=== _Techie_ is now known as _TechAway_ [00:06] can someone help me get remote access working on my server? [00:06] using ssh? [00:07] on the server, and putty on windows 7? [00:09] Just install openssh [00:09] already did [00:09] I don't know what to do from here [00:10] http://beyond-sight.com/ [00:10] router is forwarding correctly [00:10] Oki, on putty, just set your server ip, port 22, and press open [00:11] eriksson25: Connection refused. [00:11] eriksson25: my router is probabaly not forwarding that port, one moment [00:11] Exactly [00:11] =) [00:12] How can I set my ubuntu ethernet ipaddress? [00:12] 192.168.1.250 for example? [00:12] it's currently 192.168.1.9 [00:13] Depends on, you can set it from the router. Binding its mac to a ip. [00:13] You can set it grafical if you have it on the server. Or you can set it in commandline. [00:13] did ssh work now? [00:14] You shuld not have it on port 22. [00:14] havne't forwarded the port to the pc yet [00:14] verizon fios router [00:14] doesn't say anything about a mac address [00:14] before you do that, change the port. [00:15] change port how? [00:15] to a higher number like 5022 or something. [00:15] I don't know how to change the openssh port to something else [00:15] open file /etc/ssh/sshd_conf [00:15] 26254 in this case, is what I'd like. [00:15] okay [00:15] sudo nano [00:15] and there go down to port= and change it to whatever. [00:16] Then you need to run /etc/init.d/ssh restart [00:17] http://codesnippets.joyent.com/posts/show/319 [00:18] Thats how you set static ip to whatever you want on the server. [00:18] hm [00:18] ssh_restart [00:18] or ssh restart [00:18] no _ [00:18] nog being found as a command [00:19] ssh restart [00:19] Restarting SSHD? [00:19] I cd ed to the directory init.d [00:19] No need. [00:19] ssh restart isn't doing anything [00:19] Just type "/etc/init.d/ssh restar" [00:19] kirkland: hey, how come ubuntu-vm-builder doesn't accept maverick inside maverick? [00:19] sudo service ssh restart [00:19] And press enter. [00:20] VMBuilder.exception.VMBuilderUserError: Invalid suite: "maverick". Valid suites are: dapper gutsy hardy intrepid jaunty karmic lucid [00:20] ssh start/running, process 1631 [00:20] or that way as nichos says [00:20] Yes, now its using the new port. [00:20] awesome [00:20] Portforard it and you are good to go. [00:21] ZacharyNewb: Welcome to Ubuntu. [00:21] Hmm, wierd hehavior on iptables. I use iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 4000 -jDNAT --to-destination 82.211.214.96 This dont work if i try to connect to ip of the ppp0 interface, if i change ppp0 to eth1 and connect to that ip the packages are send of to 82.211.214.96 (are there some special thing with pptp connections) ? [00:22] eriksson25: those instructions on that link aren't working [00:22] no interfacing directory or file [00:22] wow, just found it nevermind [00:22] =) [00:23] Anyone familiar with using DRBD to create an active/active ISCSI target? [00:23] sudo nano interfaces [00:25] eriksson25: okay, I changed my ip address in the config file, and it matches that text except [00:26] he kept having "192.168.0.1" [00:26] I put "1.1" [00:26] Yes ofc, since that would be your router. [00:26] is my rendition correct? [00:27] ofc = ofcourse, ah. xD [00:27] okay [00:27] do I need to reset the ethernet connection somehow for the change to take effect? [00:27] eriksson25: [00:27] Yes, Dont remember how.... [00:28] sudo service networking restart [00:28] there you goo. [00:29] ah [00:29] eriksson25: nich0s Thanks, I also found "/etc/init.d/networking restart" [00:30] with yours, sudo service, IO'm getting "restart: unknown instance" [00:30] Yup, two ways of doing the same thing. [00:31] the one I found works [00:31] requires sudo though [00:31] also [00:31] sudo ifdown -a [00:32] to bring them down [00:32] sudo ifup -a [00:32] back up [00:32] to turn the network adapters on and off all-together [00:32] okay [00:32] eriksson25: Router is portforwarding 26254 [00:33] hm [00:33] connection refused [00:33] on the server, run ifconfig [00:34] And se if it says the correct ip [00:34] yes [00:34] correct ip [00:34] Is the server within the same lan? [00:34] yes [00:34] beyond-sight.com [00:35] Then you dont need portworading, thats only from outside. [00:35] is correctly being forwarded port 80 to the server, I get the web test page [00:35] true. [00:35] I travel sometimes as well [00:35] for now I'll test the network, you're right [00:35] Yes, but we get it to work internat first. [00:35] =) [00:36] In putty, did you sett the internal ip? like 192. and then the new port [00:36] putty 192.168.1.250 port 26254 [00:36] connection refused [00:36] however in the ethernet adapter settings you had me view, it's showing "bcast" (broadcast) as 192.168.0.255 [00:36] I say, reboot the server. Might me something with the ip numbers scruwing with you. [00:37] That is correct. [00:37] doesn't it need to be 0.1 ? [00:37] Or waait, now its noot. [00:37] like I changed all the others? [00:37] Shuld be 1.255 [00:37] -nods- I missed that then [00:38] everyting has to be 192.168.1.x [00:39] and "network" 192.168.0.0 should be 192.168.1.1 ? [00:40] network card reset [00:40] trying again [00:40] 1.0 [00:40] k [00:42] fixed again [00:42] trying putty again [00:42] dont know with win7, you might need to run it as admin. [00:42] I use xp as my windows comp. [00:43] connection refused still [00:43] using local lan address [00:43] I'm going to ping beyond-sight.com to see if I get response [00:43] and see if the web default page still pops up [00:43] web default page still up [00:44] do I need to configure open ssh further perhaps? [00:44] Reboot the server. [00:44] back in it's config file? [00:44] alright [00:44] do you know how I can do that from command line? [00:44] you shuldent need to. [00:44] sudo reboot now [00:44] thanks [00:44] hmm, sudo reboot lastnight :) [00:45] sudo reboot lastnight? sat mean? [00:45] He was funny [00:45] wishful thinking :) [00:45] I don't get it [00:45] =) [00:45] Zachary newb here doesn't get it. >.> [00:45] I didn't realize I typed "I don't get it" [00:45] that is more funny than my lame attempt :) [00:45] its ok. [00:46] LAte night humur. [00:46] it had better be [00:46] awesome server back up [00:46] Oki, try again and se what hapends. [00:46] connection refused again [00:46] Oki, try port 22 [00:47] just for the fact. [00:47] whoa [00:47] got something new [00:47] Wants to save a key? [00:47] "the server's host key is not cached in the registry" [00:47] yes [00:47] Save it [00:47] ah, it's looking for a date [00:48] ... [00:48] what it called? [00:48] deflection? [00:48] your attempting to move it to an alternate port? [00:48] Yes [00:48] yes, one previous attempt apparently failed [00:48] however changing the ip address did work [00:48] just edit /etc/ssh/sshd_config [00:48] That what I told him. [00:48] Port xxxx [00:49] sshd ? [00:49] there's also a ssh_config [00:49] service ssh restart [00:49] ssh_config is for the client, sshd_config is for the server [00:49] nor did I restart it before I restarted the server [00:49] so ssh_config == outgoing [00:49] sshd_config == incoming [00:49] open file /etc/ssh/sshd_conf [00:49] awesome [00:49] what I typed earlier [00:49] eriksson25, ya, I didn't scroll back that far :) [00:50] Its cool [00:50] * PatrickDK never runs ssh on alternate ports [00:50] oh my god [00:50] Thats why I asked him to change putty to 22, since I belived he would missed it. [00:50] so much easier typing it into putty here next to this window [00:50] =) [00:51] So putty up and running? [00:51] * PatrickDK has never used putty [00:51] =), well some of us plays computergames, and dont come dragging about wine. [00:52] I use linux, for Server, Router, HTPC [00:52] service ssh restart isn't working [00:52] heh, I use linux for everything [00:52] only use windows for vcenter [00:52] alright [00:52] nevermind, has to have sudo [00:52] =) [00:52] Yes, Putty works, now I've switched opensshd port to 26254 [00:53] including the client ssh port on the server too [00:53] Good boy [00:53] Now you are redy to do some real work. I am off to bed now. [00:53] YAY [00:53] man, I do like these new hp blades so much better than the old ones :) [00:53] Thank you, mother. >.< [00:54] PatrickDK: I'm on a netbook [00:54] No problem. [00:54] Have fun. [00:54] PatrickDK: The Asus 1201n Dual core 1.6ghz, hyperthreading/4 virtual cores, with ion graphics, including a GPU [00:54] and it's overclockable to 2 ghz [00:54] $500 [00:55] I can't use netbooks [00:55] this one is really nice [00:55] 3-4 hours regular use battery life, nicely sized keyboard, 11 inch screen [00:55] Full HD video [00:56] heh, I'm all about 6hours battery [00:56] I can run two 1080p monitors on this, dual screen, one on the VGA port and another on hdmi [00:56] using a t61p currently [00:56] This thing is wayyy too powerful to be compared to netbooks [00:56] I'm lacking hdmi on this one, my last one had it, loved it [00:56] lately I've been lazy [00:56] Actually, They compare my netbook to fully priced laptops [00:56] and just use my droid2 for everything [00:57] I'm jealous [00:57] I have a samsung propel [00:57] anywho [00:57] nothing is better I think than ssh+rsync on my phone :) [00:57] I need to configure the web server somehow [00:59] where to start? [01:00] PatrickDK: apache is installed [01:02] My website is residing on the secondary hard drive (500 GB) [01:02] formatted probabaly as NTFS [01:04] sudo mkdir /media/windows [01:04] sudo mount /dev/hda1 /media/windows/ -t ntfs -o nls=utf8,umask=0222 [01:35] clear [01:35] can someone help me? [01:38] I've just installed Ubuntu Server. With your peoples' extensive help, I've configured it's ip address, mounted an extra drive and I'm not remotely accessing it through putty [02:08] kirkland, regarding MIRs, if the -desktop is an official supported image, it can only include things in main [02:09] smoser: i think for Natty we should prove something unsupported, using Universe first [02:09] smoser: before we commit to stuff in Main [02:09] we basically have something unsupported [02:09] and have for 2 releases [02:28] smoser: right; i'm thinking we should get heavier feedback on that for a cycle before we start picking and choosing what needs to go into Main [02:28] thats fine. but for that we dont really need to do anything. [02:28] a couple cloud-init scripts that allow people to test [02:37] Do any of you know how to format a second hard drive? === jjohansen1 is now known as jj-afk === ZacharyNewb is now known as ZacJstSetUpHisSr [02:51] lol === ZacJstSetUpHisSr is now known as NewSrvrUsrRdyToH === NewSrvrUsrRdyToH is now known as SrvrUsrRdyToHelp [02:51] :D [03:05] Hello? [03:30] Are people here? [03:32] Hello? [03:32] hello? [03:32] hello? [03:32] LaND HO [03:42] SrvrUsrRdyToHelp: There are people here, but this channel is usually pretty quiet this time of day. [03:43] ScottK: I see [03:43] ScottK: Well, I'm slowing peicing together my ubuntu server [03:45] Great. [03:45] ScottK: remote access via putty with windows 7 netbook I have is working, ports, right now I just figured out how to format and mount a second hard drive, put it into the startup script to mount automatically, and now I'm thinking about how to configure apache server to serve my site, off of the second mounted hard drive [03:46] Sounds like you're making progress. [03:46] ScottK: Definitely. Manually set all ethernet settings, etc etc etc [03:46] ScottK: Hours of fun, Are you enjoying your day? [03:46] * ScottK has had a decent day, but is just about to head for bed. [03:47] * SrvrUsrRdyToHelp is sorry to hear that. :( [03:59] hi everyone [03:59] hi there [04:00] what's up? [04:00] b0gatyr: what's up? [04:00] not much ya know [04:00] how about you? [04:27] Anyone here used DRBD to create an ISCSI Target? [04:33] someone here? [04:33] hello? [04:41] sup [04:44] ..... [04:44] :-\ [05:17] hi [05:17] can someone please guide me about https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/379329 ? [05:18] Launchpad bug 379329 in openssh "CVE-2008-5161: OpenSSH CBC plaintext recovery" [Low,Fix released] [05:38] hello people; [05:40] kaushal: what about it? [05:43] here's my scenario: i should make a web interface for iptables, (yes, it's a firewall web panel). problem is apache runs web page as "nobody" so i can't execute "iptables". question is "since there's a apache process run as root, is it possible to make apache use that process to run a web page?" [05:44] Dark-Sun: no [05:45] Dark-Sun: that process is only responsible for listening on port 80, which is restricted to root access (all ports below 1024 are) [05:46] Dark-Sun: You can, however, run iptables commands with sudo. However, I do not recommend this as this would mean anybody who can break into your web code can run any iptables command... [05:47] Dark-Sun: is there any reason you don't want to use one of the existing iptables frontends, like smoothwall for instance? [05:47] SpamapS: you mean that apache process can't do anything else but listening? [05:48] Dark-Sun: basically, yes [05:48] Dark-Sun: it just listens, and hands accepted connections to the child processes. [05:50] SpamapS: actually i was about to do some other stuff beside firewall, and i was curious how they do this [05:51] i got some work around clues, like jailing, a daemon running on the web server, but i don't know which one should i choose [05:57] SpamapS: hi [05:57] sorry was away [05:57] is there a fixed version available for 8.04 ? [05:57] I mean openssh-server [06:06] Dark-Sun: a daemon that is chrooted off and very simple would work, as long as it has a way to verify who is communicating with it. [06:07] kaushal: looks like https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/379329/comments/3 has a workaround that will work for hardy. [06:07] Launchpad bug 379329 in openssh "CVE-2008-5161: OpenSSH CBC plaintext recovery" [Low,Fix released] [06:07] SpamapS: ok [06:08] so is it to add this Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc to to ssh_config and sshd_config and restart the daemon and restart openssh server ? [06:09] and then rescan the server again with OpenVAS Server ? [06:09] SpamapS: hummm... i should read more about it, thanks ;) [06:10] kaushal: also mdeslaur has replied in bug #651720 about why the patch was not pushed back to hardy. [06:10] Launchpad bug 651720 in openssh "Hardy OpenSSH version out-of-date - security risks" [Undecided,Invalid] https://launchpad.net/bugs/651720 [06:11] SpamapS: did you mean "executing daemon with a user with limited root access"? [06:12] SpamapS: ok [06:16] Dark-Sun: the daemon would have to either run as root, or use something like sudo to temporarily elevate its privileges for each command. [06:20] SpamapS: i see. thanks :) [07:24] New bug: #676304 in samba (main) "Samba fails with files having colon in file name" [Undecided,New] https://launchpad.net/bugs/676304 [08:30] is Empathy's MSN connecting broken for anyone else? the fix here: http://ubuntuforums.org/showpost.php?p=10003289&postcount=17 is already applied but it still doesn't want to connect [08:31] Callum__: that's probably offtopic for -server. [08:31] oh, oops [08:31] wrong channel [08:31] haha [08:32] SpamapS: I would do it by having the web page write to (say) /srv/www/rw/netfilter.rules, and have a separate root-owned cron job or inotify watcher that ran iptables-restore on it. [08:33] Although obviously web-based management of ANYTHING is WRONG. [09:14] m0n0wall? [09:16] alvin: what about it? [09:18] It's only web-based [09:19] Are you suggesting it *isn't* wrong? [09:24] Certainly. I prefer the command line, but m0n0wall is a very nice piece of software. [09:27] Maybe you just have lower standards than I do [09:28] You wouldn't say that if you had used m0n0wall, or something like it. [09:28] Using PHP in the boot sequence doesn't sound very clever to me. [09:29] I can get behind standardizing on XML as a configuration file format, though. [09:29] neither is using upstart [09:29] Oh, definitely. I hate upstart. [09:29] does someone know if drbd replication is only one way or is it possible to write in both machines? [09:32] alvin: the HTML they're using is pretty crap, at least. [09:33] I can see they're using tables for alignment and instead of , in the first thirty seconds of RTFSing [09:34] <_ruben> binBASH: master/master is supported [09:34] twb: You have m0n0wall running? Or do you mean their website itself? [09:34] <_ruben> does open up a nice can of worms though [09:34] alvin: I'm reading http://svn.m0n0.ch/wall/tags/release-1.32/webgui [09:35] alvin: obviously I'm not going to RUN anything PHP-based. [09:36] ah, ok. Could be. But I only used it as an example of a well working and stable web-based systems. of course, there are others. Managing ZFS on Solaris web-based will simply not work, SWAT (samba) isn't the same as smb.conf either, and eBox isn't there yet. I only wanted to say there are exceptions. [09:36] _ruben: say, you have a clue, and you know about drbd. [09:36] _ruben: I have a deployment case with side-by-side identical hardware, each with a two-disk RAID1. I want the backup unit's disks slaved to the production unit. I have been doing nightly rsyncs, and I started looking at instead adding the slave's disks directly to the RAID1 (with --write-mostly) over AoE. [09:36] _ruben: is drbd a better idea than aoe in that case? [09:37] alvin: "it works" isn't the same as the Right Thing. [09:38] alvin: as far as "it works for me" goes, I'm relatively impressed by OpenWRT's solution, which involves a YAML-esque configuration format for everything, which has both a nvram get/set-style CLI and a lua-based web UI. [09:39] twb: I agree. let's say: "it works very well and is stable". the Right Thing isn 't always the best solution. For example, Ubuntu removed libstdc++5 in Lucid. (Yes, the LTS). This broke many commercial applications and thus production systems. The right thing would have been to ask the commercial vendors to recompile their products, but you know you can't really do that. [09:39] Good to know :) I'll look at OpenWRT [09:40] alvin: products that you can't recompile are inherently not The Right Thing :-) [09:40] twb: No, but tell that to the management if your company really relies on it. [09:41] I could probably make a case that companies are the Wrong Thing, too -- but I'm not an economist :-) [09:41] * twb impotently shakes fist at the world [09:42] that brings a smile to my face === nijaba is now known as nijaba_afk [10:30] <_ruben> twb: afaik, drbd would be a nice a solution for that (dont have any hands-on experience with it yet though) [10:30] Nod [10:31] Now I have to convince to pay for another day of learning drbd (on top of aoe) [10:32] <_ruben> personally i'd prefer drbd over raid1+aoe [10:32] <_ruben> the latter sounds a tad hackish ;) [10:42] Nobody thought of drbd when aoe+md was proposed === nijaba_afk is now known as nijaba [10:58] <_ruben> hehe [11:01] The rsync technique we've been using for ages -- before USB keys were bootable, and we were doing it from a live cd. [11:02] New bug: #676418 in etckeeper (main) "not installing http[s]+webdav" [Undecided,New] https://launchpad.net/bugs/676418 [11:04] twb: csync maybe? [11:04] Though I agree with the +1 for drbd. [11:04] <_ruben> so they're "offline" rsyncs?? [11:04] <_ruben> as in: not from the running system itself [11:04] _ruben: no no [11:05] We have the slave run a live image, so to failover, all the monkey has to do is unplug the CD/USB key, and move the ethernet/power cables [11:05] Er, s/power//, but you would need to reboot the slave [11:06] <_ruben> ah [11:06] monkey-based failover was a core requirement [11:10] Consider a lucid server running about twenty lucid containers (broadly, one per service). End users do not have access to the dom0, and creating/reconfiguring/destroying containers is an infrequent activity. [11:10] Is there ANY benefit to lxc-behind-libvirt instead of direct lxc? [11:36] New bug: #676439 in freeradius (main) "missing manpages, listed in the freeradius manpage" [Undecided,New] https://launchpad.net/bugs/676439 [11:37] <_ruben> grr, $PS1 gets set/reset/overwritten in tons of places .. /etc/bash.bashrc and also a .bashrc in each user's homedir, and even within those files there's multiple blocks to set $PS1 [11:38] _ruben: why is that bad? === ihCiFriS is now known as SirFiChi [11:39] <_ruben> twb: no easy way to change the prompt globally [11:39] <_ruben> guess i should mess up /etc/skel/ prior to adding users [11:40] _ruben: why do you want to do that? [11:40] I mean, /etc/bash.bashrc would be the Right Way, but it sounds like you want to prevent users changing it back to whatever they prefer [11:40] <_ruben> twb: nah, i want to offer a saner default (fqdn instead of short name) [11:41] That's /etc/skel and/or /etc/bash.bashrc, then [11:41] And too bad for existing users [11:42] <_ruben> fresh servers and only handful of users, so it's not big a deal, is kinda annoying though .. the only diff between root's .bashrc and users' .bashrc is the bash autocompletion being disabled for root [11:42] <_ruben> a saner approach would've been to use /etc/skel/.bashrc as /etc/bash.bashrc and give root it's own .bashrc (which it already has) [11:42] <_ruben> current approach sems like a cludge to me [11:43] _ruben: I am *strongly* opposed to putting "clever" things in the default /etc/bash.bashrc [11:43] RHEL does that and it makes me livid [11:43] e.g. I ssh into a RHEL box and it changes my terminal title to gibberish [11:44] And if you, a user, want to *disable* such functionality, your .bashrc becomes horribly complicated by lines like "if I running on RHEL>=3 then unset magic_variable; magic_function() {:;}" [11:45] <_ruben> why would a .bashrc nee... oh, home-on-nfs for instance [11:45] Right [11:45] Or even if you store $HOME in a VCS [11:46] Even the bloody command-not-found stuff annoys me [11:46] unset command_not_found_handle # Ignore Ubuntu's attempt to slow exit(126) to a crawl. [11:47] <_ruben> if only i could trick bash to show the fqdn to show up for \h .. then again, even the supposed-to-work \H doesnt result in fqdn being displayed [11:48] Then there's http://paste.debian.net/100030/ for when you're sshing from Debian/Ubuntu to a server without locales [11:48] <_ruben> why not just install command-not-found? :P [11:48] _ruben: because I don't have root on all hosts [11:48] <_ruben> ah [11:48] And even if I did, other users might want that [11:48] (Remember those "server" things that have >>1 user? ;-P) [11:49] * twb rages on re-discovering you can't use kvm -curses with the lucid installer [11:50] <_ruben> i probably am the only user who actually cares about this stuff (users are sysadmins in my case, with only bare minimum linux knowledge) [11:52] Is there an option for df I'm not seeing? I want df to output in bytes instead of kilobytes. [11:53] alvin: df -B 1 ? [11:54] WFM [11:54] or df --blocksize=1 [11:54] Same thing [11:54] yup [11:54] twb: ok, a valid option I didn't see. Thanks. (It also appears that the manual is not entirely correct. 1k blocks are used by default while the manual says 512b) [11:55] ...and that's also in the man. I was looking at the man of another version... [11:55] <_ruben> Disk space is shown in 1K blocks by default, unless the environment variable POSIXLY_CORRECT is set, in which case 512-byte blocks are used. [11:55] Yes, just saw it :-) [11:55] where can I check out the installer's code ? [11:56] server installer [11:56] alcy: apt-get source debian-installer [11:58] jpds: doh. thanks. :) [11:58] One day I'll set POSIXLY_CORRECT just to laugh at how much breaks [11:59] <_ruben> ;) [12:01] Did we decide where -t cgroup should be mounted, since /cgroup is a FHS violation? [12:03] <_ruben> bah .. with linux you can create a tunnel using ipv6 endpoints and carrying both ipv4 and ivp6 inside (mode any), but you can't do so over ipv4 :( [12:03] <_ruben> oh well, enough reason to tunnel ipv4 over ipv4 and ipv6 over ipv6 [12:03] _ruben: just get native ipv6, man [12:03] Er, maaaaaan [12:04] <_ruben> twb: i do, but i don't have a vlan (yet) between the various pops [12:06] * twb squints [12:06] If you have a native ipv6 connection to the IPv6 internet, surely you don't need a vlan [12:07] unless you mean you want to encrypt ipv6 traffic passing across the ipv6 internet? === oubiwann is now known as oubiwann-away [12:08] * jpds hugs the native v6 internets === oubiwann-away is now known as oubiwann [12:08] hi, which is the better choise between maverick and luci for a KVM/corosync server? where i can get these kind of information, to know what is really changed about single kernel between these two distro? Thanks [12:11] ZMo: if you plan to use that system some time, use the LTS release (-> lucid) [12:11] ZMo: and for the kernel changes you'll need to check the kernel changelogs from kernel.org (or at least the short logs from kernelnewbies.org) [12:13] <_ruben> twb: dynamic routing between pops, that requires 'direct' connections between pops, so either vlans or tunnels [12:13] joschi, so is theren't a ubuntu kernel changelog? [12:14] ZMo: yes, but these only contain infos about the patches applied by debian/ubuntu to the respective kernel versions [12:15]