[02:20] <queso_> If I write a bash script to be run at startup as root, where is that standard location for the script to be placed and how do I make sure it starts at boot?
[02:28] <zul> SpamapS: around?
[04:11] <toddnine> can anyone get to mirrors.ibilio.org?  It appears to be down
[04:13] <shauno> Connecting to mirrors.ibiblio.org|152.46.7.65|:80... failed: Connection refused.
[04:13] <toddnine> lame
[04:14] <toddnine> thanks for checking, wasn't sure if it was a local issues
[04:14] <lifeless> http://downforeveryoneorjustme.com/mirrors.ibiblio.org :)
[04:33] <toddnine> lifeless: There's a site for everything!
[04:44] <icek> I have ubuntu-desktop, how do i change it to ubuntu-server?
[04:45] <qman__> swap kernels and purge a lot of packages
[04:47] <Billy_D_Kidd> its easy reinstall then
[04:48] <Billy_D_Kidd> ping
[05:27] <Gadu> I have a ruby script that I want to run on my server (it's an IRC bot).
[05:27] <Gadu> I tried starting it via SSH and tried setting it to start in /etc/rc.local to no avail.
[05:27] <Gadu> if I close out of my SSH session the script stops
[05:28] <Gadu> is there anyway to run it short of plugging a monitor and keyboard in?
[05:29] <_mud_> what command do you have in /etc/rc.local?  are you running the bot as root, some services will not allow root@ to connect via irc
[05:29] <demonspork> I am using rsync via ssh and it is taking forever between two servers I know get insanely high bandwidth between them (both in data centers) and is still refuses to move quickly
[05:30] <_mud_> Gadu: look into running a cron for the bot?
[05:31] <Gadu> "cd /home/username/folder && ruby script.rb" is what I have (it ran successfully with "sudo /etc/rc.local"
[05:31] <Gadu> but it still closes when I close the ssh session
[05:31] <_mud_> Gadu, or 'man screen' - would not suggest running it as root btw.
[05:32] <Gadu> I wouldn't run it as root either, but I'll take anything that makes it stay up lol
[05:32] <_mud_> easy way run it in a screen and detach it
[05:33] <_mud_> see: man screen
[05:33] <demonspork> Gadu, screen is a fantastic way to run things like that
[05:33] <Gadu> I've looked into screen for another use but was unsuccessful, I'll give another try to screen lol
[05:33] <demonspork> ctrl A and then press D will disconnect from the screen
[05:33] <demonspork> screen -x to reconnect to it
[05:33] <Gadu> and if I want, say, 3 separate screen sessions?
[05:33] <_mud_> type:  screen - then run your app - cnt+a and cnt+d = detaches it
[05:34] <_mud_> screen -r pid#
[05:34] <demonspork> screen -x [id]
[05:34] <demonspork> pid
[05:34] <demonspork> or you can name the screens with -S
[05:34] <_mud_> hmm -x?  what the diff from -r ?
[05:34] <demonspork> screen -S myserver
[05:34] <demonspork> -x allows you to connect multiple times
[05:34] <demonspork> -r will only connect to a detached screen
[05:34] <_mud_> ah
[05:35] <_mud_> been using it for 15 years never knew
[05:35] <Gadu> screen -S alpha > CTRL+A > CTRL+D > ?
[05:35] <demonspork> lol
[05:35] <demonspork> Gadu, yes
[05:35] <Gadu> what to recall alpha?
[05:35] <demonspork> that disconnects you from the screen
[05:35] <demonspork> well, it if is the only screen, screen -x will reconnect you
[05:35] <demonspork> but if you want to name it specifically
[05:35] <demonspork> screen -S alpha -x
[05:35] <demonspork> will reconnect to existing screen named alpha
[05:36] <Gadu> I seriously love you guys right now
[05:37] <demonspork> I learned a lot of advanced stuff recently so that I could use a screen session to inject commands into a minecraft server console
[05:37] <Gadu> that game worth buying? I've seen some gameplay but don't know much
[05:38] <Gadu> erm, that's probably off topic. continue in PM?
[05:38] <demonspork> it is worth buying
[05:39] <demonspork> I run a minecraft server and it is forcing me to learn web development
[05:39] <demonspork> http://minecraft.brbuninstalling.com/map/
[05:39] <demonspork> this is what is currently running (my issue earlier with rsync moving deathly slow)
[05:39] <demonspork> I am about to stop this, archive the entire thing and move it
[05:40] <_mud_> rsync full ?  or differential ?
[05:40] <demonspork> well, first tried a differential
[05:41] <demonspork> and then I remembered that every single file that I was moving was going to be different from the files of the same name on the destination
[05:41] <demonspork> so I jsut deleted everything and started from scratch on the destination
[05:41] <demonspork> still, same slow transfer rate
[05:42] <_mud_> yep yep ;)  server maps?  they ploting ubuntu servers now?
[05:42] <demonspork> huh?
[05:42] <demonspork> plotting ubuntu servers?
[05:42] <_mud_> in the channel topic, sorry I jumped
[05:43] <_mud_> never been on openprojects for years
[05:43] <_mud_> errr freenode now
[05:43] <Gadu> ok, now is there a way I could have what I start in my 3 screen session when the computer boots?
[05:44] <Gadu> sessions*
[05:45] <demonspork> Gadu, crontab
[05:45] <demonspork> use "man crontab" for more information
[05:45] <Gadu> this will allow me to start this stuff when it boots with user priviledges?
[05:45] <Gadu> privileges*
[05:45] <demonspork> yes
[05:46] <Gadu> man this is exciting
[05:46] <demonspork> @reboot is the special flag for starting at reboot
[05:46] <demonspork> @weekly for weekly
[05:46] <demonspork> @monthly
[05:46] <demonspork> stuff like that
[05:46] <_mud_> or as a user use "crontab -e" but look up formatting
[05:46] <demonspork> or you can get more advanced and do the full minute hour day week month configuration
[05:47] <Gadu> at startup is great =P
[05:52] <Gadu> do I have to login for crontab to begin? or will it startup with the user's privileges without the user logging in?
[05:54] <demonspork> Gadu, crontab is not session dependendant at all
[05:54] <demonspork> is is executed by the cron daemon which runs as a system service
[05:54] <demonspork> and each user's crontab is run with thier username
[05:55] <Gadu> отлично
[05:56] <Gadu> again, I love you
[05:56] <demonspork> where can I do a speedtest on my server?
[05:56] <demonspork> because these 2 servers only seem to be getting 4mb/s between each other
[05:56] <demonspork> which is much slower than the 25MB/s I can move stuff back and forth between them
[05:58] <Gadu> so moving things is 200mbps, what activity is getting the 32mbps?
[05:58] <demonspork> no, 4mbps
[05:59] <demonspork> like slower than my DSL at home's download speed
[05:59] <Gadu> 0.5MB/s then?
[05:59] <demonspork> oh wtf
[06:00] <Gadu> 4MB/s = 32mbps
[06:00] <demonspork> each connection is being throttled to that speed
[06:00] <demonspork> fucking hell
[06:00] <Gadu> interesting
[06:00] <demonspork> can I add workers to rsync
[06:00] <demonspork> hmm
[06:00]  * demonspork looks at the man page
[06:02] <Gadu> perhaps try SCP instead of rsync?
[06:02] <Gadu> XD
[06:03] <demonspork> frick, rsync doesn't seem to support using multiple workers
[06:03] <demonspork> well, even the apache server is only giving me the files at that max speed
[06:03] <demonspork> but I am downloading it straight to my house at the exact same speed
[06:21] <IrishWristwatch> hello
[07:16] <fluvvell> ok, I've installed 64bit 10.04 with software raid on a new quad core IBM x3100 M3, its quick but the fans are running fairly hard. When on the desktop live disk (while configuring the raid1 array) things were much quieter,
[07:17] <fluvvell> question: What packages help control fan speeds on server?
[07:20] <banker247> i have a question as i've just setup an apache2 and mysql server
[07:20] <banker247> if someone is trying to bruteforce you won't their attemps fail if you lockout on 3 failed attemps?
[07:28] <ttx> hallyn: no -- I was standing by after https://bugs.launchpad.net/ubuntu/+source/samba/+bug/570944/comments/15
[07:29] <ttx> hallyn_: it's one of those things where picking the right default ("works for most") is difficult
[07:30] <ttx> hallyn_: so it probably needs to be handled by extra logic in pam-auth-update
[07:35] <fluvvell> is there a way to backup all samba users passwords, and import them to the a new machine?
[07:36] <fluvvell> ttx, re banker247's  3 attempts, have you ever used fail2ban?
[07:37] <ttx> fluvvell: no
[07:37] <fluvvell> I've got it configured here for ssh login attempts - has a default 10 minute lockout of the ip address (adds an iptables entry)
[07:38] <fluvvell> I think it can be configured for a number of different servers.
[07:43] <banker247> fluvvell, no.. i mean. if i lockdown the server after 3 attemps for 3 minutes each time. then ... how can it possibly be cracked if i have a 256bit pw?
[07:43] <banker247> they can always change their ips heh
[07:47] <fluvvell> I see your point
[07:48] <banker247> so theoretically you would be impossible to be cracked however you could still be compromised if you slipped up somehow right?
[07:51] <fluvvell> they get 1440 wrong attempts each day on a 32 character password?
[07:52] <fluvvell> It would be nice for the administrator to be somehow alerted after a few weeks that someone was trying to get in :_)
[08:04] <fluvvell> so, does anyone know about what 64bit packages to look for to calm the cpu fan down a bit? They were quiet on the live desktop edition...
[08:05] <fluvvell> Or are they kernel modules?
[08:39] <Guest16722> Hi all. I've setup a secondary MX server running postfix amongst other things, and I've written a simple perl script to sync the relevant files over SSH, then restart the daemons over SSH when a file update occurs.  This runs every 15 minutes.  I've managed to dump most config directives unique to each host (such as mydestination, myorigin) into its own file which I can simply exclude
[08:39] <Guest16722> in rsync.  The problem is myhostname, I can't seem to find a way to remove it from the main.cf file...
[08:40] <Guest16722> This becomes an issue because I run the postconf command each time on the second MX over SSH to set myhostname to what it needs to be, but this means every 15 minutes, rsync thinks it needs to update main.cf each time, which in turn means that the mail-related services are restarted each time.  I don't like this. :-(
[08:41] <Guest16722> I'm all out of ideas...does anyone have any?
[09:31] <SpamapS> Guest16722: sorry there aren't many people up at this hour...
[09:31] <SpamapS> Guest16722: what files are you syncing every 15 minutes?
[09:31] <Guest16722> That does seem to be the case.  I understand.
[09:31] <Guest16722> Let's see...
[09:31] <SpamapS> Guest16722: have you heard of 'puppet' ?
[09:32] <Guest16722> my @localFiles = ("/etc/postfix/",
[09:32] <Guest16722> "/etc/default/spamassassin",
[09:32] <Guest16722> "/etc/amavis/",
[09:32] <Guest16722> "/etc/clamav/",
[09:32] <Guest16722> "/etc/razor/");
[09:32] <Guest16722> I have not heard of puppet.
[09:32] <SpamapS> Guest16722: it will help you template the config files and will only reload postfix when the files actually change.
[09:32] <SpamapS> Guest16722: its a configuration management system.
[09:32] <Guest16722> Interesting...
[09:34] <SpamapS> Guest16722: we've all written rsync / ssh / etc. syncing thingies.. Puppet makes it all better. ;)
[09:36] <SpamapS> Guest16722: anyway, I have to sleep now. Good luck checking out puppet. :)
[09:36]  * SpamapS goes zzZZZZZZzzzz...
[09:36] <Guest16722> Thanks.
[10:47] <lvh> Hi
[10:47] <RoyK> ho
[10:48] <lvh> I've got a spare box and I'd like to try maverick's virtualization stuff on it
[10:49] <lvh> The wiki appears to suggest qemu: is that a reasonable suggestion performance wise?
[10:49] <lvh> I used it in the past and it was slow as molasses
[10:49] <lvh> (not disparaging qemu per se: it was great for what I used it, performance wasn't the problem)
[10:51] <lvh> Is the packaged qemu already patched to use kvm?
[11:43] <sstraw> I'm tearing my hair out here.
[11:43] <sstraw> Trying to install some Perl CPAN modules.  Ubuntu Server 9.10
[11:43] <sstraw> Standard stuff, but an endless series of prerequisites for some things, and it's not all installing successfully.
[11:44] <sstraw> starting with a basic "install Bundle::cpan"
[11:45] <sstraw> (er, Bundle::CPAN)
[11:46] <sstraw> problem is that too many of the tests seem to fail in one prerequisite or another, causing them not to install, with a trickle effect.
[11:47] <sstraw> For instance, can't get Module::Build to install successfully, and a pile of other things are dependant upon it.
[11:51] <sstraw> the tests cumulatively take a long time to run as well, which makes the repeated CPAN operations that much more painful.
[11:52] <sstraw> Is there some way to download a PACKAGE of Perl+CPAN modules so that I can skip trying to get the chicken-v-egg dependancies to resolve?
[11:54] <alvin> sstraw: Are the modules you need not available through the default repositories? A lot of CPAN modules are made into .deb packages.
[11:55] <alvin> sstraw: I do not have a lot of experience with CPAN. (Only used it to install 1 module and it worked)
[11:55] <sstraw> really irritating:  "Could not make - Unknown Error".  How useful.
[12:14] <alvin> sstraw: Do you have the package build-essential installed?
[12:43] <milligan> Anyone here that uses geany? If so, do you know how I can load the documentation for a library and load the api realtime ?
[13:14] <ScottK> SpamapS: Thanks for the spamasassin SRU.
[13:32] <SpamapS> ScottK: no problem. :) I used to be a heavy, heavy SA user.. intereesting to see that not much has changed.
[13:33] <ScottK> 3.3 is a bit different, but not much has.
[13:33] <ScottK> People seem to keep hiring Spamassassin developers and then the disappear.
[13:34] <SpamapS> I've been behind a Barracuda for about 3 years now.. pretty much kills any SA configuration I've ever tried.
[13:35] <ScottK> AFAIK that's SA plus some special sauce.
[13:39] <SpamapS> pretty much
[13:39] <SpamapS> closely monitored and managed SA
[13:39] <ScottK> Plus a shit ton of data and an IP reputation system.
[13:40] <SpamapS> I built something similar in 2002, sold it to about 10 businesses in socal with contracts for support.. but thats right when barracuda landed and they were WAY ahead of me.
[13:40] <SpamapS> Mine was also an IDS using Snort ... but nobody understood why that was useful. :-P
[14:30] <hggdh> JamesPage: got a Q for you, available?
[14:49] <JamesPage> hggdh: sure
[14:52] <hggdh> JamesPage: how do we update the tests on Hudson? I pushed an updated dns-server to bzr
[14:53] <JamesPage> hggdh: the tests are not held centrally, but on each slave so they need to be pulled to each slave individually.
[14:54] <hggdh> JamesPage: OK, then we need to update the slaves (I do not have access, I guess)
[14:54] <JamesPage> hggdh: I've been working on packaging the slave framework and dependencies today; both mercury and bowlan are running this now.
[14:55] <hggdh> JamesPage: additionally -- IPv6 localhost entry in /etc/hosts changed from Maverick to Natty. Would this be a bug?
[14:57] <JamesPage> hggdh: not sure to be honest
[14:57] <JamesPage> hggdh: interestingly the test was still working?
[14:57] <hggdh> zul: network is now working on the test rig. OTOH, we now fail to find a harddrive in partman :-(
[14:57] <hggdh> JamesPage: no, it failed -- this is why I updated it
[14:58] <hggdh> JamesPage: but now I wonder if this could be seem as a regression
[14:58] <JamesPage> hggdh: looks OK to me - http://204.236.234.12:8080/job/natty-server-i386_dns-server/9/testReport/test/DnsServerTest
[14:59] <JamesPage> I found and resolved a couple of core issues today whilst I was packaging
[14:59] <JamesPage> 1) the preseed for all but minimal virtual was not using -generic-pae kernel.
[15:00] <JamesPage> 2) minimal virtual install size test does not take into account testing overlay (25MB).
[15:00] <JamesPage> hggdh: let me merge in you update and we can re-run.
[15:01] <pmorris> How do I change the screen resolution on a server?
[15:03] <hggdh> JamesPage: weird. When I ran dns-server locally, it failed because on Natty IPv6 localhost is now called ip6-localhost
[15:04] <hggdh> so now I am confused :-(
[15:05] <JamesPage> hggdh: thats weird
[15:05] <JamesPage> hggdh: I've updated the package and upgraded bowlan and mercury
[15:06] <JamesPage> hggdh: and kicked off dns-server jobs for both archs
[15:06] <JamesPage> hggdh: packages are in ppa:james-page/usit
[15:06] <JamesPage> hggdh: want to get it to a place where all is working fine before we merge back into trunk
[15:07] <hggdh> JamesPage: ack, makes sense
[15:07] <JamesPage> hggdh: need to update the docs - have made a few other improvements whilst packaging
[15:07] <JamesPage> hggdh: like remove gpxe requirement - makes the install cleaner
[15:09] <hggdh> woot!
[15:09] <JamesPage> hggdh: I've put the code branch under lp:~ubuntu-server-iso-testing-dev/ubuntu-server-iso-testing/1.0-RC1
[15:09] <JamesPage> hggdh: you should be able to push changes to it as well now.
[15:13] <hggdh> JamesPage: roj
[15:15] <MrMintanet> Hello.
[15:16] <MrMintanet> How is everyone this morning?
[15:17] <MrMintanet> Anyone here work in a colocation datacenter recently?
[15:27] <MrMintanet> Can someone help me with load balancing?
[15:41] <Ninjix> anyone having trouble with the two latest 2.6.32 lucid kernels running as KVM guests?
[15:42] <cemc> Ninjix: trouble?
[15:45] <smoser> jdstrand, could you read https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/684110 real quick ?
[15:45] <smoser> i'm tihning its app armour related, but not smart enough to tell for sure.
[15:47] <jdstrand> smoser: the upgrade failed because named did not start because it is trying to /var/lib/named/etc/bind/named.conf which is not in the default apparmor profile
[15:47] <jdstrand> s/trying to/trying to read/
[15:47] <jdstrand> smoser: and hi! :)
[15:47] <smoser> :) thanks.
[15:47] <smoser> so would some local configuration prior to that installation have triggered that ?
[15:48] <smoser> (i realize thats bind9 specific question. surely the default 'apt-get install bind9' on lucid is not busted)
[15:48] <jdstrand> smoser: absolutely. /etc/bind/named.conf is the normal location for that file and is allowed read in the apparmor profile
[15:48] <Ninjix> cemc: yes, I can't get 2.6.32-25 or 2.6.32-26 to post after grub handoff
[15:48] <Ninjix> 2.6.32-24 works fine
[15:49] <jdstrand> smoser: so the user changed location of the file, possibly trying to chroot bind (wild guess)
[15:49] <cemc> Ninjix: lucid guest? 32/64 bit ? on what host?
[15:49] <jdstrand> smoser: we do allow /var/lib/bind/**, but the user did /var/lib/named/...
[15:49] <Ninjix> lucid 64bit guest on Proxmox
[15:50] <smoser> ah. ok. yeah, i see. jdstrand thank.
[15:50] <jdstrand> smoser: bottom line, the user needs to adjust the profile. I would point him at https://wiki.ubuntu.com/DebuggingApparmor
[15:51] <Ninjix> another Proxmox user has reported the same problem with his Lucid guests running on AMD proxmox host
[15:51] <jdstrand> smoser: which conveniently also discusses apparmor and chroot environments, in case the user was trying to do that
[15:51] <cemc> Ninjix: oh, proxmox. I'm not familiar with that... I have a lucid host with KVM I could try on
[15:51] <smoser> jdstrand, awesome
[15:51] <jdstrand> smoser: so he should be able to figure it out on his own
[15:51] <Ninjix> I've been able to confirm the problem only happens on AMD cpu
[15:51] <Ninjix> my Intel cpu based hosts/guests are fine
[15:52] <Ninjix> so I'm trying to triangulate what's changed on Proxmox + Ubuntu + AMD
[15:52] <Ninjix> backtrack from there
[15:53] <Ninjix> find it strange that a minor revision of Ubuntu kernel would cause such a boot problem but...
[15:54] <cemc> Ninjix: proxmox uses kvm too, right?
[15:54] <Ninjix> cemc: yes
[15:54] <Ninjix> the latest version uses Ubuntu 2.6.35 kernel with Debian 5 userland
[15:56] <Ninjix> so I'm hoping some in channel has a host running on AMD and can test a KVM ubuntu guest
[15:57] <cemc> well I do have a host on AMD, but it's an ubuntu 10.04
[15:57] <cemc> with KVM installed on it, and a couple of guests
[15:58] <Ninjix> and no issues with latest kernels for the guests?
[15:58] <cemc> not sure, I have to try, hold on
[15:58] <Ninjix> thanks
[16:01] <cemc> Ninjix: and that's only on 64bit lucid guests?
[16:02] <cemc> I have a 32bit lucid guest here which runs just fine with 2.6.32-25-generic
[16:06] <Ninjix> cemc: ok thanks for testing. I've only got 64-bit guests
[16:07] <cemc> Ninjix: I'll install one in a minute
[16:07] <cemc> Ninjix: btw, what's the error, or what happens when you try to boot with -26 kernel?
[16:08] <Ninjix> that's the tough part. no errors or anything else is displayed even with quiet removed from grub2 config
[16:09] <cemc> Ninjix: so what happens? you see the grub menu, press enter on the -26 kernel and then ?
[16:09] <Ninjix> freeze
[16:11] <tarvid> is ftp connection tracking on by default?
[16:12] <tarvid> in 9.10
[16:16] <tarvid> and what's with
[16:16] <tarvid> lrwxrwxrwx 1 root root 15 2010-02-21 13:24 blkid.tab -> /dev/.blkid.tab
[16:17] <tarvid>  /dev/.blkid.tab does not exist
[16:20] <tarvid> run blkid once and it is there so why the symbolic link before the file is created?
[16:35] <tarvid> how do I find which package contains blkid?
[16:36] <ssureshot> why is ssh listening on tcp        0      0 127.0.0.1:6010          0.0.0.0:*               LISTEN      2107/0   ?
[16:36] <ssureshot> it isn't there right after a fresh boot
[16:37] <Pici> tarvid: dpkg -S `which blkid`
[16:37] <Pici> Or use apt-file in place of dpkg -S if you don't have it installed yet.
[16:37] <Pici> (its util-linux btw)
[16:38] <tarvid> thanks
[16:40] <Ninjix> cemc: looks like it has something to do with SMP
[16:41] <tarvid> ubuntu-bug doesn't like that package
[16:42] <tarvid> libblkid1 maybe?
[16:42] <tarvid> yes
[16:42] <Pici> tarvid: libblkid1 also comes from the same source package.
[16:44] <Ralchev> Hey guys, I have a problem when I try to use SSH .. i'm getting this http://paste.ubuntu.com/539042/
[16:47] <Thund3rX> Hi guys, does someone know where I could find some reading about arguments why Ubuntu Server( or Debian based Linux) would fit the security hardening needs in an enterprise: each time we're dealing with the security people, they keep pointing us to Red Hat for the state of art standard hardening
[16:47] <Ninjix> Ralchev: looks like the SSH account doesn't have write priv on it's home directory listed in /etc/passwd
[16:49] <Ninjix> Thund3rX: Have you asked Canonical marketing people?
[16:49] <Ninjix> I bet they have something on the shelf since they have scored some bigger customers lately
[16:49] <Ralchev> Ninjix, it has, it was running great this morning
[16:50] <Ninjix> Ralchev: same error for other accounts?
[16:52] <Ralchev> Ninjix, what other accounts? it is the second time im getting that error, when I reboot it is ok, but it has to be fixed. Look at this thread http://www.linuxquestions.org/questions/linux-hardware-18/system-went-into-read-only-mode-429779/ it seems that the guy has the same problem like me
[16:53] <lvh> hey, when configuring a bridge interface, do I actually have to set bridge_stl and friends?
[16:53] <lvh> I thought brctl just used defaults when you didn't
[16:53] <pmatulis> lvh: that's right
[16:53] <Ninjix> Ralchev: do you have console access?
[16:53] <lvh> pmatulis: Which one is right
[16:53] <Ralchev> Ninjix you mean direct access?
[16:53] <lvh> pmatulis: It uses sensible defaults or you really need to set it
[16:54] <Ninjix> Ralchev: yes
[16:54] <Ralchev> not rly, but I am able to find
[16:54] <Ralchev> I mean
[16:54] <Ralchev> it is hard to get ;d
[16:54] <Ralchev> the serv. is in my office
[16:55] <pmatulis> lvh: the former (sensible).  you really just need to assign an interface (bridge_ports).  that said, if you have multiple bridges then you may need to set some settings, not sure
[16:55] <lvh> pmatulis: Nah I just have one
[16:56] <lvh> pmatulis: Unless, well
[16:56] <lvh> pmatulis: Unless virtualbox decides to secretly make one when I'm not looking
[16:56] <Ralchev> http://paste.ubuntu.com/539048/
[16:56] <Ninjix> Ralchev: you could try using SFTP to copy the /var/log/syslog and /var/log/dmesg and look for clues
[16:59] <JamesPage> hggdh: Hudson is now showing a full set of correct results (aside from the samba-server test - see note on i386 version)
[17:00] <JamesPage> hggdh: I've updated the ISO test tracker with this information
[17:00] <JamesPage> hggdh: we now have three slaves up and running (two permanent) so should burn through quickly next time an ISO is published
[17:03] <jpds> Thund3rX: SELinux by default?
[17:04] <JamesPage> hallyn_: are you aware of bug 683700?
[17:06] <hallyn_> JamesPage: no
[17:07] <JamesPage> hallyn_: thought I might bring it to your attention;
[17:07] <hallyn_> yes, thank you :)
[17:07] <hallyn_> i'm in the middle of tearing apart a vmcore, but will look at it in a bit
[17:08] <JamesPage> hallyn_: np - I think that we have missed the opportunity to fix for Alpha 1 so probably not mega urgent
[17:08] <hggdh> zul: yes, another serious issue on the test rig. Opened bug 684304 High
[17:08] <hallyn_> JamesPage: hm have you been talking to kees at all about it though?
[17:08] <hallyn_> (as per cjwatson's comment)
[17:09] <hallyn_> i.e. iiuc it's not a qemu-kvm depends problem, but a msr-tools one
[17:09] <Ninjix> cemc: We've got a LP bug posted now
[17:09] <Ninjix> https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/669818
[17:10] <hallyn_> hm.  well, maybe qemu-kvm shouldn't recomment cpu-checker then, since it's also non-kvm qemu
[17:10] <JamesPage> hallyn_: guess that was my question really :-)
[17:11] <Ralchev> Ninjix well, i can't connect thru sftp, maybe i will have to reboot it and get syslogs
[17:11] <hallyn_> JamesPage: i don't even know hwat cpu-checker does, lemme go look at the src :)
[17:18] <hallyn_> JamesPage: seems to me it should be perfectly safe to make it a Suggests.  woudl that suffice for what you need?
[17:19] <hallyn_> all righ ti'll just go propose that for merge and let kirkland yell at me if it's wrong
[17:20] <kirkland> hallyn_: i think it needs to be a recommends
[17:20] <kirkland> hallyn_: why does someone want to drop it to suggests?
[17:21]  * RoyK thinks he needs zfs on ubuntu soon
[17:21] <hallyn_> kirkland: see bug 683700
[17:22] <hallyn_> kirkland: it's bc cpu-checker is now in universe
[17:22] <kirkland> hallyn_: ah, poke kees about that one
[17:22] <kirkland> hallyn_: it's him juggling things around ;-)
[17:22] <kirkland> kees: ^
[17:23] <hallyn_> kirkland: it just seems a bit heavyweight to basically require it, when using non-accelerated qemu is perfectly legitimate
[17:23] <kirkland> hallyn_: okay, drop it, and then hang around here and answer all the questions that come up with people asking why their kvm don't worky
[17:24] <kirkland> hallyn_: all this does is print a warning that tells people that, before they come here to ask
[17:26] <hallyn_> so if it's suggests, it won't install it by default?
[17:27] <hallyn_> i wonder if kees is out today
[17:45] <hggdh> robbiew: ping on UEC issues for alpha1
[17:46] <robbiew> hggdh: pong
[17:49] <robbiew> Daviey: kirkland: zul: who typically does the Ubuntu Server UEC ISO testing?
[17:50] <robbiew> http://iso.qa.ubuntu.com/ doesn't look good for us
[17:53] <Spirits-Sight> any ideas on a headless / keyless system for server to run latest LAMP / Ubuntu server)  I just want to be able to connect eithernet wire and power and install server to work with dynDNS for IP addresss control
[17:54] <kirkland> robbiew: team effort, usually
[17:54] <robbiew> well...we need some "effort" for http://iso.qa.ubuntu.com/qatracker/test/4820 and http://iso.qa.ubuntu.com/qatracker/test/4821 :)
[17:55] <robbiew> SpamapS: ^^
[17:56] <hggdh> robbiew: usually I run it
[17:57] <robbiew> hggdh: ah...
[17:57] <hggdh> robbiew: but the resources I have (the so-called UEC test rig) are failing to load Natty due to a kernel bug on the cciss module
[17:57] <robbiew> hggdh: doh!
[17:57] <hggdh> robbiew: no discs are identified
[17:57] <Spirits-Sight> any advice I am in the boston USA area "any ideas on a headless / keyless system for server to run latest LAMP / Ubuntu server) I just want to be able to connect eithernet wire and power and install server to work with dynDNS for IP addresss control"
[17:58] <hggdh> robbiew: so I am stuck -- cannot test it, don't have local hardware to do it
[17:58] <ZacLnxNewb> Hi.
[17:59] <ZacLnxNewb> How is everyone?
[18:00] <hallyn_> JamesPage: do i understand correctly that the intent is for hudson to auto-test http://iso.qa.ubuntu.com/ ?
[18:00] <hallyn_> (whereas up to maverick we did them by hand)?
[18:02] <hggdh> hallyn_: this is one objective, yes
[18:04] <sleepyowl> Hello Everyone, are the package repositories down for intrepid? I can't run sudo apt-get update without getting multiple 404 errors.
[18:08] <Spirits-Sight> any advice I am in the boston USA area "any ideas on a headless / keyless system for server to run latest LAMP / Ubuntu server) I just want to be able to connect eithernet wire and power and install server to work with dynDNS for IP addresss control"
[18:09] <mgolisch> sleepyowl: i think intrepid stuff is only on the archive servers
[18:10] <mgolisch> try old-releases.ubuntu.com
[18:10] <patdk-wk> sleepyowl, intrepid eol was like a month or so ago
[18:10] <patdk-wk> so you shouldn't even get updates if you use old-releases :)
[18:10] <jo-erlend_> Spirits-Sight, you'll have to elaborate. That didn't make much sense.
[18:11] <patdk-wk> jo-erlend_, sounds like he wants hardware recommendations
[18:11] <jo-erlend_> yes, I got that, but the details were unclear at best.
[18:11] <patdk-wk> I didn't even see details :)
[18:13] <jo-erlend_> Spirits-Sight, dyndns isn't used for "IP address control", but only for name resolutions, pretty much identical to a phone book. The program ddclient is in the repositories and can be installed to update your dynamic dns provider. As to the other questions? Need more information.
[18:13] <Spirits-Sight> jo-erlend_: I am wanting to buy a server that is good for running a database directory type system and also a minior website, I will run LAMP and want to have a at less two harddrives one for the database and the other for the websites and server.  I would like to be as small but allow at less another harddrive if needed
[18:14] <jo-erlend_> Spirits-Sight, are you going to house it yourself, or do you want to place it in a colocation center?
[18:14] <Spirits-Sight> jo-erlend_: true sorry I was not clear I ment for it to be the name resolutions for the two websites that will run off the system
[18:14] <sstraw> alvin (in response to a circa 6h old query): yes, build-essential, and libc6-dev packages were both installed (although not when I'd initially started, and CPAN issued no complaints about missing libs).  I'd subsequently run 'clean Bundle::CPAN' and retried the install, but no change.
[18:14] <Spirits-Sight> house my self as right now and for the next year or two it would be cheaper for me to have it my self
[18:15] <Spirits-Sight> jo-erlend_:  ^^^
[18:16] <Spirits-Sight> jo-erlend_: I think it would be cheaper
[18:16] <sstraw> SpamapS: When driving around down in the valley, one can spot quite a number of Barracuda company vehicles - they do those "wrap" deals on, IIRC, PT Cruiser type minivans.
[18:16] <jo-erlend_> Spirits-Sight, the reason I'm asking, is that servers usually are built using a form factor similar to that of a big pizza box 1U, and taller. You'll probably need that if you want it in a colocation center, but if you're housing it yourself, then you have much more options.
[18:17] <jo-erlend_> Spirits-Sight, it'll probably be a lot cheaper, and you don't have to depend as much on other people, except for electricity and connection at home, of course.
[18:17] <sleepyowl> thanks for the responses guys. I was using a official ubuntu ec2 image (ami-5059be39). Does anyone know the ami id of the most recent ubuntu image by change?
[18:18] <sleepyowl> chance*
[18:18] <jo-erlend_> Spirits-Sight, but a LAMP server really doesn't require much power, so pretty much any PC you can get your hands on will do the trick.
[18:19] <jo-erlend_> Spirits-Sight, but why do you need different harddrives for the documents and the database?
[18:19] <Spirits-Sight> jo-erlend_: its the database that I worry about as its will have over 500,000 listings and it will have to download to server and process files that will go into the database and then update every say 3 months
[18:20] <Spirits-Sight> just from one source
[18:20] <Spirits-Sight> I am looking for a small system any advice?
[18:21] <Spirits-Sight> jo-erlend_: headless system would be best
[18:21] <patdk-wk> Spirits-Sight, that sounds like a light database load
[18:22] <Spirits-Sight> really?  the database (foundation) of it is a address/contact systems of entities (non-profits, agency, schools etc)
[18:22] <jo-erlend_> Spirits-Sight, I agree with patdk-lap. The data might seem enormous to you as a human being, but for a computer and a good database, that's nothing. And any PC can be used as a headless and keyboardless server.
[18:23] <patdk-wk> the biggest question when it comes, and you won't really know for sure till you have it up and running
[18:23] <patdk-wk> is how much ram you will need, to get the performance you want
[18:24] <Spirits-Sight> jo-erlend_: really :-) cool any advice on a very small system that would do the job
[18:24] <patdk-wk> Spirits-Sight, I would probably go with any dual core system, most likely
[18:25] <Spirits-Sight> patdk-wk: anymake? any ideas on very small chasie?
[18:25] <jo-erlend_> Spirits-Sight, Lian Li PC-V354B seems like a good and small chassis for micro-atx. Then you'll need a motherboard, some ram, a processor and some disks.
[18:26] <Makere> lian li's are awesome
[18:27] <patdk-wk> ok, I'm like getting into some endless loop here :(
[18:27] <patdk-wk> I install lucid in a vm, it puts in grub-pc
[18:27] <patdk-wk> I install linux-virtual, it switchs the system to grub, but doesn't update the mbr, so grub2 still boots, and no kernel updates happen, cause menu.1st is used not grub.cfg
[18:27] <jo-erlend_> patdk-lap, what kind of VM? Some details?
[18:28] <Spirits-Sight> jo-erlend_: OK any ideas on already built system?
[18:28] <patdk-wk> I install grub-pc, and it goes into an endless loop about I didn't select a place to install grub
[18:28] <patdk-wk> jo-erlend, esx
[18:29] <patdk-wk> this is the 4th one I had issues with, but this was my first new isntall from scratch, I thought it was just me :)
[18:29] <jo-erlend_> Spirits-Sight, sorry, no I don't. I always build stuff like that myself. It really isn't difficult.
[18:29] <Spirits-Sight> jo-erlend_: I done that in the past I was hoping not to have to do it this time :-)
[18:30] <Spirits-Sight> jo-erlend_: whats is the smallest form factor made?
[18:31] <cemc> Ninjix: I've updated that bugreport of yours. I've found some strange thing too, is there some way you could verify that?
[18:31] <jo-erlend_> pico-itx is fairly small, but then you'll also have a lot fewer options.
[18:32] <patdk-wk> how can I just tell grub2 where to install to?
[18:32] <jo-erlend_> Spirits-Sight, ^^
[18:33] <jo-erlend_> patdk-lap, you've read this? https://help.ubuntu.com/community/Grub2
[18:34] <Spirits-Sight> jo-erlend_: why you say that? what would it limit?   also what you think about this type of system?  http://www.stealth.com/littlepc.htm?gclid=COHYlYqazqUCFUFN5QodBl8dyQ
[18:34] <SpamapS> sstraw: Yeah barracuda seems to lay the marketing on pretty thick.
[18:34] <patdk-wk> jo-erlend_, ya, that url doesn't help
[18:34] <patdk-wk> I just tested it alittle
[18:34] <patdk-wk> dpkg-reconfigure grub-pc goes into loop on vm
[18:35] <patdk-wk> but on my real desktop and laptop it gives me a harddrive list
[18:36] <patdk-wk> ah, no device.map file
[18:36] <patdk-wk> nope, making device.map didn't help :(
[18:37] <Daviey> ScottK: Hmm.... clamav update.... i'm pretty sure my configs were working before upgrade...
[18:37] <Daviey> Setting up clamav-daemon (0.96.4+dfsg-1ubuntu1~lucid1) ...
[18:37] <Daviey>  * Starting ClamAV daemon clamd
[18:37] <Daviey> ERROR: Incorrect argument format for option BytecodeSecurity
[18:37] <Daviey> ERROR: Can't open/parse the config file /etc/clamav/clamd.conf
[18:37] <Daviey>    ...fail!
[18:38] <Spirits-Sight> jo-erlend_: would you go with SDD or standrad type drive?
[18:39] <Spirits-Sight> jo-erlend_: should I say can Ubuntu handle either also?
[19:18] <Spirits-Sight> jo-erlend_:  you there?
[19:49] <ZacLnxNewb> hey guys
[19:50] <ZacLnxNewb> sup?
[19:50] <ikonia> ubuntu server support is up
[19:51] <ZacLnxNewb> cool
[20:52] <air^> hello.
[20:53] <air^> got an ubuntu-server running, pretty basic headless server.
[20:53] <air^> it's gonna have ssh open to extranet. what's the recommended precautions to take?
[20:53] <ikonia> ok
[20:53] <ikonia> install ssh
[20:53] <air^> got ssh installed.
[20:53] <ikonia> it's that simple
[20:54] <air^> and that's the only port I got open in my fw (apple timecapsule)
[20:54] <ikonia> ok
[20:55] <air^> I was considering something like fail2ban, or similar, to ban any script kiddies, etc.
[20:55] <ikonia> on your extranet ?
[20:55] <air^> er. s/extranet/internet
[20:55] <ikonia> well you can use tools such as fail2ban, no problems with that
[20:56] <air^> maybe I could simply deny all except a few known hosts.
[20:56] <air^> that should make things pretty simple.
[20:56] <ikonia> you could do that with iptables or tcp_Wrappers
[20:57] <air^> or just by using hosts.deny / hosts.allow ?
[20:57] <ikonia> that is tcp wrappers
[20:57] <air^> ah. ok. :)
[20:59] <guntbert> air^: set up key based login
[21:00] <air^> so, basically, I'll put ALL: ALL in hosts.deny, then allow the ip's I want in hosts.allow?
[21:00] <air^> guntbert: I do in fact use keys already, so maybe I should disable passwd login
[21:01] <guntbert> air^: that was my point
[21:01] <air^> ok, checking sshd_config
[21:01] <air^> PremitRootLogin should probably be set to no.
[21:03] <resno> hello all
[21:05] <elasticdog> does UEC not use the front-end machine's /etc/eucalyptus/eucalyptus.conf file to configure the available IP address pool?
[21:06] <resno> i was checking my "messages" log and say a repeating error msg about my drive. "hard restting link" http://dpaste.com/282363/
[21:07] <air^> guntbert: ok. password set to no, and confirmed working. :)
[21:07] <resno> hey air^
[21:08] <air^> hey
[21:08] <elasticdog> http://pastie.org/1342671 is what I put in there (and the VNET_DNS), but even with restarting everything, available IPs don't seem to change
[21:09] <air^> resno: not that I know anything about your issue, but first google result points to disable some write cache to fix it.
[21:09] <guntbert> air^: just don't worry about brute force attempts...
[21:10] <air^> guntbert: ok. sure. maybe it's good enough to simply not allow password logins.
[21:10] <guntbert> air^: on the servers I manage it is...
[21:10] <resno> air^: what did you you google? im havne tbeen getting much of anything useful
[21:10] <air^> resno: http://www.google.fi/search?sourceid=chrome&ie=UTF-8&q=ata+hard+resetting+link
[21:11] <resno> air^: thanks :)
[21:11] <air^> np :)
[21:11] <air^> resno: another of those says issue was a faulty power supply.. might you be overloading your?
[21:12] <jcastro> kirkland: so they descoped Places a bit and ideas for byobu Places do not make sense anymore.
[21:12] <resno> air^: heh, i just read that. and i hope not causes its new and fairly large
[21:12] <air^> guntbert: ok, thanks. It will probably do just good for me as well :)
[21:12] <jcastro> kirkland: however, I think a manpages.u.c Place would  be totally awesome
[21:12] <jcastro> https://wiki.ubuntu.com/Unity/Places/Ideas
[21:18] <resno> air^: well, i routed out the psu. this error occured way ebfore i got the new one....
[21:19] <air^> resno: which version of ubuntu? what hw?
[21:19] <resno> air^: 10.04 lts. and i believe the error refers to my WD green drive
[21:19] <air^> oh. teh green ones.
[21:20] <resno> how can i check which drive is ata4?
[21:20] <resno> air^: you no likey?
[21:20] <air^> try " cat /proc/scsi/scsi "
[21:21] <air^> at least my drives show up there :)
[21:22] <resno> that listed the drive... but i dont see an ata 4 anywhere
[21:22] <resno> i dont even see a 4 anywhere
[21:22] <resno> the hosts are scsi3
[21:23] <resno> air^: let me mention one other thing, i am running this through a pci to sata card
[21:23] <resno> which could entirely be the problem
[21:23] <air^> yeah, might be.
[21:24] <resno> when im doing heavy hdd stuff, the io jumps and i dont like the setup at all.
[21:25] <resno> soonish ill need to move to something better
[21:25] <resno> ha, i couldnt figure out why everything on google was in a different language air^
[21:25] <air^> :D
[21:26] <resno> silly me
[21:50] <kirkland> jcastro: okay;  go for it
[21:52] <eriksson26> Hi, anyone it that is good at mdadm. I created my second array, but it didnt get added in the mdadm.conf so when I rebooted the computer it isnt there. Hod do I reactivate it?
[21:52] <patdk-lap> normally just pick any drive and tell mdadm to activate it
[21:52] <patdk-lap> and it should find the other drives
[21:54] <eriksson26> patdk-lap> How do you meen? I have it md1 added in fstab. How do I activate md1?
[21:54] <eriksson26> I have two md arrays, and I only want to activate md1, not md0
[21:55] <patdk-lap> mdadm --assemble --scan --verbose /dev/md1 /dev/sd? /dev/sd? ....
[21:57] <ikonia> mdadm --build ?
[21:58] <patdk-lap> that is for very very old arrays
[21:59] <ikonia> very old ? it's just for arrays that you don't want to use existing meta data for
[21:59] <eriksson26> I jsut have to find what disk was in the array...
[21:59] <patdk-lap> ikonia, Build a legacy array without superblocks.
[21:59] <patdk-lap> all the arrays I have made for several years now have superblocks
[22:00] <patdk-lap> eriksson26, try blkid
[22:00] <patdk-lap> it might help
[22:01] <eriksson26> Its just that I got 18 disks, devided up in two arrays, and the last one I created but its information didnt get included in the .config
[22:01] <eriksson26> But I will sort it out, its ok.
[22:06] <fluvvell> what network interface is a virbr0  ?
[22:07] <jiboumans> what tool can i use in a script to partition a drive on a vanilla ubuntu server ec2 install? i basically want to take a device (say /dev/sdf) and put one partition on it, which i'll subsequently format as ext3. fdisk only seems to let me do this menu based, so it's not easily scriptable. thoughts?
[22:07] <patdk-lap> eriksson26, try mdadm -Ebsc partitions
[22:07] <patdk-lap> it will scan all drives and tell you what they where setup for
[22:08] <patdk-lap> jiboumans, use parted
[22:09] <jiboumans> patdk-lap: taking a look, thanks
[22:09] <eriksson26> patdk-lap I got two arrays, with number of devices and uuid.
[22:09] <eriksson26> Running the --assemble I just got not identified in config file for all /dev/xxx
[22:15] <eriksson26> Oki, got it half way. added the string, from mdadm -Ebsc partitions, to the mdadm.config
[22:16] <eriksson26> But then I got problem, it got assebled with only 4 out of 5 disks.
[22:17] <ScottK> Daviey: Please file a bug with your config details.  I didn't see that in testing.
[22:20] <eriksson26> When I rin, cat /proc/mdstat the missing disk is under its own md_d1 that I have never created.
[22:21] <eriksson26> Anyone recognice this problem?
[22:27] <osmosis> i just installed the latest kernel using apt-get, but its not in my /boot/grub/menu.lst.  update-grub isnt helping either.  why isnt it being detected?
[22:27] <osmosis> when i run update-grub, it shows the new kernel, but it still doesnt end up in the /boot/grub/menu.lst
[22:28] <patdk-lap> osmosis, probably cause your using grub.cfg
[22:29] <osmosis> patdk-lap, its 8.04.4, grub 0.97 ...but good guess.
[22:30] <jiboumans> patdk-lap: for future reference, parted doesn't work on ebs volumes as they're not real scsi devices and xen is doing 'funny business' with them. looking into sfdisk now
[22:30] <patdk-lap> jiboumans, ah heh :)
[22:30] <patdk-lap> I am not sure I ever used parted on a xen system
[22:30] <fluvvell> Is it possible to backup samba users/password tables and restore during a bare-metal recovery?
[22:31] <fluvvell> eriksson26, Ive seen it
[22:31] <patdk-lap> osmosis, not sure :(
[22:31] <osmosis> patdk-lap, i killed the existing menu.lst  and replaced it with a default. then ran update-grub, fixed.
[22:32] <patdk-lap> probably a bad edit or something in the file
[22:32] <osmosis> patdk-lap, i would think it would have thrown an error then.  might have something to do with "package maintainer has a new version of menu.lst" msg.
[22:34] <fluvvell> eriksson26, I got around it by setting up the raid partitions using a live distro with mdadm installed , then activating the raid array during the install later.
[22:34] <fluvvell> eriksson26, I created the partitions with fdisk.
[22:34] <fluvvell> eriksson26, I think it means your /etc/mdadm/mdadm.conf file is not set up
[22:37] <eriksson26> mm, I found something about it googeling, Think I fixed it but wount know untill tomorrow. when the owner reboots it. I am doing it over remote desktop
[22:38] <fluvvell> eriksson26, well it happened to me last time I built a 10.04 server from scratch, I discovered the install process is broken for making raid arrays. This time, I created the partitions seperately and then assembled them during the install
[22:41] <eriksson26> mm, I had it working perfectly, then I rebooted the server but the info wasent in the .config so I got this problem trying to do it manualy. But I will just reboot it with a corect .config and I hope it works beter.
[22:51] <osmosis> patdk-lap, argh..oops, now my grub is broke
[22:51] <patdk-lap> fun
[22:52] <baggar11> eriksson26: I just went though this stuff with mdadm
[22:52] <baggar11> eriksson26: looks like you need to --stop /dev/md_d1 to get that missing disk back into the other assembled array
[22:56] <eriksson26> baggar11, I did that and fixed the .config file. Did you need a reboot or could you activate it manualy?
[22:57] <baggar11> activate as in assemble the missing peice?
[22:57] <baggar11> of your array?
[22:58] <baggar11> once I released that md_d1 disk from that [md device], then I could use it in another array with no problems
[23:02] <baggar11> for rebooting, you'll want to run mdadm --scan --devices >> /etc/mdadm/mdadm.conf
[23:46] <lvh> VMBuilder.exception.VMBuilderUserError: Invalid suite: "maverick". Valid suites are: dapper gutsy hardy intrepid jaunty karmic lucid
[23:46] <lvh> Wait, is that normal?
[23:46] <lvh> I'm running maverick
[23:46] <lvh> https://help.ubuntu.com/10.10/serverguide/C/jeos-and-vmbuilder.html
[23:46] <lvh> says --suite maverick is fine
[23:47] <lvh> https://bugs.launchpad.net/ubuntu/+source/ubuntu-vm-builder/+bug/654656
[23:47] <lvh> aha, okay
[23:47] <lvh> right
[23:55] <ZAHER> which kernel model I need to run iptables under openVS
[23:56] <lvh> creating a new VM doesn't actually work
[23:56] <lvh> http://bpaste.net/show/11879/
[23:56] <lvh> E: Failed getting release file http://archive.ubuntu.com/ubuntu/dists/maverick/Release
[23:56] <lvh> Doesn't appear to have an internet connection
[23:56] <lvh> but no idea why