/srv/irclogs.ubuntu.com/2011/02/11/#ubuntu-server.txt

psywipedhow do i add /home/user/checkipaddress to crone and run it every 5 mins?00:06
shaunopsywiped: crontab -e will make a crontab for user.  the entry will be something like "*/5 * * * * /home/user/checkipaddress", but you'll probably want to man crontab instead of flying too blind there00:11
psywipedshauno: man crontab?00:14
psywipedand that would run it as ./checkipaddress00:14
shaunothat'll show you the manual that describes the file's format fully00:14
psywipedshauno: thanks its working had to add a trick to the end of the webaddress to get it to work but chron and the update is now functioning. heres what the code ended up looking like00:29
psywipedhttp://pastebin.ubuntu.com/565625/00:29
shaunoheh, I haven't seen that before.  suspect the android client doesn't use OAuth yet, so they've added a workaround for it00:30
shaunoglad you figured out how to glue it all together tho :)00:31
psywipedwell i think its more for people that havent updated it00:32
psywipedits going to suck when it stops working00:32
shaunothere's a decent handful of python twitter clients.  I'm sure you'll be able to glue it back together when they break it00:34
psywipedyep going to have to try and get twidge up and running00:36
psywipeddont know where its config file goes tho00:36
nfearnleyI'm trying to get an Amazon EC2 instance of Ubuntu Server running. I can't seem to ssh into it. Is ssh enabled on the server by default, or do I have to connect by some other method to set it up?01:04
edubuntusup bro01:22
nfearnleyI figured it out. I just had to open the firewall. The default Amazon EC2 firewall looks open, but it's not :P01:22
jkghi hi. I suspect this is a dovecot specific issue, but... my imapd is spewing http://paste.ubuntu.com/565639/ in logs. the machine isn't overly short of RAM, and I've increased login_process_size in dovecot.conf -- anyone got any ideas?01:41
KB1JWQstrace?01:43
KB1JWQAnd is this actua;;y under vmware?01:44
jkgunfortunately, it is under vmware.01:45
jkg(can I easily attach strace to a service? I've no idea how to do that)01:46
jkgahah! perversely, setting login_process_size = 0 has fixed it. given I was allowing 128MB I dread to think how large this means my login processes are...!01:52
=== airtonix_ is now known as airtonix
=== Kiall is now known as Kiall|AFK
=== Kiall|AFK is now known as Kiall
=== oubiwann_ is now known as oubiwann
RoAkSoAxkirkland: ping?03:07
psywipedpong03:16
uvirtbotNew bug: #716836 in bacula (main) "package bacula-director-mysql 5.0.1-1ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/71683603:56
=== samferry is now known as Guest4498
=== Ender is now known as ndroftheline
=== ndroftheline is now known as NDROfTheLine
NDROfTheLineHello all06:10
NDROfTheLineI finally got samba up and running on my server and I'm not sure why I'm having such poor performance.06:11
NDROfTheLineOnce I'm connected to the share it seems to do file transfers just fine, but initially opening it takes a good 20 seconds06:11
NDROfTheLineWhat can I change to reduce this lag?06:12
twbNDROfTheLine: sounds like a nss cockup06:12
NDROfTheLine!info nss06:13
ubottuPackage nss does not exist in maverick06:13
twbNDROfTheLine: pastebin /etc/nsswitch.conf06:13
ranger03i like swat..it makes samba configs of like 10 lines long..easier to config than 200 line samba config file06:14
NDROfTheLinehow the eff do you configure a user with the proper permissions to use swat?06:14
NDROfTheLinei've been playing with that for a while now06:14
NDROfTheLinetwb, please excuse my ignorance, but how do i get that information to pastebin06:14
NDROfTheLinei mean, i'm ssh'ed into my server06:15
NDROfTheLinei know how to display a file on vi06:15
NDROfTheLineoh nvm06:16
NDROfTheLineduh, just highlight in terminal and mid-click in pastebin06:16
NDROfTheLinesorry06:16
NDROfTheLinehttp://pastebin.com/fZdMMhfa06:16
uvirtbotNew bug: #716860 in nmap (main) "zenmap.desktop and zenmap-root.desktop have errors" [Undecided,New] https://launchpad.net/bugs/71686006:21
NDROfTheLinehow do i change apache2's DocumentRoot06:27
jmarsdenNDROfTheLine: You can also   sudo apt-get install pastebinit and then use that from the command line to send things (files, command output, etc) to a pastebin site.06:28
NDROfTheLineso then i just run the command and port it to pastebin it?06:28
NDROfTheLinelike cat <file> | pastebinit06:28
NDROfTheLine?06:28
jmarsdenNDROfTheLine: DocumentRoot is a per-site thing, so you edit the file for the site concerned, under /etc/apache2/sites-enabled/ and then reload the apache config.06:29
jmarsdenWell, yes, but   pastebinit /path/to/filename   works for the case where you already have a file06:29
NDROfTheLineoh cool thanks06:29
NDROfTheLinegood to see you again jmarsden06:30
NDROfTheLinei was under Ender yesterday06:30
NDROfTheLinejust fyi06:30
NDROfTheLineand you too twb06:30
NDROfTheLinedoes my nss config look strange?06:30
* jmarsden was going... "I don't remember that nick..." :)06:30
jmarsdenNDROfTheLine: Not to me, but I'm not expert on that.  Do you have working DNS for the servername that you use ?06:32
twbNDROfTheLine: I dunno man06:32
NDROfTheLineI don't think I have a DNS06:33
jmarsdenNDROfTheLine:  from the client PC, does    dig SEVERNAME    return a sensible result with the correct IP for your serber06:33
jmarsdenNDROfTheLine: OK, so how are you expecting the client to find out where the server is?06:33
NDROfTheLineBut it does find the server06:33
NDROfTheLineit just takes too long, like 20 seconds06:34
jmarsdenWHat command line are you using for that connection?  smbclient ... what?06:34
NDROfTheLinenautilus06:34
twbTry again with smbclient06:34
jmarsdenUm.  I am fairly sure that yesterday, it was suggested that you use smbclient first, and only switch to a GUI client when smbclient worked fine...06:35
twbjmarsden: that was me suggesting it06:35
jmarsdenOK, good :)06:35
twbDamn users...06:35
NDROfTheLineit did work06:35
NDROfTheLinei followed your adviceeeeee06:35
NDROfTheLineand it worked06:35
jmarsdenWith a 20 sec delay?  or not?06:35
NDROfTheLineno delay with smbclient06:36
twband test on lo first06:36
NDROfTheLinebut now i've forgotten how i connected06:36
NDROfTheLinesmbclient <ip address> doesn't work06:36
jmarsdenWas it an IP address that you gave nautilus, or a machine name?06:37
NDROfTheLinei just clicked "network" then "windows network" then my workgroup, computer, and share.06:37
NDROfTheLinehrm. the delay seems to have gone away...could it be due to a windows computer being logged onto the network?06:38
NDROfTheLinemy wife's computer was connected a moment ago when i was experiencing the delay.06:38
jmarsdenUnlikely... you can reconnect it and retest, to find out.06:38
NDROfTheLineok. the smbclient man page appears to say that the command "smbclient -I <ipaddress>" will connect to the share on the given ip address06:41
NDROfTheLineOR, "smbclient --ip-address <ipaddress>"06:41
NDROfTheLinebut06:41
NDROfTheLineneither does.06:41
NDROfTheLinewhat am i doing wrong here?06:41
DiagonalArgHi all, RAID Question// Created RAID1 using liveCD/mdadm, named md2. On another machine installed ubuntu to installer-created RAID1 (md0/1/2). Trying to see all RAIDs from liveCD, but mdadm always names the first RAID1 "md2" (as seen in mdadm.conf), conflicting with the second. How can I make it automatically assign md*'s?06:43
MTecknologyhm.. this is interesting... http://paste.ubuntu.com/565721/06:50
MTecknologythis makes it more odd... http://paste.ubuntu.com/565722/06:51
MTecknologytwo files of the exact same name06:51
MTecknologynope- nevermind... d and q looked too close to the same thing06:51
MTecknologythat other email is apparently a failed email to email me that the email failed to send06:51
NDROfTheLinelol06:52
NDROfTheLinemailfail06:52
NDROfTheLineso i guess i had to use the full name of the server AND the share to connect with smbclient06:54
NDROfTheLinebut i am able to connect with zero delay06:54
NDROfTheLinewell in fact, there's zero delay with nautilus too06:55
NDROfTheLinethe problem yesterday is that on my smb.conf i had "browseable = yes" instead of "browsable = yes"06:55
MTecknologyouch06:55
NDROfTheLineseriously. othe rplaces in smb.conf it's spelled browseable. i checked.06:56
NDROfTheLinenow how do i set up security for my share? a required password ?06:56
MTecknologyI jsut purged sendmail and it's dependencies and reinstalled and get the same thing....06:58
MTecknologyI kinda doubt this is just because I'm using +107:00
jmarsdenNDROfTheLine: You should be able to detect such spelling issues in smb.conf by running testparm /etc/samba/smb.conf07:02
MTecknologyoh... this is gonna be fun; I get to reboot... yay... :(07:02
MTecknology1|(status)     '2|#ubunt~drupal'3|#ubuntu-us-sd'4|#nginx-master'5|#nginx       '6|#freenode-gab'7|#ubun~ardened'8|#ubunt~kernel'9|#ubuntu-motu '0|#ubun~ckaging'q|#ubuntu-news 'w|#ubun~website07:02
MTecknologye|#ubun~assroom'r|#ubun~-server't|#launchpad   'y|#laun~pad-dev'u|#ubuntu-irc  'i|#freenode-gms'o|#sluglinux   'p|#l3ib        'a|#ubuntu-us   'd|#can~sysadmin'f|#ubuntu      'g|#freenode07:02
MTecknologyj|#drupal      'k|#bash        'l|#linode      ';|#pressflow   'z|#terminator  'x|#drupal-docs 'c|#crunchbang  'v|#pantheon    'n|#debi~mentors',|#bzr         '.|#ubuntu+1    'Q|#drup~ultants07:02
MTecknologySorry!07:02
NDROfTheLineheh07:03
MTecknologyI didn't mean to do that.... :(07:03
* jmarsden thinks... that's not what my machine does when it reboots :)07:03
NDROfTheLinejmarsden, you know, i did run testparm and it didn't actually report any errors07:06
NDROfTheLinejmarsden, it did NOT however list the browseable = yes line07:06
NDROfTheLinewhich gave me pause. i thought i had it misspelled, so i checked in other parts of the example smb.conf that samba comes installed with07:07
jmarsdenStrange.  You may even have found a bug in there somewhere.07:07
NDROfTheLineeverywhere else i found it was "browseable"07:07
NDROfTheLineso i assumed i had it spelled right and was doing somethying wrong, but today i was configuring a different server and started from scratch using the Ubutnu Server Guide itself and boom. "browsable".07:07
NDROfTheLinehttp://pastebin.com/ZQABREsZ07:10
jmarsdenNDROfTheLine: The man page for smb.conf says the two spelling are synonymns, and a quesck test hers shows that to be true.07:10
NDROfTheLinethere's the output of testparm with "browseable" misspelled07:11
jmarsdens/quesck/quick/ :)07:11
jmarsdenbrows(e)able = yes is the default, so you only see it in testparm output if you set it to no, I think.07:11
NDROfTheLinewell...now i've changed the spelling from "browsable" to "browseable", restarted smbd, and viola! I can't access my share with nautilus.07:12
jmarsdenAnd don't do "cat /etc/samba/smb.conf | tail", just do   tail /etc/samba/smb.conf    :)07:13
NDROfTheLineoh ok that's helpful07:13
NDROfTheLinesee, and i just changed te spelling back to browsable and now i can access it from nautilus07:13
jmarsdenWow, you have a USA-spelling only version of samba :) :)07:14
NDROfTheLineso there's some difference in the way MY machine, at least, is treating browseable/browsable07:14
NDROfTheLinelol seriously07:14
NDROfTheLineanyway whatever07:14
NDROfTheLinegood to know, i guess07:14
jmarsdenBTW, doing   egrep -v '^#|^;|^$' /etc/samba/smb.conf    gets you a compact, commentless version of your smb.conf  :)07:17
NDROfTheLinewtf is all that goobldegook07:17
* NDROfTheLine searches for google07:17
* NDROfTheLine finds google and uses it to search for gobbledegook07:18
jmarsdenA regular expression.   man 7 regex for a long detailed explanation of regexes :)07:18
jmarsdenUse the docs on your machine before resorting to Google :)07:18
NDROfTheLinewell fair enough but without your input i wouldn't have known to look for regex07:18
NDROfTheLinewhat does the 7 parameter do to man?07:19
jmarsdenNDROfTheLine: man egrep    would have got you the idea that it uses regular expressions...07:19
jmarsdenIt's SEE ALSO section lists regex(7).07:19
jmarsden7 is section 7 of the manuals.07:20
jmarsdenman man   for info on that :)07:20
NDROfTheLinedo you just remember that regex(7) is what to look for or di dyou reference that somewhere07:20
jmarsdenSome of us learned Unix before Google existed :)  I did man regex and got the man page for the library call, then did man 7 regex07:21
jmarsdenBut as I said, man egrep and reading it, including its SEE ALSO section, would have got you to regex in section 7, which man pages write as regex(7) and which you can read by typing in   man 7 regex  :)07:22
NDROfTheLinevery cool. thanks.07:23
jmarsdenYou're welcome.07:24
NDROfTheLinelast night right before i signed off you said i needed to read about workgroups07:25
NDROfTheLineoh in fact its probably still in the script here...07:25
NDROfTheLineyep07:26
NDROfTheLineyou know, it's a lot of fun learning things this haphazard way, by tumbling into a problem and then clawing out of it, but if i wanted a more top-down learning experience, what would i need to do?07:28
jmarsdenwell, one place to start might be http://tldp.org/LDP/intro-linux/html/intro-linux.html07:30
jmarsdenFor a more concentrated more admin-oriented one, try http://rute.2038bug.com/index.html.gz07:31
jmarsdenFor a whole bunch of free online books, try: http://www.linuxlinks.com/article/20090405061458383/20oftheBestFreeLinuxBooks-Part1.html :)07:32
NDROfTheLinejmarsden, do you work all day and then come here to help lost souls like me just because you enjoy it? what's your motivation?07:33
jmarsdenMore or less, yes :)  I believe enough in Linux to want to help others use it and not run away from it frustrated.  And I do learn by helping others, sometimes, too :)07:34
jmarsdenOn occasion someone will ask something, and I'll think "That's an interesting question!" and find the answer out for myself, as well as for them :)07:35
NDROfTheLineincredible.07:36
NDROfTheLinei mean, i believe it, obviously, but still, hard to believe.07:36
NDROfTheLineif i told somebody else how this worked they wouldn't believe me.07:37
jmarsdenTry it :)  Spread the word :)07:37
NDROfTheLineI do, I spread it.07:37
NDROfTheLinenow that libreoffice has more solid support for .docx files i actually might be able to get a few people here and there to really switch07:38
jmarsdenThere are entire books and articles written on motivating people to make that transition... and yes, for many people the file format "lock in" issue can be a big obstacle.07:39
NDROfTheLineseriously. i had a golden opportunity a few weeks ago, a nonprofit in my area asked me to come in and install an office program for them.07:39
NDROfTheLinei mentioned openoffice but the lady shook her head like she had experience with it, and said that she gets stuff from her marketing departmentshe has to edit and return07:40
NDROfTheLineso it was a no-go07:40
twbYou should just teach them TeX07:44
NDROfTheLinemaybe once i *learn* TeX07:44
twbNDROfTheLine: get on with it then07:44
NDROfTheLineha! indeed.07:44
NDROfTheLineit's going on my list07:44
twbI haven't used a word processor for year07:44
twb*years07:44
NDROfTheLinearen't you a teacher yourself07:46
NDROfTheLinei mean irl07:46
twbThat's one way of putting it...07:47
NDROfTheLineno, like as your profession07:47
NDROfTheLinearen't you a cs professor07:48
twbNo.07:48
NDROfTheLineoh ok, i thought i encountered you a while back. nvm.07:48
twbI'd kill myself if I *had* to deal with students07:48
NDROfTheLinelol07:48
NDROfTheLineand yet, here you are, subjecting yourself nonetheless07:48
twbI'm the cs equivalent of the muso who prefers to flip burgers rather than sell out to sony07:49
twbNDROfTheLine: yes but *I* choose when to stop.  If I was paid to be here, I'd be honour-bound to be here even when I didn't want to be07:49
jmarsdenIt's very different here.  You can take breaks any time, you can stay away for weeks or months (I have done that)... you can ignore annoying people completely if you choose... :)07:50
twbVolunteers Can Say No™07:51
NDROfTheLine(tm)07:52
NDROfTheLineheh07:52
twbΙτ'σ αλλ θνιψοδε ηερε, δθδε!07:53
twbPft, crappy input method can't even autodetect final sigma07:54
NDROfTheLinewhy don't LUGs offer free open-source consulting for nonprofits07:56
jmarsdenNDROfTheLine: LUGs are whatever their members make them.  I'm giving a talk at my local one on Saturday :)  So if yours has an interest in helping non-profits, cool, set something up there.07:58
NDROfTheLinehave you ever heard of something like that?07:59
jmarsdenI don't think so... you'd perhaps need more local non-profits than many LUGs have access to, to make such a thing practical as more than a one-off?08:00
NDROfTheLinein the peace corps, people serve for 27 consecutive months in a country of the program's choosing doing all kinds of things for the local community. the pay is sufficient to cover your bare living costs, but that's about it.08:01
NDROfTheLinehow likely do you think it might be that a just-graduated programmer would be willing to do a similar thing, but instead of build houses, build open code?08:02
jmarsdenSure.  I think there was a proposal for "geekcorps" at some point, try googling for that perhaps?08:02
NDROfTheLineah, yes.08:02
NDROfTheLinegeekcorps is a little differnt, they focus on getting IT adopted in the developing world08:03
greppythat level of income probably won't pay the student loans that people have now though.08:04
NDROfTheLinethe peace corps has programs that forgive portions of loans08:04
NDROfTheLineassuming something coul dbe worked out to defer loan payments, and that the pay would be sufficient for basic living,08:05
NDROfTheLinewhat do you think the likelihood is that there would be a strong response?08:05
greppypeople might go for it.08:05
NDROfTheLinewould you go for it?08:05
greppynow? no.08:06
greppyI have a mortgage to pay :)08:06
NDROfTheLinewell, i meant when you graduated08:06
NDROfTheLinewould you have08:06
greppyI never graduated from college.08:08
greppy:)08:08
NDROfTheLinebah! you catch my drift though, sir.08:08
NDROfTheLinewith sufficient skills you don't need a degree for the peace corps either08:09
greppyyes, but I could say "Sure, I'd go for it!" now, but when I was in my early 20's... I honestly don't know.08:09
NDROfTheLine<nods>08:10
NDROfTheLinei just think that a CodeCorps that worked like the peace corps or americorps or whatever would be really cool08:10
NDROfTheLineand could accomplish a lot08:10
greppyit could.08:10
greppybut I would probably aim for more just becoming part of an existing corp.08:11
NDROfTheLinethere's no way in hell i could even begin contemplating *starting* a thing like this, not now anyway08:11
NDROfTheLinebut a boy can dream, you know08:11
NDROfTheLinei'm joining the peace corps, actually, departing in may.08:12
NDROfTheLineanyway08:12
NDROfTheLinei volunteer at the red cross and a local nonprofit clinic08:13
EvilPhoenixuh...08:13
twbWe have ALWAYS been at war with oceania08:13
EvilPhoenixwe DO have an -offtopic channel you know08:13
NDROfTheLineoh right08:13
NDROfTheLinesorry08:13
NDROfTheLine"/rant"08:13
EvilPhoenixno problem :P08:13
NDROfTheLine#ubuntu-offtopic?08:14
EvilPhoenixmhm08:14
* NDROfTheLine wanders off....08:14
doorntjeHello, I've got a question. Someone here tries to install Ubuntu Server on a server. But after selecting the language and selecting to install he gets a message with server timeout etc.08:31
jmarsdendoorntje: Can you post the exact message he gets?08:32
doorntjehttp://imgur.com/4T1Yf << Here it is08:32
EvilPhoenixnot loading08:32
EvilPhoenixthat image08:32
doorntjehttp://i.imgur.com/4T1Yf.jpg08:33
EvilPhoenixkernel panics08:33
EvilPhoenixbut at that zoom it doesnt help at lal08:33
EvilPhoenixall*08:33
jmarsdendoorntje: we need to see the whole width of the screen, not just part of it.08:34
EvilPhoenixmhm08:34
doorntjeSorry, he doesn't have another photo. He'll try to get another one later...08:34
EvilPhoenixwe need ALL the data08:34
EvilPhoenixbefore we can help you.08:34
doorntjeAh, ok.08:35
EvilPhoenixso "He'll try to get another one later..." means we'll help you later :P08:35
doorntjeWell he'll try to get one of the full width of the screen...08:35
doorntjeEvilPhoenix: i'll understand.08:35
* EvilPhoenix believes this "friend" is actually doorntje himself08:36
doorntjeEvilPhoenix: I'm at school now, you understand? But he doens't speak english very well..08:37
doorntjeMaybe you have seen someone called JamLaMin on the forums?08:37
* EvilPhoenix understands this perfectly. EvilPhoenix also understands that digital photos of installation errors arent very useful at any zoom level.08:38
* EvilPhoenix hasnt been to the forums in several months08:38
EvilPhoenix:/08:38
doorntjeI'll tell him...08:38
EvilPhoenixdont tell him my speculations :P08:38
EvilPhoenixmy speculations are my own :P08:38
doorntjeOh, ok...08:38
EvilPhoenixi'm just stating a general dissatisfaction with digital images of issues from a screen08:39
NDROfTheLinegoodnight09:09
iclebyte-workhow can I find out the current IO throughput of one of my servers? (this is for requirement gathering of our new vm solution)09:18
JamesPageiclebyte-work: try bonnie++09:29
iclebyte-worki want to see what my current system is using, rather than what it's capibal of09:29
iclebyte-workwill bonnie do this?09:29
JamesPagebonnie++ will give you benchmarks; if you want to look at what IO your system is currently doing then try sar09:32
JamesPageits part of the sysstat package09:32
soreniclebyte-work: If it's for VM's, you can get this information from the hypervisor.09:33
soreniclebyte-work: Well... Any hypervisor worth its salt anyway.09:34
iclebyte-workwell currently they are physical machines, i'm trying to work out what kind of throughput our storage backend is going to need to be able to keep up with09:34
soreniclebyte-work: kvm for instance will happily tell you how much I/O traffic it generates.09:34
soreniclebyte-work: Ah.09:34
sorenvmstat gives you some of that info.09:35
soren"vmstat 5" will tell you how much block I/O has been done across the entire system every 5 seconds.09:36
iclebyte-workand which values should i be looking at?09:36
iclebyte-workbi and bo?09:36
sorenYes.09:38
sorenThose are blocks tranferred in and blocks transferred out, respectively.09:38
iclebyte-workhow does this relate to the read/write speeds of my storage backend?09:39
sorenspeed is <some general unit of measurement>/<some unit of time>. You have a reading for every 5 seconds...09:40
sorenSo, if bi is 3000 and bo is 250, that's 3000 blocks * 512 bytes/sector / 5 seconds = 307200 bytes/second.09:42
soren+ 250 blocks * 512 bytes/block / 5 seconds = 25600 bytes/second.09:43
sorenSorry, I meant "block" where I said "sector".09:43
sorenFor a total of 332800 bytes/second.09:43
sorenHm.... That doesn't add up.09:45
iclebyte-work?09:46
sorenI just tried it, and the numbers are off.09:47
iclebyte-workthats 325kb/sec09:47
sorenkB, not kb, but yes.09:47
sorenIt should be.09:47
sorenBut it's not.09:47
sorenPerhaps those blocks are larger than I think.09:47
sorenI think they're actually 4k.09:48
* soren glances at blockdev --getss09:48
sorenAh.09:48
sorenYup.09:49
sorenShould have used blockdev --getbsz. My bad.09:49
sorenThey're 4k.09:49
iclebyte-work tune2fs -l /dev/sda5 | grep -i 'block size'09:49
sorenSo it'd be 3000 blocks * 4096 bytes/block / 5 seconds = something entirely different.09:49
iclebyte-workthis is for ext3?09:49
janimohello server people! What is the recommended way in a headless setup for a package to notify the user that some action could be taken - optionally.09:49
sorenI think this is separate from the filesystem's idea of block size.09:50
iclebyte-workjanimo, email?09:50
janimoA bootloader package gets updtaed so it want to tell the user that they can flash the new bootfiles if they wish09:50
janimoiclebyte, not a server, just headless, so no email guaranteed09:50
janimoit is for arm headless images09:50
sorenMorse code?09:50
iclebyte-workstring and 2 cups?09:51
sorenWe're helping!09:51
iclebyte-worksoren, let me try some numbers from some of my production systems09:51
janimono really is there no equivalent of the GUI, 'restarte required' or similar notifications at the console?09:51
sorenjanimo: I'm not sure I understand... How would you do it on a regular system?09:51
janimobut a fallback to morse will be considreed all else failing :)09:51
iclebyte-workjanimo, or do you have any IO methods? a light or something maybe?09:52
janimosoren, on a GUI system some packages set up some hooks in post-install, which are show in the notif area - like firefox restart required or system reboot required09:52
janimoiclebyte-work, no this is supposed to be realtively hw indep09:52
janimoa sort of notification area for text mode :)09:53
sorenjanimo: Is there any reason you can't just use a debconf notice?09:53
=== FkCek is now known as FkCek|a
janimolike on next login the user gets told, hey there's a new U-Boot you may want to flash it09:53
iclebyte-workwhat about remote syslog?09:53
sorenjanimo: Well, you could hook into update-motd.09:53
janimosoren, debonf notice is fine, except I don't know what that is, so any solution that does it is fine by me. I just knew the server team know more about headless so I came here09:53
sorenjanimo: Ok, let's try it this way: How do you expect people to upgrade the package?09:53
sorenjanimo: Using apt-get over ssh?09:54
janimosoren, they will use an existing tool that is installed. But this does not need to happen automatically as it is risky09:54
sorenjanimo: Something other than apt/dpkg?09:54
janimosoren, a new package get updated which has fgirmware/bootlaoder blobb09:54
janimosoren, yes, it goes to a hidden vfat partition09:54
janimoso special tool like the onel flashing kernel and initramfs on arm09:55
janimopotentionall to NAND later, etc09:55
sorenjanimo: I think we're talking about different things.09:55
janimoso not part of /09:55
janimosoren, ok, let me link to the spec09:55
janimohttps://blueprints.launchpad.net/ubuntu/+spec/other-arm-n-handle-core-boot-files-update09:55
sorenjanimo: I think(!) you're talking about the kernel itself. I'm talking about the package that contains the kernel.09:55
sorenjanimo: You started out saying "A bootloader package gets updtaed...".09:55
sorenjanimo: Is that a .deb at any point in time or is all of this completely separate from the packaging system?09:56
janimosoren, yes for ex the uboot package gets updated via dist-upgrade09:56
sorenExcellent.09:56
sorenThen it's simple enough.09:56
iclebyte-worksoren, the bi and bo values are they *1000 ?09:56
sorenWell, as simple as debconf :)09:56
soreniclebyte-work: No.09:56
soreniclebyte-work: Raw numbers.09:56
janimoso we need to tell the user, hey new blobs for uboot ara available, you can flash them into the boot area if you wish09:56
sorenjanimo: Right.09:56
janimosoren,  it comes in a deb09:56
sorenjanimo: Excellent.09:57
janimoand the tool uses the fiels from the deb09:57
sorenjanimo: Then it's straight forward.09:57
janimoso that is the only use for the deb09:57
soren"man 7 debconf" is the canonical guide, but I recommend finding a package that uses it and copy magic from there.09:57
sorenIf you ask some of your team mates for help showing a debconf notice some of them should be able to guide you.09:58
janimosoren, I have used debconf for pkg configuration, are notices something less used?09:58
sorendebconf abstracts such pesky things as UI for you.09:58
janimosoren, ok, so regular debconf question while installing?09:58
sorenYou just tell it that you want to ask a question or show a notice or whatever, and it does the right thing depending on the available UI and configuration.09:58
janimook09:59
sorenjanimo: If you've used questions, this is almost identical.09:59
* janimo start looking for debconf notices09:59
janimosoren, thanks09:59
sorenman 7 debconf-devel09:59
sorenis your friend.09:59
* janimo is just confused as this requirement was said to be satisfiable by any of jockey, update-manager, debconf,update-motd10:00
sorenLook for THE TEMPLATES FILE->Type->Note.10:00
sorenjanimo: update-motd is an option, too.10:00
iclebyte-worksoren, would it be fair to run vmstat 5 for 1 minute (i.e. 12 outputs) then take the median?10:01
iclebyte-worki.e. the middle of the highest and lowest number?10:01
sorenjanimo: update-motd lets you put scripts in a directory that get executed on login and can put stuff in motd. You can check for updates and notify people logging in that there's stuff to do.10:01
soreniclebyte-work: I can't say.10:01
soreniclebyte-work: Depends on what you need the numbers for.10:01
soreniclebyte-work: I would have thought you need the max.10:01
iclebyte-worki'm trying to work out how much throughput i need from a SAN10:02
soren"need" means you want to find the max, doesn't it?10:02
iclebyte-workyea i suppose that makes sense, better to have too much than not enough10:02
iclebyte-workyes =)10:02
iclebyte-worksoren, have you any experience with gluster?10:02
soreniclebyte-work: Some.10:02
iclebyte-workhave you used it for virtulization ?10:02
soreniclebyte-work: Not in any sort of production setting, though.10:02
soreniclebyte-work: Yes.10:03
iclebyte-workwhat kind of hardware did you use for the bricks?10:03
iclebyte-worki'm thinking of using some old G4 DL380's with ultra320 disks in RAID0 then using replication and installing bricks in pairs for redundancy10:04
soreniclebyte-work: Whatever I had lying around. A laptop and a spare desktop box.10:04
iclebyte-workthen adding pairs as and when needed for the VM's10:04
iclebyte-workah =)10:04
sorenglusterfs is cool. I'm sad I haven't gotten to play more with it.10:04
iclebyte-worksoren, do you work on ubuntu-server full time?10:05
soreniclebyte-work: I used to.10:05
iclebyte-workyou've answered some of my questions on the mailing list10:05
sorenWhat's your name?10:05
iclebyte-workJamie McDonald - I had problems with my KVM's not hitting the outside world - turned out to be fasthost locking the switches down to mac10:06
sorenThat's pretty common.10:06
sorenThe problem, not the name. I think.10:06
iclebyte-workit's pretty frustrating =)10:06
sorenIt's not that hard to work around, though.10:07
iclebyte-workthey added the mac's for me no questions10:07
sorenAh, great.10:07
sorenInstead of bridging VM's onto the LAN directly, you can just route through them.10:07
iclebyte-workbut then how do you allow incomming packets to a public facing ip?10:08
sorenThat's how routing works, really.10:08
sorenPackates destined for your box travels through a bunch of routers already. All of them just know that somewhere behind them, there is your box. They just send the packets to the next hop.10:09
sorenYour box can do the same thing.10:09
iclebyte-workyes but where would the routes get pushed too if you don't have control of the internet routers10:09
janimosoren, only a handful of packages seem to use Type:note on my installed system. I'll have to think if this use case warrants it, as the manpage says it should be there for serious messages only.10:09
sorenTypically, what a hosting provider does is just add a routing table entry for the extra subnet, sending the packets to your primary host.10:09
iclebyte-workah yes, but you'd still need the host's cooperation10:09
* janimo goes to discuss this in the arm channel10:10
soreniclebyte-work: Well, sure.10:10
soreniclebyte-work: ...but you need the hosts's cooperation for running the VM's, too :)10:10
sorenIt's quite simple.10:10
iclebyte-workdedicated servers10:11
sorenInstead of creating a bridge and connecting your eth0 to and as well as all your VM's, you just leave your eth0 connected to the physical network.10:11
soren...and assign an IP from the extra subnet you've been assigned to the bridge.10:11
soren...and that's pretty much it.10:11
iclebyte-workright so.. just to double check.. this box is probably my most heavily loaded it's not doing much reading but the BO value is 3746 - i calculate that to 2.92mbps ?10:12
soreniclebyte-work: You said "I had problems with my KVM's not hitting the outside world".10:12
soreniclebyte-work: I thought we were talking about VM's?10:12
iclebyte-workyes - they run on the dedicated server.10:12
soreniclebyte-work: Right.10:12
iclebyte-workyou don't need fasthosts cooperation to run virtual machines i was saying.10:12
soreniclebyte-work: As for your 3746 reading. Is that from vmstat 5?10:12
iclebyte-workyes vmstat 510:12
soreniclebyte-work: Yeah, that makes about 3 MBps.10:13
soren(Those are megabytes. Not millibits.)10:13
sorenmb vs. MB.10:13
soreniclebyte-work: Oh, I see what you mean now. When you said "host", I though you meant your host box.10:14
soreniclebyte-work: Uh, no, then you don't need their cooperation.10:14
soreniclebyte-work: If they've assined an extra subnet to you, they've already set this route up.10:14
soreniclebyte-work: Really, this is the simple way to do it.10:15
soreniclebyte-work: You need the hosting provider's cooperation to do it the way you did it (as you've just said yourself).10:16
iclebyte-worksoren, sorry - manager pulled me away10:23
iclebyte-workexcellent. thanks for checking my values10:24
soreniclebyte-work: No problem. I can keep myself busy :)10:24
iclebyte-workyes i'm sure you can! =)10:24
uvirtbotNew bug: #716931 in dbconfig-common (main) "dbconfig-common doesn't work properly when the version of the database script for upgrade is greather than 1.10, 1.10.1, 1.10.2, 1.10.3, 1.11, 1.12" [Undecided,New] https://launchpad.net/bugs/71693111:11
uvirtbotNew bug: #716948 in openssh (main) "Can't connect to local MySQL server through '/tmp/mysql.sock' (2)" [Undecided,New] https://launchpad.net/bugs/71694811:36
uvirtbotNew bug: #717098 in openssh (main) "ERROR 1045 (28000): ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)" [Undecided,New] https://launchpad.net/bugs/71709812:46
patdk-wkman, the quality of bug reports this morning13:10
SpamapSpatdk-wk: reading the bug in "openssh" on "ubuntu" noted above by uvirtbot was rather amusing. :)13:16
SpamapSactually these almost look like trolling or a broken apport or something13:17
=== oubiwann is now known as oubiwann_
patdk-wk:)13:19
sorensmoser: around yet?13:20
* patdk-wk will have to submit a new bug report13:20
patdk-wkmy job hasn't been fully assimilated by ubuntu yet, when can I expect to loose my job?13:21
sorensmoser: I'm seeing intermittent boot failure of the UEC images on OpenStack, and ttx suggested you knew the cause: https://jenkins.linux2go.dk/job/Nova-user-test/2039/IMAGEVERSION=natty,distro=maverick,userdata=no/console (search on that page for "CONTROL-D")13:21
ttxsmoser: ISTR we have/had the same errors booting UEC images on Eucalyptus, and you have a bug open about it13:23
sorenttx: What would that be reported against?13:23
sorenttx: Go on. Amaze me with you Launchpad-bug-searching-fu.13:24
sorens/you/your/13:24
ttxsoren: that's the tricky part. I think that was a mountall... lemme check13:24
ttxsoren: my lp-bug-searching-fu is failing me13:30
sorenMine too.13:30
ttxhggdh: maybe the error rings a bell to you ?13:31
ttxsoren: you have it on Lucid hosts only ?13:31
Davieyit's not one i've seen :/13:31
sorenNo, it's everywhere.13:31
ttxI used to see it all the time on my previous laptop. Would prevent me from testing even starting a single instance.13:32
sorenMy current hypothesis is mountall exiting prematurely due to plymouth having disappeared. Mountall doesn't seem to handle SIGPIPE, so if Plymouth is gone things go boom.13:32
ttxMy new laptop is so fast he jokes about it.13:32
soren...and it's exactly an unclean exit of mountall that gives this prompt.13:33
* soren tries patching mountall and takes it for a spin.13:33
DavieyDoes seem to be known http://open.eucalyptus.com/forum/problems-running-instances13:35
Davieybut i don't remember an LP bug regarding it13:35
jpdsWorst forum URL maker, ever.13:35
Davieyjpds, slug > />threadid=2354&post=7877313:37
Davieydamn keyboard layout... s/>/?/13:37
jpdsDaviey: Until you have two forum threads with the same name.13:37
Davieyjpds, ack.. i would hope it would check that first before melting all over you.13:38
Davieyappending 2 :)13:38
zuli find the url strangely ironic13:39
zulor misleading13:39
sorenzul: How is it misleading? BEcause it suggests that it sometimes works? :)13:46
zulsoren: the open part13:46
* soren registers problems-running-instances.com and points it to Eucalyptus :)13:46
RoAkSoAxmorning all13:59
hggdhDaviey: I do not remember a LP bug about this14:01
Davieyyeah, i'm kinda suprised with the amount of instances you have started with eucalyptus you hadn't witnessed it yourself either14:02
DavieyI suspect it only happens on slow hardware..14:02
Davieysoren / ttx ^^14:03
sorenDaviey: You're implying that I ran many instances on Eucalyptus.14:03
sorenDaviey: I *tried* a lot.14:03
smoserhm.. i'll come here14:03
smoserso... is that log you see all one instance boot ?14:04
Davieyhallyn, Were you looking to do a multipath-tools merge?14:04
hggdhI remember we having plymouth integration issues14:04
hggdhon lucid, IIRC14:05
Davieysoren, know, i was talking about hggdh running bazillions of instances.14:05
Davieys/know/no/14:05
sorenDaviey: Ah.14:05
Davieysoren, but hggdh uses hardware that is overspec... which would explain why it's only visible on slow hardware.14:06
thesuliban1980Hi! is there an openldap pro here who could answer me some questions regarding openldap + sasl and why openldap with sasl is more secure, even if the user passwords have to be stored in cleartext, then without sasl and encrypted passwords?14:07
patdk-wkwell, you ALWAYS have to have plain text passwords somewhere14:08
patdk-wkeither stored in your backend14:08
patdk-wkor transmitted to the server for each login14:08
Davieypatdk-lap, not sure i agree with that..14:08
Davieyerr patdk-wk14:08
patdk-wkwhat method doesn't? besides going pure pki14:09
Davieypatdk-wk, The client can transmit a hash :)14:09
patdk-wkthen you need plaintext on the server to verify the hash14:09
zulRoAkSoAx: what about ocf?14:09
Davieypatdk-wk, i disagree.14:09
patdk-wkthen how is it secure?14:10
patdk-wkI could just *replay* the has14:10
patdk-wkhash14:10
patdk-wkunless you salt it, then you need the password to verify it14:10
RoAkSoAxzul: still waiting for upstream to do the official release, last week they said ~14 days14:10
Davieypatdk-wk, If i take my IMAP as an example, an encrypted password is sent over TLS... and the password is a hash on the server.14:11
patdk-wkencrypted password?14:11
thesuliban1980The point is: When  I don't use sasl then I authenticate w/o encryption  to the ldap and I transmit a password hash which then is compaired to the one stored in the directory. In that case anyone can see the hash on the network... but nor user root or ldap admin know the users passwords....14:12
thesuliban1980on the other hand14:12
patdk-wkdaviey what login method?14:12
thesuliban1980when I use sasl, the connection from the ldap client to it's server might be more secure, but after hacking the ldap's admins password or the system root ones, I know all users passwords....14:13
hallynDaviey: cmagina was testing my port from debian-experimental, I'm waiting on his final ok or nack14:13
thesuliban1980isn't it?14:13
patdk-wkhttp://wiki.dovecot.org/Authentication/Mechanisms14:14
Davieyhallyn, awesome.14:14
patdk-wkunless you mean the TLS is the encryption, and that doesn't count, cause the password is still plaintext inside14:14
thesuliban1980let me start over:14:14
cmaginahallyn: the package didn't work for me.  it resulted in constant path fofb, io errors, and scsi error handling kicking off14:15
Davieypatdk-wk, In which case https is  insecure.14:15
patdk-wkI didn't say that14:15
Davieya secure tunnel != plain text.14:15
patdk-wkbut I did say, besides pki14:15
patdk-wkI said passing the password as plaintext14:15
thesuliban1980If sasl requires all passwords to be in cleartext within ldap, and someone hacks the ldap admin's password, then he has access to the cleartext password from all users...14:15
cmaginahallyn: i had tossed the logs onto a server in my home directory.  i had taken a glance at them, but i've been side tracked with other work since, so haven't had a chance to dig deeper14:15
thesuliban1980whereas without sasl only the password hashes...14:16
patdk-wkthesuliban1980, sasl doesn't require it, but using any login methods other than a plaintext password won't work14:16
thesuliban1980that makes a big difference to me...14:16
hallyncmagina: d'oh, that's right14:16
patdk-wkand either way, the server will know the plaintext password at some point14:16
patdk-wkeither always, or just when you attempt to login14:16
hallyncmagina: let me try and get other things out of the way so i can look at those logs this afternoon14:16
thesuliban1980patdk-wk: I don't understand why.14:17
cmaginahallyn: i might have some spare time to look at them as well.  the logs contain the console from the server, the servers logs, and even logs from the SCMs14:17
ttxsoren: <smoser> so... is that log you see all one instance boot ?14:17
patdk-wkif you want to pass the hash over the internet, you need plaintext password in sasl to verify it14:17
jdstrandScottK: hey. not sure you are aware of this: http://lurker.clamav.net/message/20110211.125402.ce5e76db.en.html14:18
thesuliban1980My concern are not password hashes or cleartext traveling the network - therefore I use tls/ssl...14:18
smoserhe got back to me, ttx14:18
patdk-wkif you want hash in sasl, you need plaintext passed over the internet (but can be inside ssl/tls) to verify14:18
jdstrandScottK: basically v12663 daily.cld crashes 0.95 servers. they fixed it, but if you see bug reports with something like: "Thu Feb 10 17:25:09 2011 -> ERROR: reload db failed: Malformed database", that is why14:18
ScottKjdstrand: I saw that.  We also got a bug about it too.14:18
thesuliban1980my concern is that it if the admin's account is hacked using sasl all user passwords are cleartext... otherwise only hashes...14:18
jdstrandScottK: ok. apparently I am behind the curve :)14:19
ScottKjdstrand: Thanks for pointing it out.  It does suggest to me that pushing 0.96 to lucid-proposed once the freeze is lifted might not be a bad idea.14:19
thesuliban1980So in the end: which advantage do I have If I use sasl?14:20
jdstrandScottK: yeah. cause they said they are only actively regression testing 0.97 and 0.9614:20
jdstrandScottK: I did find this interesting (0.97 aiui): "The current14:21
jdstrandversion of freshclam has a special option "TestDatabases", which is14:21
jdstrandenabled by default and makes sure the new databases can be loaded14:21
jdstrandproperly before they get installed in the system."14:21
hggdhthesuliban1980: privacy on the path14:21
ScottKI'm running 0.96 from backorts, so I never saw the issue.14:21
Davieyjdstrand, Are you doing AA work today?14:21
ScottKThat's a nice feature.14:21
jdstrandDaviey: yes14:21
jdstrandScottK: it is14:21
thesuliban1980I, not familiar with that expression "on the path". What does it mean exactly?14:21
jdstrandDaviey: I haven't looked at it yet though14:22
Davieyjdstrand, good :)14:22
jdstrandDaviey: good that I haven't looked at it yet? sounds rather ominous...14:22
Davieyjdstrand, well... bind9 was uploaded the other day and it's still in unapproved... and it could really do with an extra patch (as pointed out by mdeslaur)... if you were to reject it, or rather not approve it.. that would be good :)14:24
Davieylucid-proposed14:24
jdstrandDaviey: oh sure thing14:25
Davieyjdstrand, cool, thanks14:25
thesuliban1980?14:25
jdstrandDaviey: fyi, it has 'lucid-updates' in the changelog. that should be 'lucid-proposed'14:28
jdstrandDaviey: so I'm rejecting 1:9.7.0.dfsg.P1-1ubuntu0.214:29
jdstrandDaviey: done14:29
Davieypah... how did that happen :/14:30
Davieyjdstrand, thanks14:30
jdstrandDaviey: sure, np14:30
bobgi want to deploy ldap-auth-client on a lot of machines. Is there a way that I can preseed the answers to the debcnf questions when I am installing the package with apt-get?  i.e. I know how to do it at OS install time, but not for packages installed after installation14:44
rubbsI've got a vps provider claiming that the 2.6.32-306-ec2 #11-Ubuntu SMP kernel handles memory different than the other distros they offer as a justification as to why my ram usage jumps from 100mb to 600mb after a kernel update. Can I call BS on this? (Note: this is a fresh install 100mb, then update&&upgrade all of the sudden 600mb, no packages installed)14:47
t3cki3guys i'm using backintime on my ubuntu 10.04 is there a way in which i can change the time of the backup as i need to run the backup job at 13:00 not 00:0015:10
t3cki3you guys are the experts... come on ppl... i kno someone out here knows the answer to this15:11
* patdk-wk has no clue what backintime is15:12
=== rubbs_ is now known as rubbs
genii-aroundI imagine it's like a system snapshot15:13
bcessahi there, I just create an EC2 instance of ubuntu lucid lynx in AWS and get a message that a newer build is available, the thing is I don't really know how to upgrade it, any ideas?16:04
bobgbcessa, "sudo apt-get update;  sudo apt-get upgrade"  ?16:08
bobgthat updates lucid to the latest packages16:08
=== 13WAA4PTR is now known as kim0|Celebrating
bcessaamm not really, as far as I can tell that upgrade the packages but not the AMI build itself :o16:08
bobgi am not sure if you are talking about some sort of amazon upgrade16:09
bobgthen I don't know16:09
bcessadon't think so, the AMI I'm using is the official ubuntu image, looks there's a new release of it, thnx for the attention anyway :)16:09
bobgi figured out my earlier question ( on a machine where I manually installed the package, "sudo debconf-get-selections | grep -i ldap > auth.preseed" then before installing on a new machine, "cat auth.preseed  | debconf-set-selections "16:12
bobgnow I am wondering how to install a custom auth profile16:13
zulsmoser: where is the ttylinux images you had at one point?16:17
uvirtbotNew bug: #717243 in vlan (main) "vlan interface won't start with ifup, can be started manually" [Undecided,New] https://launchpad.net/bugs/71724316:27
gswallowheya, anyone here ever configure ufw from within preseed.txt?16:35
smoserzul, http://lmgtfy.com/?q=smoser+ttylinux16:36
zulsmoser: arse16:36
jdstrandgswallow: see /usr/share/doc/ufw/README.Debian16:44
gswallowjdstrand: thanks.  I have that stuff included.  I also had some other things set (ufw/existing_configuration and ufw/allow_custom_ports) set, based on what I found when I ran debconf-show ufw.  I removed those.  Will retry.16:48
bpgoldsbAnyone know of a tool that will assist in building a list of all security updates on an ubuntu-server and pushing them into a reporting tool?17:01
bpgoldsbi.e. scraping apt for data and pushing it to a mysql db with a web or other frontend.17:01
bobganyone know why there are both ldap-auth-client and ldap-auth-config? The descriptions are similar, and there is a circular dependency so that if you install either one, both will be installed. ldap-auth-config -> ldap-auth-client ->libpam-ldap -> ldap-auth-config (where -> stands for 'depends on')17:03
siege-Hello - I upgraded the dovecot-postfix package this morning, and now my main.cf is missing some changes I had made. Specifically DNSBL and postgrey settings.17:18
siege-Did the package update move where those settings should be stored?17:18
SpamapSsiege-: I believe that package may have a bug where it generates a config file without warning users that it will be overridden on upgrade..17:22
SpamapSsiege-: the upgrade didn't ask you to confirm changes right?17:23
siege-yup, exactly. I've gotten that warning for upgrades in the past17:23
SpamapSbut not this time?17:24
SpamapSI wonder if it was moved out of the package and now isn't protected as a conffile.. :-/17:24
siege-To be honest I'm not certain it was that package that gave the warning in the past, I just know not this time of course :)17:24
siege-Yeah that's what I was wondering if the conffile was moved and it's using a different one now17:25
siege-My bad for not backing it up! Now to find the tutorials I used for setting up RBL and postgrey :)17:26
siege-SpamapS: thanks for the help, I'll be more cautious updating the package next time17:27
SpamapSsiege-: you may want to report that as a bug17:27
SpamapSsiege-: or look through the existing bugs.. I swear I've seen it reported17:28
siege-Ok - I will take a look, thanks17:29
SlybootsAnyone know any good sites for uh.. Ubuntu.. Training?17:32
Slyboots.. *free*17:32
SlybootsI mean things like.. network hardening, good system pratices.. diagnosing problems..17:33
SlybootsSysAdmin stuff17:33
greppySlyboots: the ubuntu manual?17:33
siege-Slyboots: https://help.ubuntu.com/10.10/serverguide/C/index.html17:34
zulthere is a q+a session going on in #ubuntu-classroom right now17:39
SlybootsIts just I keep running into small nigglign problems and Im conserned about teh secuirty of my machine :D17:39
uvirtbotNew bug: #717298 in dovecot (main) "dovecot-postfix upgrade overrides main.cf" [Undecided,New] https://launchpad.net/bugs/71729817:46
siege-hey that's me17:46
siege-SpamapS: I just learned that the main.cf did get backed up though, so all hope is not lost (/var/backups/dovecot-postfix)17:47
=== mfraz74_ is now known as mfraz74
Slyboots Actually what I really want right now, is Decent Adblocking in a way thats not going to trash webpages17:54
SpamapSsiege-: oh good!17:55
SlybootsSort of like Adblock; but network wide, Im using Squid with Privoxy right now but.. its a bit of a mess17:55
avishas anyone seen eagles051 on this channel ?17:55
patdk-wka few months back17:56
avisthank you17:56
avisi lost his email17:56
pmatulisanyone know of a ftp daemon stress test tool?17:56
genii-aroundavis: Try #kubuntu-offtopic17:56
avisthank you17:56
aviscomcast today.  i'll be setting up a apache2 webserver, very basic, using dyndns.org and port 80.  i really only want to use it for streaming media simply, deposit sound file and stream elsewhere17:58
Slybootsavis: Use MPD?17:59
avisi gave debian my best shot.  ubuntu won.17:59
avisi didn't mean on a lan18:00
SlybootsDont see how that makes a difference18:00
avisi'll research that thank you18:01
nimrod10Slyboots, probably what you need for adblocking is something to put in your host file18:03
Slybootsnimrod10: that doesnt really work terribly well, What Im trying to do is replicate what Adblock does (Strip all adds and dynamically reformat the HTML to remove them"18:04
SlybootsRather than have huge popup windows open with "Cant display page"18:04
SlybootsWhich isnt much of an improvment :)18:04
lirakisfinally got hostapd working for a wifi access point this morning18:07
nimrod10I see18:07
lirakisvery finiky18:07
lirakiswouldnt work in b mode18:08
lirakisonly in g18:08
lirakisbizzare18:08
=== _sjm_ is now known as sjm
bobgi am trying to find out info on writing pam-auth-update profiles -- the man page is not much help -- googled to no avail -- anone have a tip?18:33
lacovimawhere can I find out more about the Orchestra project mentioned by robbiew?18:37
robbiewlacovima: https://blueprints.launchpad.net/ubuntu/+spec/cloud-server-n-install-service18:39
* RoyK sends his greetings to the Egyptian people :)18:39
binBASHRoyK: Party time!18:46
RoyK:)18:47
* binBASH was in Egypt four times...18:48
* RoyK has never visited an arab country18:48
binBASHRoyK: well it's one of the best destinations for scuba divers like me ;)18:53
RoyKok :)18:53
binBASHOhh nice, ripe got a new site \o/18:54
zulrobbiew: for the virtual-networking spec do we really need a checkbox test since it has its own testsuite when the package is built?18:57
robbiewzul: huh? /me needs to read it18:58
robbiewone sec18:58
robbiewzul: what's the aim of the checkbox test18:59
zulrobbiew: i have no idea its something that nijaba brought up at the session at uds19:00
robbiewso I imagine the testsuite in the package verifies the code19:00
robbiewbut a checkbox test19:00
robbiewwould run some sort of networking tests across the virtual device19:01
robbiewto ensure it works19:01
robbiewbut I imagine we could just run any existing networking tests19:01
robbiewjust over that virtual devices19:01
robbiewdevice19:01
robbiewright?19:01
zuli guess but i dont think we ever used checkbox for server tests19:02
zulunless there is something i dont know about which is a pretty good chance19:02
zuli dont see the point right now19:04
keesbpgoldsb: security updates> what's the specific goal?19:12
keesbpgoldsb: you could just look at the -security pocket Packages file for a full list? I'm not sure what exactly you're looking for.19:13
zulrobbiew: oops i was wrong about checkbox19:16
robbiewzul: ok19:17
ptingusing tcpdump, is it possible to log the process id of the packet captured? i can't seem to find an example anywhere19:27
bpgoldsbkees: 1. Generate a list of pending security updates (as you get when you login by default).  2. Handle sending that list to a central location (database).  3. Provide a frontend (web) to look at all my hosts reporting, and what packages are security-updates are pending on them.19:27
flichi19:33
flicis atheros wifi card 100% supported on ubuntu-server 10.4?19:33
flicit works on ubuntu-desktop19:34
RoyKflic: server and desktop uses the same kernel and drivers, so it should work19:39
flicok19:39
RoyKthat is, the same _version_ of the kernel, but then, that shouldn't affect a driver19:39
flicit's not the same kernel conf, yea19:39
RoyKminor diff19:40
RoyKscheduling and HZ differences19:40
RoyKthat's about it19:40
guntbertpting: cannot be possible - that information is not within the packets19:55
=== Kiall is now known as Kiall|AFK
hggdhsmoser: ping re. Hardy proposed kernel on ec220:01
* smoser runs and hides20:01
smoserhardy kernels on ec2 much different that others20:02
smoserwe will need someone to build one20:02
hggdhwho would be the victim, er, volunteer?20:02
smoserwell, in the past it has been jjohansen, or zul i think20:03
smoserhardy is significantly different....20:03
hggdhzul ^ would you mind?20:03
smoserwe have to somehow get one built, and then i have to manually upload it.20:04
hggdhbummer20:07
torrancewHi all, we're beginning to deploy Lucid server on ESX 3.5, and we're seeing some strange performance issues - commands taking a while to return when there's no load, etc, and we're seeing a few strange segfaults in the logs. Has anyone encountered this?20:07
jmgallowayanyone know why my installer hangs on the language selection?20:07
torrancewhttp://pastebin.com/ZC1eZA9f <--- One of the segfaults we're seeing20:08
jmgallowayIm trying to install a new copy of ubuntu server and the install is hanging20:09
RoyKjmgalloway: hanging where?20:25
lenioson the language selection20:26
jmgallowaylanguage selection20:27
jmgallowayI am downloading the iso again to see if that was the problem20:28
MACscrhmm, im trying to get snmp to work on my ubuntu 8.04 server, but for the life of me i keep getting: Timeout: No Response from localhost20:29
MACscri have it working just fine on 20 other servers, though they are centos based20:29
patdk-wkand install and run an snmp server?20:29
=== KB1JWQ_ is now known as KB1JWQ
MACscrpatdk-wk: i have it installed already and a custom snmpd.conf setup20:30
jjohansenhggdh: I've kicked off a hardy xen build (I think)20:36
jmgallowayhow long does it usually take on the language selection part of the install?20:36
hggdhjjohansen: super, thank you20:36
torrancewjmgalloway: did you let it try to pick for you?20:37
jmgallowaytry to pick?  I just see all of the languages listed and english hilighted20:37
torrancewjmgalloway: hit enter20:37
jmgallowayi did20:37
torrancewah20:37
jmgallowayfrozen20:38
torrancewso, there are 2 parts IIRC of the langauge bit (been a while since I did a manual install)20:38
torrancewone where you choose a general langauge, and one where you set the keyboard layout20:38
jmgallowayright20:38
torrancewwhich are you at?20:38
jmgallowaygeneral language, the first graphical image of the install20:39
torrancewyeah, that's not normal.20:39
jmgallowaynope, I've downloaded the iso twice and burned it like 5 times20:39
torrancewjmgalloway: did you try burning at lower speeds?20:40
jmgallowayno, I'm just using the window's 7 burning software...it wont let me change the burn speed20:40
torrancewsorry, I know that's not a fun answer to hear, but it needs to be asked...20:40
torrancewah20:40
torrancewouch20:40
jmgallowaythis is a new machine, first os to be loaded on it20:41
torrancewjmgalloway: i'd recommend you find a way to burn at a lower speed (boot linux on a usb, or another machine), to rule that out20:42
jmgallowayyeah, let me go see if that windows machine has some other tool for burning20:43
=== marass is now known as mcas
uvirtbotNew bug: #717396 in tomcat6 (main) "please sync 6.0.28-10 from unstable" [Undecided,Fix released] https://launchpad.net/bugs/71739621:02
uvirtbotNew bug: #717397 in squid (main) "package squid 2.7.STABLE7-1ubuntu12.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/71739721:02
jdstrandhallyn: hey. I was wondering if you saw my latest comment in the kvm instability bug: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/694029/comments/2421:04
uvirtbotLaunchpad bug 694029 in qemu-kvm "[natty] kvm guests become unstable after a while" [Medium,Confirmed]21:04
hallynjdstrand: yeah.  i wasn't sure where to go from here :)21:05
jdstrandhallyn: don't you have an x201s?21:05
hallynjdstrand: it sounds like kvm_intel and the wireless driver stepping on each other21:05
* jdstrand nods21:05
hallynjdstrand: no21:05
hallynkirkland: has something like it21:05
jdstrandhmm21:05
hallyni'm not one of the cool boys :)21:05
jdstrandhehe21:05
hallynjdstrand: in any case it sounds like it needs to be reclassified as against linux-image i guess21:06
hallyni wouldn't mind looking through the driver source21:06
hallynjdstrand: which driver is in use according to lspci -v?21:06
jdstrandhallyn: as a qemu-kvm maintainer, would you mind doing that?21:06
hallynretargetting?  happily :)21:06
hallynoh you already had targetted it at linux.21:07
jdstrandhallyn: the lspci should be in the bug21:07
hallynok21:07
jdstrandhallyn: I used 'ubuntu-bug linux' when I filed it21:08
hallyni'll write down a note to look at the driver source, though not optimistic21:08
jdstrandhallyn: I can say that I don't otherwise have instabilities using the wireless21:08
jdstrandhallyn: so, it does seem kvm related21:08
hallyn(my own wireless card won't let me join my ad-hoc wireless network.  that one hurtsright now)21:09
jdstrandhallyn: I'll also test the maverick kernel with wireless too, to double-verify it is ok on maverick21:09
hallynjdstrand: but qemu-kvm package doesn't provide the kernel module21:09
hallynhow weird would it be to assign the linux bug to myself while i look at the drivers?21:09
hallyn(since i'm not on kernel team)21:10
jdstrandhallyn: I realize that. but it is still a 'kvm-y' sort of thing, so I don't know where the server and kernel team's draw the linie21:10
hallyndon't wanna step on any toes21:10
jdstrandhallyn: I'm sure they would not mind in the least21:10
hallynheh, probably 2 arm's lengths away from our respective selves :)21:10
jdstrandheh21:10
kirklandjdstrand: i have an x20121:11
kirklandjdstrand: what's up?21:11
jdstrandkirkland: talking about bug #69402921:11
uvirtbotLaunchpad bug 694029 in qemu-kvm "[natty] kvm guests become unstable after a while" [Medium,Invalid] https://launchpad.net/bugs/69402921:11
jdstrandkirkland: with >=2.6.37 kernels there is severe guest instability when the host is using wireless21:12
kirklandjdstrand: okay, let me test here ...21:12
jdstrandkirkland: the best test I've found is to have two VMs-- let's say maverick -- and then either pull down a bunch of packages or do apt-get upgrade from release21:13
jdstrandkirkland: so have a couple of throwaway server installs, and then do 'apt-get install ubuntu-desktop' in both21:14
jdstrandkirkland: it might take a few times, but I hit it pretty darn all the time21:14
* kirkland is really sad byobu is no longer on the live desktop :-( :-( :-(21:15
jdstrandkirkland: you might check if you have the same wireless nic as I reported in the bug21:16
hallynwhy is it gone?21:16
hallynjdstrand: have you reproduced it withOUT having simultaneous i686 and amd64 VMs?21:17
jdstrandhallyn: oh yes21:17
kirklandjdstrand: i have Centrino Ultimate-N 630021:17
jdstrandone VM is easily enough here21:17
hallynoh21:18
jdstrandIntel Corporation Centrino Advanced-N 6200 here21:18
kirklandjdstrand: okay, i have two live desktops dist-upgrading 84 packages right now21:18
hallynoh, yieah, the 6300 is where they fixed that flaw in the 6200 where it would randomly write to user memory21:18
kirklandjdstrand: over wireless21:18
jdstrandkirkland: cool. thanks. like I said, it might take a couple of times. I wrote a script and let it run over and over, and 'grep -i error' (though 'grep Segmentation' would also do it)21:20
jdstrand(cause I ssh into them to run the command, send the output to tee, and grep that)21:20
binaryhatit appears that when i use virtualization and craps out, my server turns off21:20
binaryhatany ideas?21:21
patdk-wkpsu too small?21:21
binaryhati was copying a file over21:21
binaryhatpatdk-wk, my psu?21:22
binaryhatu think so?21:22
patdk-wkjust one of I'm sure many many issues21:22
patdk-wkwell, with all the info you provided, I'm sure it can't be anything else :)21:23
jdstrandkirkland: at the risk of being daft, you are using a natty host with a 2.6.37 or higher kernel, right?21:23
patdk-wknatty is 2.6.28 (or was)21:23
jdstrand2.6.3821:23
patdk-wkya, what I meant, damn keys moving on me21:24
binaryhati have a 450W PSU patdk-wk21:24
patdk-wkand what all is in your computer?21:24
jjohansenhggdh: where do you want your -xen debs?21:24
patdk-wkcpu, drives, cards?21:24
patdk-wkhmm, 2.6.38-3 now :(21:25
binaryhatis that not enough?21:25
patdk-wkhow should I know? my computers normally need a 1000w or larger21:26
kirklandjdstrand: absolutely21:26
kirklandjdstrand: i am suffering through natty with the rest of you21:26
kirklandjdstrand: 2.6.38-3-generic21:27
jdstrandkirkland: haha21:27
kirklandjdstrand: my X and desktop are almost completely UNUSABLE21:27
jdstrandkirkland: well, yes, but some might boot into a maverick kernel still. I was cause of this bug until I found everything was stable with wired21:27
kirklandjdstrand: i spend most of my day in a tty hugging w3m, irssi, and mutt21:27
kirklandctrl-alt-f1 is my savior21:28
jdstrandkirkland: oh, you might want to upgrade with today's compiz fixes. finally got the stacking right so no invisible windows (gosh that was annoying)21:28
jdstrandhaha21:28
kirklandjdstrand: can you alt-tab?21:28
kirklandjdstrand: or resize windows?21:28
kirklandjdstrand: or move windows?21:28
jdstrandI can alt-tab21:28
kirklanddammit21:28
kirklandi can't21:28
jdstrandI can resize windows21:28
kirklanddammit21:28
kirklandi can't21:28
jdstrandkirkland: this is unity I presume?21:29
hallyni can see a second gnome-terminal under my current gnome-terminal21:29
kirklandjdstrand: nope21:29
* hallyn waits for more cursing21:29
jdstrandah, I am using unity21:29
kirklandhallyn: dammit, i can't21:29
* hggdh grabs some popcorn21:29
hallyn\o/21:29
jdstrandI don't know what is going on with classic21:29
* RoAkSoAx wants to kill corosync+cman integration xD21:29
jjohansenhggdh: kernel.ubuntu.com/~jj/linux-headers-2.6.24-28-xen_2.6.24-28.86_amd64.deb21:29
jjohansenkernel.ubuntu.com/~jj/linux-headers-2.6.24-28-xen_2.6.24-28.86_i386.deb21:29
jjohansenkernel.ubuntu.com/~jj/linux-image-2.6.24-28-xen_2.6.24-28.86_amd64.deb21:29
jjohansenkernel.ubuntu.com/~jj/linux-image-2.6.24-28-xen_2.6.24-28.86_i386.deb21:29
hallynoh - on my other laptop classic doesn't work right, but i start up unity, it says ' you dont' have 3-d support', and then ti gvies me a nice desktop21:30
kirklandjjohansen: do you happen to have ppa kernel builds of your ecryptfs filename patches?21:30
hggdhjjohansen: thank you21:30
hallynjjohansen: and do you happen to have a git tree of your ecryptfs filename patches? :)21:30
hggdhsmoser: ^21:30
jjohansenkirkland: not a ppa, but I have debs21:31
jjohansenhallyn: yep git://kernel.ubuntu.com/jj/ubuntu-natty.git21:31
smoserdagummit jjohansen i was hoping you wouldn't do that so quickly21:31
jjohansenkirkland: I have to say I really hate kernel ppas and just use debs when I can21:32
jjohansenkirkland: I can set one up now that we are trying to get wider testing21:32
kirklandjjohansen: that's fine21:33
hallynjjohansen: thx, i'm noting that to take a look next week21:33
kirklandjjohansen: apw does something similar for me from time to time21:33
jjohansenkirkland: I was going to attach a link for the current .debs to the bug report21:34
RoAkSoAxkirkland: do you still have the image with eucalyptus?21:38
RoAkSoAxthe cloud in your pocket one21:39
binaryhatim using 10.10 and in order for network bridging to work, I have to add three parameters to /etc/sysctl.conf and do  sysctl -p /etc/sysctl.conf.  isnt there a better way?21:43
torrancewbinaryhat: not trying to sound like a grey-bearded sysadmin, but what's so wrong with that?21:45
binaryhatnothing except dmesg reports that xyz is deprecated torrancew21:47
torrancewah, didn't realize that, binaryhat21:49
binaryhatit happened again!  I had virtual connection to kvm running and my server shut off!21:50
binaryhat3rd time21:51
binaryhatwhy would it do that21:51
=== lirakis is now known as lirakis_afk
=== ogra is now known as Guest95972
kirklandRoAkSoAx: i think it's linked to from my blog22:19
RoAkSoAxkirkland: k cool thanks22:20
uvirtbotNew bug: #713917 in bind9 (main) "bind < 9.7.2 can return SERVFAIL for unsigned zones (dup-of: 651875)" [Undecided,New] https://launchpad.net/bugs/71391722:31
binaryhatit appears that when i use virtualization, my server turns itself off22:34
binaryhatplenty of memory, 8gb and 450w psu22:34
uvirtbotNew bug: #714239 in tomcat6 (main) "Tomcat6 version below 6.0.32 can be easily brought down" [Undecided,Fix released] https://launchpad.net/bugs/71423922:37
MACscri have a stalled kernel module that i cant seem to remove with rmmod because it says its still in use. Any recommendations short of rebooting?22:40
jmgallowayanyone know why ifup eth0 does not work?  I cant get eth0 working to have a connection to my server22:47
avishello all23:04
avisi am finally on comcast without a port 80 blocked.  i would like to run an apache webserver for private file sharing.  i had heard something about webdav and something about being able to share files over the web using a script, and i have such a script.  i just don't know if its functional.23:05
hggdhsmoser: is it possible to update the kernel on a Hardy ec2 image?23:05
aviscould someone look at this script and tell if it could be used as a dropbox replacement ?23:07
avishttp://pastebin.com/fFqUiF2V23:07
avisshare-http-here.sh23:07

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!