49 |
| demonspork | I have a giant stack of pepsi cans | 22:50 |
| patdk-wk | and makes reading and accounting for changes, so much easier | 22:50 |
| demonspork | well, imma learn iptables first I think because it is the most widely used and would be useful to know | 22:50 |
| demonspork | and then I might switch to other options once I am comfortable with iptables | 22:50 |
| patdk-wk | hmm, it doesn't matter | 22:50 |
| patdk-wk | everything uses iptables | 22:51 |
| patdk-wk | shorewall is just a script that creates the iptables commands for you | 22:51 |
| demonspork | ah | 22:51 |
| patdk-wk | you can always look at the iptables stuff manually if you wish, I do often | 22:51 |
| demonspork | well, everything uses iptables except for ufw | 22:51 |
| patdk-wk | like, ubuntu's ufw | 22:51 |
| jdstrand | ? | 22:51 |
| patdk-wk | ufw is just a script that runs iptables stuff | 22:51 |
| jdstrand | ufw uses iptables | 22:51 |
| demonspork | wow, everything is hiding iptables | 22:51 |
| demonspork | lol | 22:51 |
| patdk-wk | though, ufw is just raw iptables commands though :) | 22:52 |
| patdk-wk | iptables is nice, but you can easily cause interactions between rules you didn't intend | 22:52 |
| demonspork | yeah, I am writing any rules I add for a specific IP and then applying them more broadly once I have confirmed they do what I intend on that IP | 22:52 |
| patdk-wk | plus, when you get more complex, it's nice to hide iptables,ebtables,xtables,ipset, ... :) | 22:53 |
| demonspork | I could do this sooo much faster if I would just stop playing minecraft for a few minutes | 22:53 |
| * patdk-wk doesn't understand people that play games | 22:54 | |
| demonspork | but since my server isn't making any money yet, the most useful thing it does is run a minecraft server | 22:54 |
| demonspork | lol | 22:54 |
| demonspork | minecraft is like LEGO: Online | 22:54 |
| demonspork | it also is written in java and has a horribly optimized server | 22:54 |
| demonspork | 15 users = 100% CPU utilization. And it can't multithread, so I am stuck with a single core of a single CPU | 22:55 |
| _Techie_ | is there any major security flaws with webmin, that i should be worried about... im already making it so that you cant access the port directly, and forcing SSL on all connections | 23:02 |
| demonspork | patdk-wk, is it usable to install munin from the repository or should I download it and install it myself | 23:09 |
| euxneks | Hello, I would like to add another RAID array to my server, but I've never done this before. I have already added the two new drives and would like to set up RAID1 | 23:19 |
| euxneks | I seem to have already created one :) | 23:27 |
| === zz_sailerboy is now known as sailerboy | ||
| ruben23 | hi guys how do i check my ubuntu version installed on my system..? | 23:47 |
| delimiter | cat /etc/issue | 23:48 |
| demonspork | I have an iso from HP with some extra software for my HP server, it apparently is a package repo, so how do I add it to my sources.list properly to be used | 23:54 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!