| Hellz_Bellz | !rtl8187b | 00:00 |
|---|---|---|
| smokesmoko | thank you guys for the help | 00:01 |
| nertil | :)) | 00:02 |
| nertil | there was no help bro | 00:02 |
| nertil | smokesmoko i want webmin to configure for ipv6 router | 00:02 |
| nertil | but i cant too | 00:02 |
| nertil | cause i use ubuntu server | 00:02 |
| Hellz_Bellz | im assuming that i can solve this problem the same as i did for wireless drivers on 10.04, that is using backports correct? | 00:02 |
| Hellz_Bellz | can someone point me to a .deb of any of the latest kernels for hardy? | 00:03 |
| qman__ | Hellz_Bellz, only if said driver exists, is compatible with the older kernel, and has been backported | 00:03 |
| qman__ | many drivers are not, I ran into that problem on a hardy server when I installed an intel gigabit NIC | 00:04 |
| qman__ | solution was upgrading to lucid | 00:05 |
| Hellz_Bellz | whats the newest ubuntu server version that uses grub1 | 00:05 |
| smokesmoko | nertil: anything is better than nothing, so I appreciate any reponse big or small | 00:05 |
| Hellz_Bellz | grub 2 is not an option on this machine | 00:05 |
| qman__ | Hellz_Bellz, if you upgrade, grub1 will continue to be used | 00:05 |
| qman__ | 9.10 onwards uses grub2 by default, but can still use grub1, and upgrades will continue using grub1 | 00:05 |
| Hellz_Bellz | well i cant get any NIC working so that isnt an option | 00:05 |
| Hellz_Bellz | wait | 00:06 |
| Hellz_Bellz | i have a cd of 9.10 can i upgrade from that? | 00:06 |
| qman__ | not directly | 00:06 |
| qman__ | you can only directly upgrade to 8.10 (unsupported) or 10.04 | 00:06 |
| Hellz_Bellz | im sorry its 10.04 | 00:06 |
| Hellz_Bellz | command plox | 00:06 |
| Hellz_Bellz | :D | 00:07 |
| Hellz_Bellz | qman__: may i have the command to update from /dev/cdrom ? | 00:07 |
| qman__ | https://help.ubuntu.com/community/LucidUpgrades | 00:07 |
| Hellz_Bellz | i knew downloading all those iso's was a good idea | 00:08 |
| Hellz_Bellz | im sorry that page says absolutley nothing about upgrading on a machine not connected to the internet | 00:11 |
| Hellz_Bellz | \and the iso is not able to be put on the hdd | 00:12 |
| lirakis | airtonix, perhaps its b/c i am listining for dhcp on a bridge interface | 00:18 |
| Hellz_Bellz | will .debs for the desktop 10.04 be functional on on the server edition because i have a LARGE dvd of my apt- archives for my laptop | 00:19 |
| Hellz_Bellz | okay lsusb shoews the driver is loaded but its still not giving the interface on iwconfig or ifconfig | 00:26 |
| qman__ | Hellz_Bellz, actually, it does tell you how to do it offline, under the "upgrading using alternate CD/DVD" section | 00:31 |
| Hellz_Bellz | well it also assumes you are using a desktop manager which server edition has not | 00:32 |
| Hellz_Bellz | ie it asks for a gui | 00:33 |
| qman__ | I was under the impression that it was a normal shell script, but oh well | 00:34 |
| qman__ | I would try adding a lucid CD to your repositories with apt-cdrom(?) and see if do-release-upgrade will work with that | 00:35 |
| qman__ | don't know if it would work though | 00:35 |
| Hellz_Bellz | ive already upgraded | 00:36 |
| Hellz_Bellz | atp-cdrom | 00:36 |
| Hellz_Bellz | then an upgrade | 00:36 |
| Hellz_Bellz | im downloading a 2.6.32-22 kernel to a usb now | 00:36 |
| Hellz_Bellz | iis replacing every instance of "hardy" with "lucid" in /etc/apt/sources.list a good or bad idea? | 01:47 |
| Hellz_Bellz | ive already updated and its not letting me install xorg saying it depends on x11-common though x11-common is already installed | 01:48 |
| twb | !hardy->lucid | 01:49 |
| twb | !upgrade | 01:49 |
| ubottu | For upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/desktop/get-ubuntu/upgrade | 01:49 |
| twb | Hellz_Bellz: there is a detailed upgrade procedure; you should follow it. | 01:49 |
| gagarine | hello | 01:50 |
| Hellz_Bellz | too late :D | 01:50 |
| Hellz_Bellz | hehehe lets see how this breaks :D | 01:51 |
| twb | Hellz_Bellz: then you can consider this a "learning experience" | 01:51 |
| twb | Like public whippings | 01:51 |
| gagarine | on a apache server folder. I need a writable folder for a PHP script. | 01:51 |
| gagarine | it's better to add the www-data user or group or both? | 01:51 |
| Hellz_Bellz | twb i updated my server distro from a cd because if you read up .... i didnt have access to the internet on this machine | 01:52 |
| twb | Hellz_Bellz: OK. | 01:52 |
| gagarine | I was thinking adding www-data user as howner for every things | 01:52 |
| gagarine | and admin group | 01:52 |
| Hellz_Bellz | im certain that a update and then an upgrade will suffice | 01:52 |
| twb | Hellz_Bellz: there are usually edge cases | 01:52 |
| Hellz_Bellz | gagarine: thats a bad idea | 01:52 |
| Hellz_Bellz | a REALLY bad idea | 01:52 |
| gagarine | Hellz_Bellz why? | 01:52 |
| Hellz_Bellz | like MONUMENTALLY BAD IDEA | 01:53 |
| twb | Hellz_Bellz: e.g. make sure you upgrade apt/aptitude first, then the kernel and udev and libc, then reboot, then everything else. | 01:53 |
| Hellz_Bellz | because then ANYONE on the internet can do admin things on your computer | 01:53 |
| Hellz_Bellz | IE the internet owns your compruter | 01:53 |
| gagarine | Hellz_Bellz I don't get how? | 01:53 |
| Hellz_Bellz | twb wont dpkg handle the order in which things need to be worked? | 01:53 |
| Hellz_Bellz | because www-data is the user the server runs under | 01:54 |
| Hellz_Bellz | the users on the internet are www-data | 01:54 |
| gagarine | I speak only about the htdocs folder | 01:54 |
| Hellz_Bellz | you are the admin | 01:54 |
| gagarine | "the users on the internet are www-data"? | 01:55 |
| Hellz_Bellz | if i got on your server via a webpage | 01:55 |
| Hellz_Bellz | i would be www-data | 01:55 |
| gagarine | apache process run as www-data that's doesn't mean you have any right on my computer... | 01:55 |
| Hellz_Bellz | ya i do | 01:55 |
| qman__ | all scripts and processes that apache runs, run as www-data | 01:56 |
| qman__ | and as such have all the permissions www-data is given on your system | 01:56 |
| qman__ | a badly written script is all it takes | 01:56 |
| qman__ | so, www-data's permission should be limited to the least needed | 01:56 |
| qman__ | and www-data should never be added to a group that is not carefully controlled | 01:56 |
| Hellz_Bellz | a simple eval function with a GET inside it | 01:56 |
| gagarine | qman__ Hellz_Bellz ok I get this point. But I was speaking about /var/www only | 01:56 |
| Hellz_Bellz | omfg you are toast | 01:57 |
| Hellz_Bellz | doesnt matter | 01:57 |
| Hellz_Bellz | then everyone on the internet has everything in that folder to play with | 01:57 |
| Hellz_Bellz | including things like passwords of other users | 01:57 |
| twb | Hellz_Bellz: yes, in general, but the point of upgrade documentation is that Bad Things can happen because of edge cases. | 01:57 |
| Hellz_Bellz | if they are stored there | 01:57 |
| gagarine | Hellz_Bellz ok but how you handle writing process? | 01:57 |
| gagarine | from apache... | 01:57 |
| gagarine | (throw PHP) | 01:58 |
| qman__ | chmod +w the particular file or folder you wish to allow | 01:58 |
| Hellz_Bellz | .htaccess | 01:58 |
| Hellz_Bellz | ya that too | 01:58 |
| twb | Hellz_Bellz: e.g. migrating hardy to lucid will change the default behaviour of recommendations. If you don't upgrade apt first, you'll miss out on that until after the upgrade | 01:58 |
| qman__ | and be very careful about what you put in it | 01:58 |
| Hellz_Bellz | okay upgrading apt first | 01:59 |
| gagarine | qman__ so is better to give +w to every one... than adding www-data user howned this specific folder and write only for the owner? | 01:59 |
| gagarine | ... I don't get it | 01:59 |
| qman__ | no | 01:59 |
| Hellz_Bellz | !google apache security | 01:59 |
| ubottu | I have no google command, use http://www.google.com/ | 01:59 |
| twb | Hellz_Bellz: but that's just an example from memory. I don't remember the whole hardy->lucid upgrade issue list | 01:59 |
| qman__ | www-data can own the folder | 01:59 |
| qman__ | you asked about adding www-data to another group | 02:00 |
| qman__ | which is a very bad idea | 02:00 |
| gagarine | qman__ ok | 02:00 |
| qman__ | www-data normally should own all the files in the web-served directory | 02:00 |
| gagarine | but changing the group of this folder to admin is also a bad idea? | 02:00 |
| Hellz_Bellz | gagarine: if this is a privvate testing server off the internet itrs okay to do whatever you want but make sure you learn proper securitty | 02:00 |
| gagarine | Hellz_Bellz is not private :) | 02:01 |
| Hellz_Bellz | if you put this server on the internet...make sure its a dedicated computer with no provate information | 02:01 |
| qman__ | well, it wouldn't cause any direct problems | 02:01 |
| Hellz_Bellz | NO private info AT ALL | 02:01 |
| twb | Hellz_Bellz: he's running PHP. He's screwed regardless. | 02:01 |
| Hellz_Bellz | lol | 02:01 |
| qman__ | but using the admin group to grant permission could lead to issues later, since it's normally used to allow sudo | 02:01 |
| twb | Even if there's no confidential data, it'll still be compromised enough to act as a zombie | 02:01 |
| Hellz_Bellz | ive got my www-data allowed to sudo without a pass | 02:02 |
| twb | qman__: er, %sudo is used for that | 02:02 |
| Hellz_Bellz | but i use web frontends ive written in ruby | 02:02 |
| gagarine | ok to resume I put www-data user ownen every thing | 02:02 |
| Hellz_Bellz | and ive got it locked down with iptables | 02:02 |
| gagarine | and witch group? | 02:02 |
| * twb sighs | 02:02 | |
| gagarine | www-data too? | 02:02 |
| * patdk-lap wonders how you can lock something down with iptables? | 02:02 | |
| qman__ | yes | 02:02 |
| patdk-lap | if one port is open, that is enough | 02:02 |
| Hellz_Bellz | allow only local host | 02:03 |
| twb | patdk-lap: presumably his crappy NIH'd webmin equivalent is listening on a high port | 02:03 |
| qman__ | if a particular user needs access to a file, you can change the owner to that user and leave the group www-data | 02:03 |
| qman__ | if multiple users need access, leave the owner www-data and create a group for those users | 02:03 |
| qman__ | and change the group-owner to that group | 02:03 |
| Hellz_Bellz | how can you NOT lock down traffic with iptables? | 02:03 |
| gagarine | qman__ Hellz_Bellz thank for your help | 02:03 |
| gagarine | lot | 02:03 |
| patdk-lap | normally iptables is used to make sure something isn't accidentally opened | 02:04 |
| patdk-lap | not to *lock down* | 02:04 |
| Hellz_Bellz | ive got it so only localhost can access anything | 02:04 |
| qman__ | iptables doesn't really have any bearing on what's contained in the packets | 02:04 |
| qman__ | just on what ports are open | 02:04 |
| Hellz_Bellz | it can inspect packets | 02:04 |
| gagarine | ah one last question... adding myself in www-data is not a good idea? Instead of creating a new group? | 02:04 |
| twb | Hellz_Bellz: pastebin your iptables-save -c output | 02:05 |
| gagarine | (please don't kill me) | 02:05 |
| Hellz_Bellz | lol im in windows atm | 02:05 |
| qman__ | you can, but it's not a good idea from an administration standpoint | 02:05 |
| qman__ | as it gets more difficult to track what users have what access | 02:05 |
| qman__ | if you're the only user it's fine | 02:05 |
| twb | If you care about that sort of thing you are better off rolling out an LSM MAC layer | 02:06 |
| gagarine | qman__ ok | 02:06 |
| twb | The basic posix dac layer isn't granular and expressive enough | 02:07 |
| Hellz_Bellz | http://www.symantec.com/connect/articles/iptables-linux-firewall-packet-string-matching-support | 02:07 |
| Hellz_Bellz | http://www.eeggs.com/items/37085.html | 02:07 |
| Hellz_Bellz | wait lol wrong one | 02:07 |
| gagarine | Someone have a website about LAMP security? | 02:07 |
| twb | Oh gods, that's horrible | 02:07 |
| gagarine | ... so I can learn... | 02:07 |
| gagarine | I find a lot with google of course... | 02:08 |
| gagarine | but also a lot of crap | 02:08 |
| twb | Don't deeply inspect every packet. | 02:08 |
| Hellz_Bellz | ummmmm | 02:08 |
| Hellz_Bellz | yeah ever heard of rule based inspection? | 02:08 |
| Hellz_Bellz | like..if it matches THEN inspect | 02:08 |
| Hellz_Bellz | and what if you have a freakin powerful computer? | 02:09 |
| patdk-lap | and that it doesn't scale | 02:09 |
| qman__ | just because you can, doesn't mean you should | 02:09 |
| patdk-lap | no matter what, it will cause latency | 02:09 |
| qman__ | good security comes in layers | 02:09 |
| Hellz_Bellz | wow... ever heard of having fun? | 02:09 |
| qman__ | you do the best you can at every level | 02:09 |
| twb | qman__: ahahaha, FPA "lawyers" | 02:09 |
| Hellz_Bellz | or maybe | 02:09 |
| Hellz_Bellz | learning | 02:09 |
| qman__ | relying on only one system to keep you from getting owned is always a bad idea | 02:10 |
| * patdk-lap imagines implementing mod_security into iptables rules | 02:10 | |
| twb | IMO having only one RPC (to wit: ssh, no dynamic web content) is a bloody good idea. | 02:10 |
| * patdk-lap also wonders about that, part of stuff would be in two or more packets, so you can't inspect anything useful anyways | 02:11 | |
| twb | I'm not a fan of nrpe either :-/ | 02:11 |
| twb | patdk-lap: how does mod_security work internally? I can't see any discussion on wikipedia or their site | 02:12 |
| patdk-lap | I'm not really sure, haven't really cared | 02:13 |
| patdk-lap | but the rules look like regex | 02:13 |
| twb | To prevent the “drop table” SQL injection attack with mod_security, add the following to your Apache configuration: SecFilter “drop[[:space:]]table” | 02:13 |
| twb | ..WTF? | 02:13 |
| twb | It's checking POST headers or something? | 02:13 |
| patdk-lap | it can check anything | 02:14 |
| patdk-lap | post/get/ anything | 02:14 |
| Kiall | lol .. it obv filters URLs and maybe post data for that regex, and discards the request if it matches | 02:14 |
| twb | I was assuming it was more like Venema's tcpwrappers, only per-"app" within the single 80 listener. | 02:14 |
| patdk-lap | na, it's an apache module | 02:14 |
| twb | Yes, obviously, otherwise it wouldn't be per-thingy | 02:14 |
| patdk-lap | I use it for one person, reverse proxy to *iis* | 02:14 |
| twb | patdk-lap: could you pastebin the .conf for that? I'm curious. | 02:15 |
| twb | I rolled out a reverse-proxy using apache last week, and I haven't locked it down much. | 02:15 |
| patdk-lap | nothing really special about it at all | 02:17 |
| Hellz_Bellz | btw.... it worked | 02:19 |
| Hellz_Bellz | just appt-get update && apt-get upgrade | 02:20 |
| Hellz_Bellz | no need to update apt | 02:20 |
| patdk-lap | twb: http://ubuntuserver.pastebin.com/ZpR6KDwV | 02:20 |
| Hellz_Bellz | *upgrade | 02:20 |
| patdk-lap | did have to make a few adjustments to the modsecurity rules, but you won't know that till you run your app though it some | 02:21 |
| twb | Interesting | 02:26 |
| twb | Why do you set nokeepalive, then turn it on further down? | 02:26 |
| patdk-lap | different config files | 02:29 |
| patdk-lap | global config is off | 02:29 |
| patdk-lap | per proxy site, turns it back on | 02:29 |
| twb | OK | 02:30 |
| patdk-lap | last 3 lines came out of the virtualhost section | 02:30 |
| patdk-lap | it has blocked a lot of crap | 02:31 |
| patdk-lap | most crap gets blocked for other things first also | 02:31 |
| twb | The ruleset looks pretty insane | 02:31 |
| patdk-lap | but I'm paranoid of things making it to iis :) | 02:31 |
| patdk-lap | ya, the ruleset is annoying | 02:32 |
| twb | If it were me I'd prefer to operate default-deny | 02:32 |
| patdk-lap | but atleast reading the log file and finding the correct rule that matched isn't too hard | 02:32 |
| twb | It seems to work mostly by listing every attack they could think of | 02:32 |
| patdk-lap | yep | 02:32 |
| patdk-lap | or any that have been attempted | 02:33 |
| patdk-lap | my problem is, I dunno the application behind this | 02:33 |
| patdk-lap | or how it changes :( | 02:33 |
| twb | I guess | 02:33 |
| Slyboots | Perhaps someone can help em out here, is there a better way to see all the network traffic going through my network connection | 03:41 |
| Slyboots | There are some .. weird connections going on if I run netstat -a but Im not really sure on what Im seeing | 03:42 |
| Slyboots | Like.. "beluga:44856 beluga:afs3-fileserver ESTABLISHED" shows up perhaps 40-50 times | 03:42 |
| Slyboots | wtf is that? | 03:42 |
| jmarsden | That is you talking to port 7000, so perhaps talking to an IRC server's SSL port. | 03:43 |
| Slyboots | .. I dont run a IRC server o.O | 03:43 |
| jmarsden | grep af3-fileserver /etc/services | 03:43 |
| Slyboots | Or this one "tcp 0 0 beluga:52944 8.15.246.57:https ESTABLISHED" | 03:44 |
| Slyboots | Is that outgoing.. incomming | 03:44 |
| jmarsden | You run something on port 7000, apparently | 03:44 |
| Slyboots | .. no o.O | 03:44 |
| Slyboots | And that grep command returns nothing | 03:44 |
| jmarsden | use sudo netstat -ntlp | grep :7000 to see what is listening on that port (beluga is your machine, right?) | 03:44 |
| Slyboots | Aye | 03:45 |
| jmarsden | grep afs3-fileserver /etc/services # my mistake, typo earlier | 03:45 |
| Slyboots | Ohh.. Privoxy | 03:45 |
| Slyboots | that peice of crap | 03:45 |
| jmarsden | if you really want to see the actual traffic, use tshark or tcpdump or ssldump ... | 03:45 |
| Slyboots | I just wish it was *clearer* on what its doing | 03:46 |
| Slyboots | so all that afs3-server is Privoxy? | 03:46 |
| jmarsden | Clearer? It says there is a TCP connection from beluga on port44856 to beluga on port afs3-fileserver which is in the ESTABLISHED state. How much clearer do you want it to be? | 03:47 |
| Slyboots | Why its doing that, where the connection orignated from.. wtf is afs3-fileserver | 03:47 |
| jmarsden | You define what ports are named what in your /etc/services file. That file defines port 7000 as being used by afs3-fileserver | 03:47 |
| jmarsden | Apaprently you picked port 7000 for privoxy yourself? And did not realize it was a well known port number for a different service. | 03:48 |
| Slyboots | Mmm | 03:49 |
| Slyboots | Well, is there anything else other than netstat -a? | 03:49 |
| jmarsden | Well, I already said there is sudo netstat -ntlp ... and there is also tshark, tcpdump and ssldump... you can also try ntop or jnettop or any number of other tools. It depends what info you are seeking. | 03:50 |
| jmarsden | if you have a workstation available to you, you can capture the traffic with tcpdump on the server, then move the capture file to your workstation and analyze it in detail using wireshark, if you need to do so. | 03:52 |
| Slyboots | Im more just intrested in keeping a eye on things, on occasion network performance will just die wihtout clear reason why, the router shows that Im transfering shitloads of data (enough to saturate the connection) | 03:53 |
| Slyboots | But cant figure out why | 03:53 |
| === cmagina-afk is now known as cmagina | ||
| jmarsden | Slyboots: to see what is using up bandwidth in real time, jnettop is probably a good starting point | 04:05 |
| Slyboots | Mm.. does seem handy | 04:05 |
| jmarsden | Slyboots: You could also use argus to record minimal data on all TCP connections and then look at its collected data using ra at a later time; kind of the opposite approach to jnettop. | 04:06 |
| * Slyboots nods "I'll try that, with luck cna find out wtf is going on" | 04:07 | |
| twb | Or just tcpdump -w/tmp/tmp.pcap | 04:07 |
| twb | Then analyse it later | 04:07 |
| twb | Is packages.u.c under heavy load or something? | 04:27 |
| danny_ | I installed ubuntu-server to a VM last night. byobu is reporting 51 errors. Can someone help me to find/correct said errors? These are crashing the system about every 4 hours | 04:35 |
| twb | danny_: pastebin them | 04:38 |
| danny_ | twb where are they though? I'm in the byobu channel as well trying to find what file that indicator is pointing to. | 04:39 |
| danny_ | Once I know where they are I can make them accessible. | 04:40 |
| danny_ | ls | 04:40 |
| danny_ | oops... wrong screen. | 04:40 |
| danny_ | twb would the syslog file be the most likely to show where the crashes are occurring? | 04:50 |
| echosystm | hi - how can i open port 80 for non-root ? | 04:50 |
| danny_ | okay... http://s3rv3rn3rd.cc.cz has the syslog. echosystm you mean open port80 for ufw? | 04:56 |
| danny_ | is there no shutdown command? shutdown just send the system into recovery mode. Is the only way to powerdown to hit the power? | 05:10 |
| EvilPhoenix | this should work: shutdown now | 05:11 |
| EvilPhoenix | as either root or sudo | 05:11 |
| gagarine | qman__ thanks for you help before I have my server up now :) and hopefully more secure. I documented every how my modification and will show that to an expert (that's not my job... I'm a programmer). | 05:11 |
| twb | EvilPhoenix: shutdown -h now | 05:11 |
| danny_ | that sent it into a reboot to recovery | 05:11 |
| danny_ | thanks twb | 05:12 |
| === oubiwann is now known as oubiwann_ | ||
| goddard | how do i update clamav automatically | 07:09 |
| onil | how to change an existing group to primary group | 07:11 |
| iiDesignsDSL | hey all | 07:22 |
| iiDesignsDSL | anyone around | 07:27 |
| jargon- | i'm trying to set up an ubuntu8.04 client to authenticate over ldap from a debian squeeze server. prior to that,the ubuntu8.04 client was cofigured to auth on an 8.04 server. what files do i look for to edit and have the 8.04 client auth on the debian server? | 08:06 |
| EvilPhoenix | !8.04 | 08:07 |
| ubottu | Ubuntu 8.04 LTS (Hardy Heron) was the eighth release of Ubuntu. Downloading: http://releases.ubuntu.com/8.04 - See !lts for more details. | 08:07 |
| EvilPhoenix | for a second i thought it was EOL | 08:07 |
| shauno | 5 years on lts, takes 8 to 13 | 08:15 |
| shauno | (5 years on base & server packages anyway) | 08:16 |
| Gnea | okay, so I installed ubuntu server on this system because I couldn't get ubuntu desktop to install properly. got most everything working, now I'm just trying to get X to work. sudo dpkg-reconfigure xserver-xorg doesn't work (10.04) and when I start gdm it tells me to configure or get bent, but it won't let me configure it will only let me get bent. why is this and why can't I just configure X properly like the docs say how to do? | 08:18 |
| EvilPhoenix | i take it you installed X? | 08:20 |
| Gnea | yeah, ubuntu-desktop itself is installed on there | 08:21 |
| Gnea | I can startx and get a desktop, but can't configure anything | 08:21 |
| Thirtysixway | !lts | 08:23 |
| ubottu | LTS means Long Term Support. LTS versions of Ubuntu will be supported for 3 years on the desktop, and 5 years on the server. The current LTS version of Ubuntu is !Lucid (Lucid Lynx 10.04) | 08:23 |
| Gnea | hopefully that wasn't for me... | 08:23 |
| Thirtysixway | :p nah. just wanted to poke ubottu | 08:24 |
| Gnea | :) | 08:25 |
| Gnea | init: dbus pre-start process (2318) terminated with status 1 | 08:26 |
| Gnea | dbus won't even start....ugh | 08:26 |
| Gnea | stupid upstart, why did this thing have to be used? | 08:31 |
| Gnea | ! | 08:33 |
| Gnea | EvilPhoenix: I discovered /var/lib/dbus/machine-id and filled it with what was in /var/lib/dbus/machine-id.J8fudisof, went to do a: service dbus start, and it started up! But now the screen is blank, there's a non-blinking underscore-style cursor on the upper-left of the screen, and the capslock and scrolllock keys are blinking | 08:34 |
| Gnea | totally hardlocked, can't even sysrq-b | 08:35 |
| lephisto | morgen | 08:35 |
| Gnea | according to this, it's been fixed, yet I don't see that being the case: https://bugs.launchpad.net/ubuntu/+source/dbus/+bug/526390 | 08:44 |
| uvirtbot | Launchpad bug 526390 in dbus "dbus pre-start fails" [Undecided,Fix released] | 08:44 |
| Gnea | I call schenannigans on that 'fix' | 08:45 |
| Gnea | okay, so I did a dbus-uuidgen > /var/lig/dbus/machine_id and then: service dbus start, the following was caught in syslog: http://paste.ubuntu.com/566880/ | 08:51 |
| Gnea | and then the kernel paniced | 08:51 |
| Gnea | got it to show a bunch of panic info the main screen, none of it's really easily parsed, but the last thing it said was: [ 812.0100005] [drm:drm_fb_helper_panic] *ERROR* panic occurred, switching back to text console | 08:52 |
| Gnea | after that point, the capslock and scrolllock keys are blinking again | 08:53 |
| Gnea | and yes, I meant: dbus-uuidgen > /var/lib/dbus/machine_id | 08:53 |
| Gnea | and now it's kernel panicing on startup | 08:54 |
| avis | is simplehttpserver a ubuntu package ? | 08:55 |
| Gnea | if I pass 'nomodeset' to the kernel, it does the same thing again, but without the blinking lights this time | 08:55 |
| Gnea | !info simplehttpserver | 08:55 |
| ubottu | Package simplehttpserver does not exist in maverick | 08:55 |
| Gnea | avis: I'm gonna say 'no' to that | 08:55 |
| avis | i have this nautilus script that i cannot make functional i gave up on irc and posted to ubuntuforums.org but no response | 08:56 |
| avis | http://ubuntuforums.org/showthread.php?t=1687261 | 08:57 |
| avis | it has to do with zenity and sharing over the web using nautilus scripts | 08:57 |
| Gnea | I'm trying to get dbus to behave | 08:57 |
| Gnea | avis: interesting, why not use dropbox then? | 08:58 |
| avis | i'm broke :) | 08:58 |
| phsi | Why does mountall depend on plymouth? | 08:58 |
| Gnea | dude, dropbox is free :p | 08:59 |
| avis | require space | 08:59 |
| Gnea | phsi: because there are retards within the ranks of the ubuntu devs? | 08:59 |
| Gnea | avis: gotcha, haven't done that sort of thing with nautilus before, but I'd like to check it out if I could get my system to work... | 09:00 |
| phsi | Earlier today I noticed that plymouth handles LUKS password input during boot | 09:00 |
| phsi | Jees, I thought this thing was supposed to display a splash screen | 09:00 |
| Gnea | plymouth is like, the bastard child of 10 generations of inbreeding | 09:00 |
| EvilPhoenix | lol...? | 09:00 |
| Gnea | plymouth is showing the splash screen here... and if I go nomodeset, it scales everything down, but dbus is still getting loaded....time to init | 09:01 |
| Gnea | okay, got the system back up | 09:04 |
| Gnea | but dbus is still teh broke | 09:04 |
| Gnea | why does everyone have to be asleep? it's only 3am on a monday morning :P | 09:07 |
| jpds | 'monday'. | 09:08 |
| Gnea | :) | 09:08 |
| twb | I'm asleep because I'm at work | 09:12 |
| phsi | 3am? BURN THE WITCH | 09:12 |
| jargon- | i have libnss-ldap installed but `dpkg-reconfigure libnss-ldap` returns nothing | 09:45 |
| twb | jargon-: what did you want it to do? | 09:45 |
| Gnea | jargon-: are you just trying to reconfigure ldap itself? | 09:46 |
| jargon- | twb: to let me reconfigure libnss-ldap? | 09:46 |
| twb | It's a .so file. You can't reconfigure it. | 09:46 |
| jargon- | Gnea: the 8.04 client authenticates on an 8.04 ldap server. i need it to auth to a debian squeeze one | 09:46 |
| Gnea | aah | 09:47 |
| twb | jargon-: then you need to edit /etc/ldap.conf and/or /etc/ldap/ldap.conf | 09:47 |
| twb | jargon-: if you have a binddn, the bindpw will be in /etc/ldap.secret. | 09:47 |
| jargon- | twb: ok trying that | 09:48 |
| twb | I don't know offhand which package configures this in its postinst, possible ldap-auth-client | 09:48 |
| Gnea | dbus just will not work right, no matter what I try... this is extremely frustrating. | 09:48 |
| twb | Gnea: that's because it's a crappy RPC protocol | 09:48 |
| Gnea | twb: yes, but I need it to get gdm to work | 09:49 |
| twb | gdm's kinda offtopic here. | 09:49 |
| Gnea | well, I'll show you what's really offtopic. | 09:49 |
| Gnea | see, I initially wanted to put ubuntu desktop on this system, but I couldn't get it or the alternative release to install | 09:50 |
| jargon- | twb: what about PAM? do i need to change anything there? | 09:50 |
| Gnea | but I got server to install like a champ | 09:50 |
| twb | jargon-: what release? | 09:50 |
| Gnea | then I ran into problems, turned out I needed a bios update - got it updated, so now I'm trying to turn this server install into a desktop install | 09:50 |
| twb | Gnea: just reinstall the desktop. | 09:50 |
| Gnea | twb: that would make sense, wouldn't it? | 09:51 |
| twb | Gnea: or "apt-get install ubuntu-desktop" and possibly change kernels, which should achieve the same thing. | 09:51 |
| jargon- | twb: libpam-ldap Version: 184-2ubuntu2 | 09:51 |
| twb | jargon-: i mean of ubuntu | 09:51 |
| jargon- | 8.04 | 09:51 |
| twb | Blargh | 09:51 |
| jargon- | 8.04.4 | 09:51 |
| jargon- | yeah | 09:51 |
| twb | IIRC you want auth-client-config -S or so to inspect the system, then if necessary -p lac_example to configure it | 09:52 |
| twb | the raw files are in /etc/pam.d/common-* and /etc/nsswitch.conf | 09:52 |
| jargon- | twb: ok | 09:53 |
| matteppi | Hi | 09:53 |
| Gnea | twb: there's already the linux-image-2.6.32-28-generic installed and currently running. the problem is with dbus. | 09:55 |
| Gnea | twb: I tried generating a /var/lib/dbus/machine-id but that caused the system to kernel panic | 09:55 |
| twb | Gnea: did you install ubuntu-desktop? | 09:55 |
| Gnea | twb: of course I did | 09:55 |
| jargon- | arrgh. i'd have to change to ldap config of the production fileserver too. can't do that,of course. damn | 09:56 |
| jargon- | might as well do something else until i get more hardware | 09:56 |
| matteppi | Can ubuntu desktop, login to a remote account? (instead of the local account) | 09:56 |
| jargon- | twb: thanks for your help | 09:57 |
| twb | Gnea: the pre-start script for dbus, as at 10.04, is mkdir -p /var/run/dbus; chown messagebus:messagebus /var/run/dbus; exec dbus-uuidgen --ensure | 09:57 |
| twb | Gnea: work out which command is failing. | 09:57 |
| twb | Gnea: then work out why. | 09:57 |
| Gnea | twb: been there, done that, those parts all work. | 09:57 |
| twb | matteppi: via XDMCP, yes. But that's probably not what you meant. | 09:57 |
| twb | Gnea: so what is the current error? | 09:57 |
| Gnea | twb: well, it's like I said, the kernel panics, I can't even sysrq-b out of it, I have to press the reset button on the case. | 09:59 |
| twb | Gnea: then fix that first. | 09:59 |
| Gnea | twb: you're just full of helpful hints, aren't you? | 09:59 |
| Gnea | twb: that's what I'm *trying* to fix, that's why I'm *asking* the question | 10:00 |
| twb | You said it broke after you created a file in /var/lib. Did you remove the file again? | 10:00 |
| Gnea | I had to, obviously | 10:00 |
| twb | And it's still panicing? | 10:00 |
| Gnea | no, I'm back to square one. | 10:00 |
| Gnea | dbus is not working. | 10:00 |
| twb | So you've worked out which of the three pre-start lines is failing? | 10:01 |
| Gnea | root@iacon:~# service dbus start | 10:01 |
| Gnea | start: Job failed to start | 10:02 |
| twb | That is not what I asked. | 10:02 |
| Gnea | Feb 14 04:01:48 iacon init: dbus pre-start process (4893) terminated with status 1 | 10:02 |
| Gnea | pretty sure I answered the question already... | 10:02 |
| twb | That is also not what I asked. | 10:02 |
| twb | 20:57 <Gnea> twb: been there, done that, those parts all work. | 10:02 |
| Gnea | precisely. | 10:02 |
| Gnea | now. | 10:02 |
| twb | Clearly that is a contradiction. | 10:02 |
| twb | If upstart says the pre-start script fails, and you say it doesn't, then one of you is wrong. | 10:03 |
| matteppi | i have a lab with 15 desktops, connected to a server. everything is working with windows, and i want to switch to ubuntu, both the server and the desktops. I need a lot of accounts, (one for each class, we are in a school), on the server. the desktops need to log in with the accounts. | 10:04 |
| twb | matteppi: so you simple need centralized authentication? | 10:04 |
| Gnea | twb: I'm not going to repeat myself: having the /var/lib/dbus/machine-id in place causes the system to panic, it halts, it does not work. thus, exec dbus-uuidgen --ensure is not going to work, that much was blatantly obvious. | 10:04 |
| twb | I give up. | 10:05 |
| Gnea | yes, you should | 10:05 |
| Gnea | because you obviously have little skill at helping people solve complex problems. | 10:05 |
| twb | Gnea: go read <http://linuxmafia.com/faq/Essays/smart-questions.html>, write a proper problem report, and either pastebin it or send it to launchpad. | 10:05 |
| matteppi | twb: yes.. | 10:05 |
| twb | Plonk. | 10:06 |
| Gnea | !coc | twb | 10:06 |
| ubottu | twb: The Ubuntu Code of Conduct is a community etiquette document to which we ask all Ubuntu users to adhere, and can be found at http://www.ubuntu.com/community/conduct/ . For information on how to electronically sign the CoC, see https://help.ubuntu.com/community/SigningCodeofConduct . | 10:06 |
| Gnea | twb: I signed mine, did you sign yours? | 10:06 |
| twb | matteppi: OK, then you probably want to look at NIS (old, insecure, but very easy), or LDAP (newer, more secure, but harder). | 10:08 |
| twb | matteppi: if you still need Windows machines to work, you might instead need to look at winbind and friends, but I advise you to avoid that. | 10:08 |
| Gnea | yup, looks like you did: https://launchpad.net/~twb | 10:08 |
| twb | matteppi: https://help.ubuntu.com/10.04/serverguide/C/network-authentication.html documents LDAP on the server side. The client side ought to be pretty trivial. | 10:10 |
| twb | matteppi: oh, alternatively, you might look into LTSP, which provides a more turn-key way to manage the whole network from the server side. It *will* require a 100mbps network and a grunty (say, pentium 4) machine, though. | 10:11 |
| Gnea | llutz: hi | 10:13 |
| matteppi | twb: with NIS, can i create accounts, and then access them from the desktop, without login into the local account? | 10:14 |
| llutz | Gnea: hi you made me courious ;) | 10:14 |
| Gnea | llutz: may I pm? | 10:14 |
| llutz | sure | 10:14 |
| twb | matteppi: yes | 10:18 |
| RoyK | matteppi: yes, but you might want to consider using ldap instaed | 10:45 |
| RoyK | since NIS is old and not very shiny | 10:45 |
| uvirtbot | New bug: #718664 in autofs5 (main) "upstart config fo file autofs5 requires space" [Undecided,New] https://launchpad.net/bugs/718664 | 11:16 |
| === FkCek is now known as FkCek|a | ||
| === oubiwann_ is now known as oubiwann | ||
| zul | Daviey: done | 13:51 |
| Slyboots | Uh.. | 13:53 |
| Slyboots | What the heck is "Stack Smashing" | 13:53 |
| RoyK | sounds like bad programming | 13:54 |
| RoyK | overflowing the stack, making it quite easy for an attacker to insert bad code | 13:55 |
| patdk-wk | oh? not someone getting pissed at the current network stack, and making their own? | 13:55 |
| Slyboots | Weird; jnettop crashed **Stack Smashing detected! Jnettop exited** | 13:57 |
| === oubiwann is now known as oubiwann_ | ||
| RoAkSoAx | morning all | 14:06 |
| zul | hey RoAkSoAx | 14:09 |
| RoAkSoAx | zul: heya! how's it going? | 14:09 |
| zul | RoAkSoAx: good tired though | 14:11 |
| RoAkSoAx | zul: likewise | 14:13 |
| TheInfinity | hi everyone ... i have a local server for some clients with windows xp (samba domain). we got a new printer here which makes some problems. cups->socket works, windows maschine -> socket, too. windows maschine -> samba -> cups -> socket makes this: http://i55.tinypic.com/5kf34h.jpg | 14:29 |
| TheInfinity | -> in log theres no error | 14:29 |
| TheInfinity | -> where to start debugging this? | 14:29 |
| patdk-wk | sounds like wrong print driver | 14:31 |
| TheInfinity | its a dell color laser 1320c | 14:31 |
| TheInfinity | wrong printer driver on samba -> cups side you mean? | 14:32 |
| patdk-wk | na, samba->cups is just raw I believe | 14:32 |
| patdk-wk | probably windows -> samba ->cups | 14:32 |
| zul | JamesPage: ping | 14:35 |
| JamesPage | zul: pong | 14:38 |
| zul | JamesPage: for your hudson-fixes branches are you sending the patch back to debian? | 14:39 |
| TheInfinity | patdk-wk: so you mean the problem is windows -> samba? | 14:39 |
| TheInfinity | patdk-wk: because cups test sites work excellent | 14:39 |
| JamesPage | zul: yep - as I raised each as a bug in LP I'm also submitting back to Debian. | 14:39 |
| zul | JamesPage: cool...ill upload them (patch pilot today) | 14:40 |
| JamesPage | zul: marvellous; I'll look to re-sync at the start of the next release cycle with manual requests. | 14:41 |
| patdk-wk | TheInfinity, it's been awhile, but I think your suppost to use the cups print driver in windows for that | 14:41 |
| patdk-wk | unless you attach the printer in raw mode in cups, then you can use the normal print driver in windows (I couldn't get this working though last time I tried) | 14:41 |
| patdk-wk | I have no attached printers anymore, all network based, so doesn't matter to me anymore | 14:42 |
| TheInfinity | patdk-wk: i want to share the printa via samba -> logon scripts, thats why i need samba :) | 14:42 |
| TheInfinity | patdk-wk: *printer | 14:42 |
| patdk-wk | you can do that without a samba based printer | 14:43 |
| JamesPage | zul: can you just let me check them over; I think some may have already gone to unstable in Debian | 14:43 |
| patdk-wk | but you do need to be able to access the printer via the network somehow | 14:43 |
| zul | JamesPage, | 14:43 |
| zul | JamesPage: sure | 14:43 |
| * JamesPage starts to look through his email | 14:43 | |
| TheInfinity | patdk-wk: yea, its a socket printer. direkt setup is impossible via scripts, you have to install windows packages, make sockets etc | 14:44 |
| patdk-wk | no idea what a socket printer is | 14:44 |
| TheInfinity | lpt | 14:45 |
| patdk-wk | lpt as in parallel port? | 14:45 |
| TheInfinity | uh. no. hum. damn translation. in cups its accessed by socket://, thats why i called it socket printer. | 14:46 |
| TheInfinity | it was LPD | 14:47 |
| JamesPage | zul: bug 715688 (joda-time) should go as is - we can't sync the latest from Debian as it uses maven to build which is not in main. | 14:48 |
| uvirtbot | Launchpad bug 715688 in openobject-client-web "[PS] web client : bank statement : import invoice doesn't work" [Low,Confirmed] https://launchpad.net/bugs/715688 | 14:48 |
| JamesPage | OK not that one. | 14:49 |
| JamesPage | zul: bug 715668 | 14:49 |
| uvirtbot | Launchpad bug 715668 in libjoda-time-java "Package does not install Maven artifacts" [Low,In progress] https://launchpad.net/bugs/715668 | 14:49 |
| zul | JamesPage: ok that was next on my list | 14:49 |
| TheInfinity | patdk-wk: thats why i want to use it via cups. lpd is not supported by windows (except you make lots of things in gui) | 14:49 |
| JamesPage | zul: bug 715640 and bug 715652 have already been accepted into Debian and uploaded to unstable. | 14:50 |
| uvirtbot | Launchpad bug 715640 in libezmorph-java "Package does not generate Maven artifacts" [Low,In progress] https://launchpad.net/bugs/715640 | 14:50 |
| uvirtbot | Launchpad bug 715652 in libcommons-jexl-java "Package does not install Maven artifacts" [Low,In progress] https://launchpad.net/bugs/715652 | 14:50 |
| JamesPage | zul: I'll take down the proposed merges | 14:50 |
| patdk-wk | TheInfinity, no idea, but this might help: http://pastebin.com/F5mqF5XJ | 14:51 |
| zul | JamesPage: thanks...less work for me ;) | 14:51 |
| JamesPage | zul: can I re-use these bugs to sync or should I generate new one? | 14:51 |
| zul | you should be able to re-use them | 14:51 |
| TheInfinity | patdk-wk: there are no cups *mime files here (ubuntu 10.04) | 14:53 |
| aliverius | i want to remove everything postgresql related and reinstall. how do i do that? | 14:53 |
| patdk-wk | TheInfinity, ya, dunno :) I haven't done it in a long time | 15:04 |
| TheInfinity | patdk-wk: hmm ,... okay. thanks for the use client driver = yes tip - lets see what i can do with this :) | 15:05 |
| Slyboots | has anyone had any luck getting things like FreeNX to run? | 15:05 |
| Slyboots | Need basicl OpenGL rendering working over VNC | 15:05 |
| Slyboots | I can get the "Session" to connect, but only xterm | 15:06 |
| patdk-wk | you do know that opengl won't work over vnc | 15:08 |
| patdk-wk | and freenx is not vnc | 15:08 |
| uvirtbot | New bug: #718787 in apr (main) "Please sync apr 1.4.2-7 from Debian Unstable." [Undecided,New] https://launchpad.net/bugs/718787 | 15:12 |
| zul | smoser: what do you think of https://bugs.launchpad.net/ubuntu/+source/ec2-api-tools/+bug/715818 ? | 15:17 |
| uvirtbot | Launchpad bug 715818 in ec2-api-tools "ec2-api-tools FTBFS in natty" [Undecided,New] | 15:17 |
| smoser | ummm... i think it FTBFS in natty ? | 15:18 |
| smoser | i need to fix it. i want to look at that today | 15:18 |
| smoser | just updated it | 15:18 |
| geekbri | is there any known issue at the moment with accessing the EBS backed ubuntu 10.04 images on EC2? | 15:18 |
| zul | smoser: cool beans | 15:28 |
| smoser | geekbri, accessing ? | 15:28 |
| geekbri | smoser: i was trying to create an EC2 ebs backed instance of 10.04 LTS on us-west-1, but for some reason i couldn't locate the proper ami, even though i was using the one listed on ubuntus page. I ended up just launching on in us-east and it works so whatever. | 15:29 |
| smoser | what ami were you trying to use ? | 15:30 |
| smoser | i'd like to know if somethings broken | 15:30 |
| geekbri | hold on let me get it. | 15:31 |
| geekbri | smoser: im starting to suspect i must have just done something wrong but i was trying to use ami-a403f7cd | 15:32 |
| geekbri | wait thats the instance store one. hold on | 15:32 |
| geekbri | ami-ebbfefae | 15:33 |
| geekbri | as listed on http://uec-images.ubuntu.com/releases/10.04/release/ | 15:33 |
| smoser | is it possible you did not specify region? | 15:35 |
| smoser | if you do not specify region it defaults to us-east-1, and the ami id 'ami-3e02f257' wont exist there. | 15:35 |
| geekbri | i used --region us-west-1 but let me try again to make sure there was no typo. | 15:35 |
| smoser | ec2-run-instances --region us-east-1 --instance-type t1.micro --user-data-file=/home/smoser/data/mini-userdata.txt ami-3e02f257 | 15:35 |
| smoser | i just ran that | 15:36 |
| geekbri | yeah it works for me now too... | 15:36 |
| smoser | oops | 15:36 |
| geekbri | i must have made some sort of typo. | 15:36 |
| smoser | ami-3e02f257 is us-east-1 | 15:36 |
| smoser | but.. .ok. good | 15:36 |
| smoser | glad you're sorted out. | 15:36 |
| geekbri | although now its telling me my keypair doesn't exist which is a bit odd. | 15:36 |
| geekbri | but thats a whole other issue :) | 15:36 |
| aliverius | i want to cleanly reinstall postgresql | 15:40 |
| aliverius | and ideas? | 15:40 |
| geekbri | Alan: not an expert but i think you need to use purge | 15:40 |
| geekbri | errr | 15:41 |
| geekbri | aliverius: apt-get --purge remove <name> | 15:41 |
| zul | JamesPage: is it possible to configure hudson to do iso testing for 10.04.2? | 15:48 |
| JamesPage | zul: maybe - do the cdimages get published somewhere nice? | 15:49 |
| zul | JamesPage: im thinking the same places as the regular iso, im just thinking outload really but ill find out more today | 15:49 |
| JamesPage | like here: http://cdimages.ubuntu.com/ubuntu-server/lucid/daily/current/ | 15:49 |
| zul | yeah | 15:49 |
| JamesPage | zul: lemme have a look - it might.... | 15:50 |
| JamesPage | zul: whilst I'm doing that any chance you can sponsor bug 715640 and bug 715652 for me | 15:56 |
| uvirtbot | Launchpad bug 715640 in libezmorph-java "Sync libezmorph-java 1.0.6-3 (main) from Debian unstable (main)" [Unknown,Fix released] https://launchpad.net/bugs/715640 | 15:56 |
| uvirtbot | Launchpad bug 715652 in libcommons-jexl-java "Sync libcommons-jexl-java 1.1-2 (main) from Debian unstable (main)" [Unknown,Fix released] https://launchpad.net/bugs/715652 | 15:56 |
| zul | JamesPage: sure | 15:56 |
| JamesPage | ta | 15:56 |
| RoAkSoAx | zul: ocf RA's fixes are to be released on wednesday ;) | 15:57 |
| zul | RoAkSoAx: nifty | 15:57 |
| zul | James: done | 16:03 |
| JamesPage | zul: ta | 16:12 |
| uvirtbot | New bug: #229646 in spamassassin "spamassassin chokes when using PostgreSQL as Bayes store" [Medium,Fix released] https://launchpad.net/bugs/229646 | 16:12 |
| uvirtbot | New bug: #257405 in spamassassin "cron.daily job results in "error: GPG validation failed!"" [Medium,Fix released] https://launchpad.net/bugs/257405 | 16:12 |
| HackeMate | hello | 16:14 |
| HackeMate | i have configured a webdav server but it wont enable the https | 16:14 |
| HackeMate | just http | 16:14 |
| HackeMate | http://pastebin.com/fLje9Dtf | 16:28 |
| HackeMate | it's the apache config file | 16:28 |
| HackeMate | i have created the certificate and it exists | 16:28 |
| HackeMate | i try to access the web and i receive an error like this: firefox cant establish a connection with the hostname | 16:29 |
| HackeMate | without 's' works | 16:29 |
| zul | hggdh: ping are you still using my SRUtracker? | 16:33 |
| hggdh | zul: I am _still_ to move it over to QA | 16:33 |
| zul | hggdh: ok because its broken right now i have to fix it...ill let you know when its working again | 16:34 |
| hggdh | zul: heh, no problems at all :-) | 16:34 |
| azizLIGHTS | how to check if lightttpd has user dirs enabled or not | 16:39 |
| llutz | check if mod_userdir is activated azizLIGHTS | 16:40 |
| azizLIGHTS | yes.. how to check this | 16:40 |
| llutz | azizLIGHTS: grep lighttpd.conf or mods_enabled | 16:40 |
| azizLIGHTS | how i can check if mod_userdir is enabled or not | 16:40 |
| azizLIGHTS | oh | 16:40 |
| azizLIGHTS | ty | 16:41 |
| llutz | conf-enabled | 16:41 |
| azizLIGHTS | this should be under server.modules ? | 16:43 |
| llutz | yes | 16:44 |
| llutz | azizLIGHTS: or "ls -l /etc/lighttpd/conf-enabled/10-userdir.conf" | 16:45 |
| azizLIGHTS | ls: cannot access /etc/lighttpd/conf-enabled/10-userdir.conf: No such file or directory | 16:46 |
| llutz | azizLIGHTS: so if its not enabled in lighttpd.conf, its not enabled at all | 16:47 |
| SpamapS | azizLIGHTS: you can't make a toast with water. | 16:47 |
| azizLIGHTS | oh so what precodure to take to enable userdirs | 16:48 |
| azizLIGHTS | *procedure | 16:48 |
| azizLIGHTS | stop lighttpd how? | 16:48 |
| llutz | ln -s /etc/lighttpd/conf-available/10-userdir.conf /etc/lighttpd/conf-enabled/ // service lighttpd restart | 16:48 |
| llutz | && not // | 16:48 |
| bobg | i am am writing a set of two packages that configures a machine to use our company ldap server for authentcation. package 1 uses debconf-set-selections in the preinst to set values for ldap-auth-config (including debconf/priority=critical). package 2 predepends on pkg 1 and depends on ldap-auth-config. The result is that ldap-auth-config still prompts me with its default values, but if I accept defaults, the /etc/ldap.conf file end up wi | 16:51 |
| bobg | th the values that I specified. So if I could just suppres the dbconf prompts it would be fine | 16:51 |
| JamesPage | hggdh, zul: http://hudson.qa.ubuntu-uk.org/job/lucid-server-amd64_lvm/1/console | 16:54 |
| JamesPage | this *should* run against the ISO image of your choice; just testing it now.... | 16:54 |
| JamesPage | bear in mind that we have never run the automated ISO test suite against lucid - only maverick + | 16:54 |
| zul | muhahaha | 16:54 |
| hallyn | kirkland: qemu-0.14.0 is built at ppa:serge-hallyn/virt, and running just fine on my workhorse laptop | 17:04 |
| kirkland | hallyn: i'll install that just as soon as I finish this email | 17:04 |
| hallyn | i'll need to ask bdrung to verify that capslock does what he wants there | 17:04 |
| hallyn | kirkland: cool, thanks | 17:05 |
| RoAkSoAx | hallyn: after last week's update of kvm the load is not that high anymore, though now couple of last week ISO's hanged during installation and that couse 100% CPU utilization | 17:08 |
| hallyn | RoAkSoAx: this is on natty? | 17:08 |
| hallyn | (host) | 17:08 |
| RoAkSoAx | hallyn: yes | 17:08 |
| hallyn | RoAkSoAx: you might just try out ppa:serge-hallyn/virt which has 0.14.0 | 17:09 |
| hallyn | RoAkSoAx: (which will be going into natty hopefully really soon) | 17:09 |
| RoAkSoAx | hallyn: ok! cool! ;) | 17:09 |
| uvirtbot | New bug: #718868 in beautifulsoup (main) "Sync beautifulsoup 3.2.0-1 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/718868 | 17:11 |
| JamesPage | zul, hggdh: well that seemed to work just fine! | 17:14 |
| hggdh | heh | 17:16 |
| hggdh | JamesPage: BTW -- did you get my message that the hudson server was hit by an OOM? | 17:16 |
| JamesPage | hggdh: yes - nearly missed it; it did that once before; not sure why but a reboot seems to sort it for a few months | 17:17 |
| JamesPage | not ideal.... | 17:17 |
| hggdh | but workable ;-) | 17:17 |
| JamesPage | agreed | 17:18 |
| hggdh | JamesPage: also there are some updates to be installed on the server. I did not run any because I was unsure on dependencies with Hudson | 17:18 |
| JamesPage | its pretty neutral so should be OK; however we may want to consider a switch to Jenkins at some point in time. | 17:18 |
| staale | anybody know who I can make www-data echo to /dev/ttyUSB0 ? I have added the group dialout, and it is working when I su www-data | 17:18 |
| JamesPage | hggdh: hmmm - may have just confused things as the changes I made to make the lucid regression ISO test work are not thread safe! | 17:19 |
| SpamapS | staale: when is it not working? | 17:19 |
| hggdh | uh-ho | 17:20 |
| staale | when I use system, exec, passthru from php | 17:20 |
| JamesPage | hggdh: may be OK.... | 17:20 |
| * hggdh crosses fingers and toes | 17:21 | |
| hggdh | JamesPage: BTW, I added a view for Lucid amd64 | 17:21 |
| JamesPage | hggdh: also need to bear in mind that the preseeds are for natty not lucid - they should work as I don't think anything has changed significantly. | 17:21 |
| JamesPage | nice | 17:21 |
| JamesPage | I think we need a design review and session at UDS to take this forwards; we need a nice way of maintaining preseeds on a per-release basis outside of the main iso-testing codebase. | 17:22 |
| SpamapS | staale: and what does happen? an error? silent failure? | 17:23 |
| hggdh | JamesPage: Agrred | 17:23 |
| hggdh | s/rre/ree/ | 17:23 |
| JamesPage | :-) | 17:23 |
| staale | @Spamaps apache log: /var/www/shs/test.sh: line 4: /dev/ttyUSB0: Permission denied | 17:24 |
| JamesPage | hggdh: I pushed a new branch of ubuntu-server-iso-testing to trunk | 17:25 |
| JamesPage | hggdh: it has a new script - setup-hudson-regression.py - which takes two params - the URL of the hudson server + the URL of the ISO to test. | 17:26 |
| JamesPage | hggdh: it will reconfigure if the test already exists. | 17:26 |
| hggdh | cool | 17:26 |
| Slyboots | Anyone acny suggestions for a decent file-manager for linux? (cli) | 17:26 |
| hggdh | *very* cool | 17:26 |
| JamesPage | hggdh: ./setup-hudson-regression.py --help will give you the other options - they need to match the details for the ISO url or it will break. | 17:28 |
| SpamapS | staale: interesting... maybe do a 'whoami' right before that and make sure you are who you think you are at that point in the script execution. | 17:28 |
| JamesPage | hggdh: fast not elegant today - may refine tommorow.... | 17:28 |
| hggdh | JamesPage: fast is good enough, elegance depends on time :-) | 17:28 |
| JamesPage | hggdh: agreed - we can always refactor when we have decided where to go with this project next. | 17:29 |
| hggdh | JamesPage: yes, even more given that this is growing without bounds | 17:29 |
| * RoAkSoAx batalling with OCFS2 again :( | 17:31 | |
| Slyboots | Right now Im using mc, but its kidna.. crap | 17:32 |
| staale | SpamapS: it says www-data for both bash /var/www/shs/test.sh in console and system("bash /var/www/shs/test.sh" ); in php | 17:35 |
| mtkorb | When I get to the login screen on Ubuntu Server 10.04, it's printing "MASQUERADE: lo ate my IP address" over and over. Anyone know what this means? | 17:36 |
| jmarsden | mtkorb: bug #117303 | 17:37 |
| uvirtbot | Launchpad bug 117303 in linux-source-2.6.20 "lo ate my ip address" [Undecided,Won't fix] https://launchpad.net/bugs/117303 | 17:37 |
| SpamapS | staale: thats very weird then! what are the perms on /dev/ttyUSB0 ? | 17:39 |
| staale | SpamapS: crw-rw---- 1 root dialout 188, 0 2011-02-14 18:39 /dev/ttyUSB0 | 17:40 |
| staale | SpamapS: tried with o+wrx, but nothing | 17:41 |
| zul | JamesPage: so how would I push an ISO to hudson | 17:43 |
| mtkorb | jmarsden: I don't have that script on my machine so the launchpad bug doesn't apply. | 17:47 |
| SpamapS | staale: ahh did you stop/start apache after adding www-data to dialout? | 17:53 |
| SpamapS | staale: group memberships aren't picked up until a user logs in, or is su'd to. | 17:53 |
| staale | Spamaps: nice, thank you very very much :D | 17:55 |
| SpamapS | staale: always a pleasure. | 18:01 |
| Roasted | anybody good with radius certificates? I think I have the server done but I'm a little stuck on the CA part.... | 18:05 |
| uvirtbot | New bug: #718902 in mysql-5.1 (main) "package mysql-server-5.1 5.1.54-1ubuntu4 failed to install/upgrade: подпроцесс установлен сценарий post-installation возвратил код ошибки 1" [Undecided,New] https://launchpad.net/bugs/718902 | 18:06 |
| Roasted | anybody good with radius certificates? I think I have the server done but I'm a little stuck on the CA part.... | 18:27 |
| hallyn | kirkland: feh, of course now lucid wont boot (vgabios i assume) | 18:36 |
| hallyn | kirkland: out for lunch, will be updating bioses later | 18:37 |
| Roasted | anybody good with radius certificates? I think I have the server done but I'm a little stuck on the CA part.... | 18:52 |
| SpamapS | Roasted: you should probably try another channel and/or a mailing list before you start re-asking a question every 30 minutes. | 18:55 |
| Roasted | tried another channel. free radius has literally 0 talk | 18:55 |
| Roasted | so, here I am. Thanks. :) | 18:55 |
| uvirtbot | New bug: #718188 in dovecot "dovecot won't be restarted after failure" [Low,Triaged] https://launchpad.net/bugs/718188 | 19:01 |
| smoser | jjohansen, are you around ? | 19:06 |
| jjohansen | yep | 19:06 |
| jjohansen | smoser: whats up? | 19:07 |
| smoser | you built a kernel for hardy | 19:07 |
| jjohansen | yeah | 19:07 |
| smoser | and pasted links, but i dont think there were any modules | 19:07 |
| jjohansen | oh, hrmm right I need to kick off that portion separately | 19:08 |
| jjohansen | give me a bit, I'll kick it off and let it build | 19:08 |
| ivoks | happy valentine :) i love you all | 19:11 |
| RoAkSoAx | lol | 19:11 |
| RoAkSoAx | ivoks: happy valentines to you too | 19:11 |
| RoAkSoAx | lol | 19:12 |
| zul | ivoks: no you dont :) | 19:13 |
| genii-around | Roasted: You might want to look at the README in /usr/share/doc/freeradius/examples/certs/ | 19:13 |
| ivoks | zul: but i do :) | 19:14 |
| Roasted | I pretty much have it memorized by now, genii-around | 19:14 |
| Roasted | but thanks for the idea. | 19:14 |
| zul | ivoks: fine...then fix dovecot ;) | 19:14 |
| ivoks | zul: what's wrong with it? | 19:15 |
| genii-around | Roasted: Does /etc/freeradius/eap.conf point to wherever you put the certificate? | 19:19 |
| zul_ | ivoks: dovecot-postfix messes with the configuration file when you update postfix. | 19:19 |
| Roasted | genii-around, I'm trying to generate the certificate first. | 19:20 |
| zul_ | ivoks: 717298 | 19:20 |
| Roasted | genii-around, all of the guides I found on freeradius, to put it bluntly... suck. And I found one that was a little more descriptive, so I was using this guide from ground up. But it won't take my command I'm trying to issue it | 19:20 |
| ivoks | bug 717298 | 19:20 |
| uvirtbot | Launchpad bug 717298 in dovecot "dovecot-postfix upgrade overrides main.cf" [Undecided,New] https://launchpad.net/bugs/717298 | 19:20 |
| === zul_ is now known as zul | ||
| smoser | jjohansen, could you just upload to a ppa ? | 19:21 |
| jjohansen | smoser: no | 19:21 |
| smoser | is that possible ? or do these have to be spun more manually | 19:21 |
| smoser | suck | 19:21 |
| ivoks | zul: well, yes, we could add a warning | 19:21 |
| genii-around | Roasted: If you are in that dir where the REAME is, all the files to make your cert are there. If you follow http://wiki.freeradius.org/Certificates those files are in /usr/share/doc/freeradius/examples/certs/ | 19:21 |
| ivoks | zul: but the point of the package is to override all settings | 19:21 |
| smoser | jjohansen, could you then please update what needs to be done at https://wiki.ubuntu.com/UEC/Images/Publishing ? | 19:22 |
| smoser | i know in the end we get it into ubuntu-on-ec2 ppa, but i'm not sure of how it gets there. | 19:22 |
| jjohansen | smoser: well yes it is possible but its going to a long time to get anything out of a ppa | 19:22 |
| smoser | well, in the end it needs to get to one | 19:22 |
| Roasted | genii-around, I'm doing this by command line. The command I am issuing (as per the guide) is not working. | 19:22 |
| jjohansen | smoser: hrmm, okay I'll talk to smb about it | 19:23 |
| genii-around | Roasted: You just need to issue: sudo make in that dir. Then you can either leave the certificate in there or move it somehwere else. Either way you need to then edit the eap.conf file to point to where it is. Then restart freeradius | 19:24 |
| Roasted | genii-around, hang on a second. what does sudo make do? I'm trying to generate a cert from ground up with a command through openssl. what would sudo make do for me? | 19:26 |
| genii-around | Roasted: You need to use sudo to execute the certicate-making script in /usr/share/doc/freeradius/examples/certs/ because regular user does not have write priveleges in that directory | 19:32 |
| genii-around | Roasted: From the freeradius wiki page I already referenced: "make" .. "And the new certificates will be generated. There is no need to run any special OpenSSL commands." | 19:38 |
| Roasted | genii-around, lol... so wait... are you telling me sudo make *IS* the cert making command? | 19:40 |
| genii-around | Roasted: Exactly | 19:40 |
| Roasted | What's the trick to it? Do I just have to be CD'd into that cert directory for sudo make to take on that usability? | 19:40 |
| Roasted | because when I think sudo make I don't think "oh hey it makes certificates" | 19:40 |
| genii-around | Roasted: There is a Makefile in that examples directory which creates your certificate when you issue the: sudo make | 19:41 |
| Roasted | genii-around, what the... you gotta be kidding me. if it's that easy I'm going to be so angry. | 19:42 |
| genii-around | Roasted: But since it will create it in the directory in which you issued the command, you then need to tell the main config file for your cert ( which is eap.conf ) where to now look for it | 19:42 |
| Roasted | genii-around, yeah, that just requires editing it with gedit or something and changing hte path though, right? | 19:43 |
| genii-around | Roasted: Yup | 19:45 |
| Roasted | genii-around, looks like I got an error | 19:46 |
| Roasted | genii-around, I can't paste from vmware but I'll retype best I can. | 19:46 |
| Roasted | writing new private key to 'server.key' .................. problems making certificate request. error (insert long code here) encoding routines:ASN1_mbstring_ncopy:string too long. Make: *** Error 1 | 19:47 |
| genii-around | Roasted: Check the clients.cnf file in the examples directory and make sure it has proper 2-letter countryName value (eg: the top-level domain name for your country), and that the value countryName_min is set to 2. then try the make again | 19:53 |
| Roasted | genii-around, client.cnf in examples or in the actual freeradius dir under /etc? | 19:54 |
| genii-around | Roasted: In examples. Since that is where the script is drawing the values from to make the certificate | 19:54 |
| ivoks | does anyone know why logrotate rotates postgre logs with 'copytruncate'? | 19:55 |
| Roasted | countryName just says "match" | 19:55 |
| Roasted | hmm... | 19:55 |
| uvirtbot | New bug: #251139 in apr (main) "backport apr 1.2.12 to Hardy" [Undecided,Won't fix] https://launchpad.net/bugs/251139 | 19:57 |
| ZacLnxNewb | Hello | 20:04 |
| ZacLnxNewb | I'm trying to install another hard drive, and I've been able to mount it | 20:04 |
| ZacLnxNewb | I editted Fstab but upon reboot I had some sort of error | 20:05 |
| ivoks | mistakes in fstab are dangerous | 20:05 |
| ZacLnxNewb | ivoks: I noticed. :D | 20:05 |
| hallyn | jdstrand: does tests/qemuxml2argvtest failing in libvirt ring a bell? | 20:06 |
| ZacLnxNewb | ivoks: I think the problem is that I put "ext3" for the type instead of "ntfs" | 20:06 |
| ivoks | :) | 20:06 |
| ivoks | then boot in recovery mode and fix it | 20:06 |
| ZacLnxNewb | ivoks: I was given conflicting results, one program said the drive was "ext3" and another "ntfs" | 20:07 |
| ZacLnxNewb | ivoks: Could you possibly help me through this process? | 20:07 |
| ivoks | if you didn't format it, i doubt it's ext3 | 20:07 |
| ivoks | sure, boot into recovery | 20:08 |
| jdstrand | hallyn: no. not at all. that sounds like a potential problem | 20:08 |
| ZacLnxNewb | I just did a fresh install >.> I'm experimenting with different configurations | 20:08 |
| hallyn | jdstrand: well, if i parse this right it's on test 'cpu-exact2', and this is on armel | 20:09 |
| Roasted | genii-around, is match an acceptable answer? | 20:09 |
| jdstrand | hmm | 20:09 |
| ivoks | you can boot into recovery by choosing that option in the boot loader | 20:09 |
| ivoks | aka grub | 20:09 |
| jdstrand | hallyn: istr something with armel, but not that | 20:10 |
| ZacLnxNewb | Choosing that option when booting with the CD ? | 20:10 |
| jdstrand | hallyn: makes me curious if the linaro qemu is being pulled in, but other than that, nothing springs to mind | 20:10 |
| hallyn | i wonder if that thing is actually testing the libvirt monitor | 20:10 |
| hallyn | oh | 20:10 |
| ivoks | ZacLnxNewb: no, from disk | 20:11 |
| genii-around | Roasted: No. CA for Canada, DE for Germany, AU for Australia and so on | 20:11 |
| hallyn | hm, no qemu on the system actually | 20:11 |
| ZacLnxNewb | ivoks: I don't get a boot menu when I boot | 20:11 |
| Roasted | still getting this darn error genii-around | 20:12 |
| hallyn | eh, when in doubt clean up and re-try build | 20:13 |
| ZacLnxNewb | ivoks: I only get a menu when I boot using the CD | 20:14 |
| ivoks | ZacLnxNewb: hold shift (ubuntu 10.04+) | 20:16 |
| ivoks | ZacLnxNewb: or Esc (ubuntu <10.04) | 20:16 |
| ZacLnxNewb | ah | 20:16 |
| ZacLnxNewb | ivoks: sudo blkid returns | 20:18 |
| ZacLnxNewb | ivoks: /dev/sdb1: UUID="b52edc28-264b-4869-9899-436197c5ea03" SEC_TYPE="ext2" TYPE="ext3" | 20:18 |
| ZacLnxNewb | ivoks: but I think the drive is NTFS | 20:18 |
| uvirtbot | New bug: #520977 in apr (main) "Requires non-existant libuuid.la" [Undecided,Fix released] https://launchpad.net/bugs/520977 | 20:18 |
| ivoks | just boot into the rescue and then you'll comment out your line | 20:18 |
| ivoks | then we will go from there | 20:18 |
| ZacLnxNewb | ivoks: I've already reinstalled freshly the system | 20:19 |
| ZacLnxNewb | ivoks: Nothing important lost. :p I'm just learning | 20:19 |
| ivoks | hahaha cause of the wrong line in fstab? | 20:19 |
| ivoks | i see you are switching from windows :) | 20:19 |
| ZacLnxNewb | ivoks: months ago. >.> | 20:19 |
| ZacLnxNewb | ivoks: I've been running a fairly secure server for quite sometime, I decided to reinstall and reconfigure stuff faster, cleaner, etc | 20:20 |
| ZacLnxNewb | ivoks: How can I reliably tell whether the drive is ext2 ext3 or ntfs? | 20:20 |
| ivoks | ext3 is ext2 + journaling | 20:21 |
| ivoks | every ext3 can be mounted as ext2 | 20:21 |
| ZacLnxNewb | Actually, I'm happy to format this drive, but I left it as ntfs because I thought it needed to be that for samba shares or something | 20:22 |
| ZacLnxNewb | ivoks: What file system would you suggest? | 20:22 |
| ivoks | ZacLnxNewb: for linux server? ext3 | 20:24 |
| ivoks | for bigger disks (1+ TB) xfs | 20:25 |
| ivoks | just because it fscks faster :D | 20:25 |
| ivoks | and mkfs is faster | 20:25 |
| samael6 | what is the recommended option in the ubuntu menu | 20:25 |
| jevidl | in the past at least, xfs was pretty sensitive to mishandling, ie improper dismounts in the case of a power outage, things like that. If there's no battery backup, it might be better to use ext3/4 | 20:26 |
| uvirtbot | New bug: #604753 in linaro-toolchain-misc "[eglibc] process shared mutex's fail on armel v7 (thumb)" [High,Confirmed] https://launchpad.net/bugs/604753 | 20:27 |
| njin | Hello to all, i've assigned this bug report to linux package, is it right ? https://bugs.launchpad.net/ubuntu/+source/linux/+bug/712382 | 20:28 |
| uvirtbot | Launchpad bug 712382 in linux "10.04 Software raid unbootable - HP Proliant G6 server - 2 X 500 GB drives / 2 X 250 GB are always fine - pretty major bug" [Undecided,New] | 20:28 |
| ZacLnxNewb | awesome, so formatting the drive to ext3 | 20:28 |
| ZacLnxNewb | next is adding the uuid to fstab. :D | 20:28 |
| ivoks | yes | 20:28 |
| ZacLnxNewb | do I just add this line? | 20:28 |
| ZacLnxNewb | uuid mountpoint type | 20:29 |
| ZacLnxNewb | is that enough to mount it? | 20:29 |
| ivoks | no, that's a broken line | 20:29 |
| ivoks | uuid mountpoint type options 0 0 | 20:29 |
| ivoks | options can be just 'defaults' for start | 20:30 |
| ZacLnxNewb | ah, hey | 20:30 |
| ivoks | 0 0 - don't break the boot if fs is broken | 20:30 |
| ZacLnxNewb | I appreciate the help | 20:30 |
| ZacLnxNewb | I'll be back in 20 minutes, need to pick up brother from school | 20:30 |
| ZacLnxNewb | Thanks | 20:30 |
| ivoks | np | 20:31 |
| === zul_ is now known as zul | ||
| samael6 | whats the best option in the menu | 20:34 |
| ivoks | menu? | 20:35 |
| pmatulis | samael6: please be more specific | 20:35 |
| samael6 | the installation menu when you start the process | 20:35 |
| ivoks | jevidl: that's past ;) | 20:35 |
| ivoks | 'Install'? :) | 20:35 |
| samael6 | how are you lost i just explained it very clearly | 20:36 |
| pmatulis | samael6: choose "Install Ubuntu" | 20:36 |
| samael6 | and then what i wanna know when i install the server | 20:37 |
| pmatulis | samael6: you want to know what? | 20:38 |
| samael6 | whats next in the installation | 20:38 |
| mdeslaur | ivoks: re: dovecot, please take a look at bug 715056 | 20:39 |
| uvirtbot | Launchpad bug 715056 in dovecot "invalid ssl-certificates in /etc/postfix/main.cf after security upgrade" [Undecided,Confirmed] https://launchpad.net/bugs/715056 | 20:39 |
| mdeslaur | ivoks: it's not supposed to overwrite settings on upgrade, but there's (IMHO) a bug in the postinst script | 20:40 |
| ivoks | hm | 20:40 |
| mdeslaur | zul: ^ that's the correct bug # | 20:40 |
| pmatulis | samael6: https://help.ubuntu.com/10.10/serverguide/C/installing-from-cd.html | 20:40 |
| ivoks | yes, configure always replaces certificate | 20:41 |
| jevidl | ivoks: sure. I haven't used it in a while, but I know that for a while it was a pretty big problem. I usually just go for ext4 anymore, though once btrfs is stable in linux that'll be my new favorite :) | 20:41 |
| ivoks | jevidl: it was a problem in 2.6.16-2.6.18 | 20:42 |
| ivoks | iirc | 20:42 |
| ivoks | if [ -z "$2" -o ! -e "$POSTFIX_BCKFILE" ]; then | 20:43 |
| ivoks | iirc, $2 is new version that's being installed | 20:43 |
| mdeslaur | ivoks: it will hit "-o ! -e "$POSTFIX_BCKFILE" 100% of the time | 20:44 |
| ivoks | ah, right | 20:45 |
| ivoks | my bad | 20:45 |
| ivoks | instead of move, we should cp with timestamp | 20:45 |
| mdeslaur | ivoks: yeah | 20:45 |
| ivoks | and then copy /etc/postfix/main.cf to $POSTFIX_BCKFILE | 20:46 |
| mdeslaur | zul: I'll let you and ivoks sort it out | 20:47 |
| ivoks | mdeslaur: thanks | 20:47 |
| mdeslaur | ivoks, zul: thanks! | 20:47 |
| ivoks | i'll have to look at the whole postinst | 20:47 |
| ivoks | Firefox should have notification "Too many tabs starting with 'Bug'" | 20:49 |
| samael6 | what about under the package tasks what are those options im confused | 20:50 |
| ivoks | what confuses you? | 20:51 |
| samael6 | look under package tasks | 20:51 |
| ivoks | i've done at least 200 server installs, but i don't know exactly what's written | 20:52 |
| ivoks | iirc, there are 'LAMP', 'openssh server' 'cups printing server', etc... | 20:52 |
| ivoks | DNS server, Mail server... etc | 20:53 |
| samael6 | for a social networking website what do i pick | 20:53 |
| ivoks | you know what LAMP is? | 20:53 |
| ivoks | many social websites run on LAMP | 20:54 |
| samael6 | what do the other options do | 20:54 |
| ivoks | if you don't know what mail, printing, dns and cloud are... well, then those don't mean anything | 20:55 |
| samael6 | oh ok | 20:56 |
| ZacLnxNewb | I know what lamp dns cloud, openssh, print cups and stuff are. :D | 20:57 |
| samael6 | is it ok that i install the pc without the server what would happen if i did | 20:59 |
| axisys | how do I fix cylinder overlap here http://pastebin.com/3xf8qiFB .. this is a fresh server install LTS | 21:01 |
| ivoks | axisys: sda1 is /boot? | 21:03 |
| axisys | ivoks: yes | 21:03 |
| ivoks | axisys: quick and easy; copy all from /boot to /root/boot_backup; umount /boot ; fdisk /dev/sda and delete sda1 ; create new sda1, mount it as /boot and copy data back | 21:04 |
| axisys | ivoks: ok | 21:05 |
| ZacLnxNewb | ivoks: here's the line I'm putting into fstab | 21:05 |
| ZacLnxNewb | ivoks: UUID=500fb029-28dd-4e3a-a7e1-55def6a8e930 /drive/ ext3 defaults 0 0 | 21:05 |
| ivoks | /drive | 21:05 |
| geekboxjockey | ive enabled apache2 rewrite to point to another page using a 301, i remove the settings, restarted the server and its still doing so | 21:06 |
| geekboxjockey | any ideas, is there some rewrite cache? | 21:06 |
| ivoks | there's no rewrite cache | 21:06 |
| ivoks | cache is in your browser | 21:06 |
| ivoks | test with w3m, it doesn't cache :) | 21:06 |
| ZacLnxNewb | rebooting | 21:07 |
| ZacLnxNewb | Success! | 21:08 |
| axisys | ivoks: did not quite work.. i recreate the /dev/sda1 using fdisk /dev/sda and mkfs.ext2 and blkid /dev/sda1 in fstab and copied the data back to /boot and mounted fine.. reboot takes me to grub rescue> | 21:14 |
| axisys | it is not in production | 21:14 |
| axisys | i can rebuild the system.. unless there is another option | 21:15 |
| axisys | boot from live cd and reinstall grub ? | 21:15 |
| ivoks | ah, update-grub was needed too | 21:16 |
| ivoks | you can boot install/live cd and choose rescue broken system | 21:17 |
| axisys | ivoks: anyway to bring it back from grub rescue> ? | 21:17 |
| ivoks | there is, but i'm not sure with grub2 | 21:17 |
| ivoks | let me see something | 21:18 |
| axisys | grub rescue> ls show (hd0) (hd0,2) (hd1) (hd1,1) (hd2) | 21:18 |
| axisys | i have three disks | 21:18 |
| axisys | sda, sdb and sdc | 21:18 |
| ivoks | insmod part_msdos | 21:18 |
| ivoks | insmod ext2 | 21:18 |
| ivoks | set root='(hd0,msdos1)' | 21:19 |
| ivoks | linux /vmlinuz-(hit TAB) root=/whatever/is/your/root ro | 21:19 |
| ivoks | initrd /initrd.img-(hit TAB) | 21:19 |
| axisys | hitting tab gives me nothing.. | 21:21 |
| ZacLnxNewb | ivoks: Do you know how I can make a shortcut to another directory | 21:21 |
| ZacLnxNewb | so that user's home directories have a folder they can go into that's actually a folder on the new drive? | 21:22 |
| axisys | /whatever/is/your/root <-- is it / or /dev/mapper/blah ? | 21:22 |
| ivoks | axisys: /dev/mapper/blah | 21:22 |
| axisys | ok.. i got that one.. but vmlinuz does not expand with tab | 21:23 |
| ivoks | ZacLnxNewb: of course (ln -s) | 21:23 |
| axisys | may be look into another LTS server | 21:23 |
| axisys | and pick up the vmlinuz from there | 21:23 |
| ivoks | axisys: doesn't expand? | 21:23 |
| axisys | ivoks: no | 21:23 |
| ivoks | are you sure you didn't add /boot? | 21:23 |
| ivoks | it's /vmlinuz-something not /boot/vmlinuz-something | 21:24 |
| axisys | yep... not /boot in there.. typing exactly you said | 21:24 |
| ivoks | try with /boot then :) | 21:24 |
| ivoks | maybe grub2 doesn't have autocompletion | 21:25 |
| axisys | ivoks: probably | 21:26 |
| RoyK | ivoks: iirc it has | 21:26 |
| ivoks | it has | 21:26 |
| ivoks | axisys: https://help.ubuntu.com/community/Grub2#Fallback%20mode | 21:27 |
| ivoks | ls (hd0,0)/* | 21:27 |
| ivoks | why isn't there hd0,1 in your ls output | 21:28 |
| axisys | i am trying with live cd now | 21:31 |
| kirkland | hallyn: okay, i'm just now getting to installing your qemu-kvm 0.14 package | 21:35 |
| kirkland | hallyn: which PPA is it in? | 21:36 |
| kirkland | hallyn: you have like 30 PPAs :-) | 21:36 |
| ZacLnxNewb | ivoks: zachary@ZACSERVER:/storage/home/zachary$ cd public -bash: cd: public: Too many levels of symbolic links | 21:37 |
| ivoks | ZacLnxNewb: what did you do? | 21:38 |
| ZacLnxNewb | I made a directory on the drive | 21:39 |
| ZacLnxNewb | home | 21:39 |
| ZacLnxNewb | and made two directories in that, public and zachary | 21:39 |
| ZacLnxNewb | I linked public into zachary | 21:39 |
| axisys | so just run grub-install /dev/sda1 (/boot) ? | 21:39 |
| axisys | ivoks: ^ | 21:39 |
| ivoks | axisys: no | 21:39 |
| ivoks | axisys: update-grub | 21:39 |
| ZacLnxNewb | and I linked zachary into /root/home | 21:39 |
| ZacLnxNewb | but trying cd public | 21:40 |
| ivoks | axisys: grub is already installed (on /dev/sda) | 21:40 |
| ZacLnxNewb | gave me that error | 21:40 |
| ivoks | what? :) | 21:40 |
| axisys | ivoks: done.. let me reboot | 21:40 |
| ivoks | axisys: check /boot/grub/grub.cfg first | 21:41 |
| axisys | ivoks: looks fine | 21:41 |
| ZacLnxNewb | ivoks: did you get what I said? | 21:41 |
| ivoks | ZacLnxNewb: not really but i see mistakes | 21:42 |
| ivoks | can you paste the commands you used on pastebin? | 21:42 |
| ZacLnxNewb | ivoks: I made a home directory on the drive with "zachary" and "public" in it, and linked public into zachary | 21:43 |
| ZacLnxNewb | ivoks: and then linked zachary to the home directory on the system drive | 21:43 |
| ivoks | commands please | 21:43 |
| ivoks | cause what you said makes no sense | 21:43 |
| ZacLnxNewb | k one moment | 21:43 |
| ZacLnxNewb | ivoks: I can't paste the commands | 21:44 |
| ZacLnxNewb | ivoks: I have the system drive, and the 2nd hard drive | 21:45 |
| ivoks | you mounted 2nd drive as /storage? | 21:45 |
| ZacLnxNewb | on the new second hard drive, I created a directory labeled "home" in which I created a "public" directory, and a "zachary" | 21:45 |
| ZacLnxNewb | ivoks: Yes | 21:45 |
| ivoks | that's bad practice, but ok | 21:45 |
| ivoks | so | 21:45 |
| ZacLnxNewb | ivoks: What's better practice? | 21:46 |
| ivoks | mkdir /storage/home | 21:46 |
| ivoks | mkdir /storage/home/public | 21:46 |
| ZacLnxNewb | yes | 21:46 |
| ivoks | mkdir /storage/home/zachary | 21:46 |
| ivoks | ok | 21:46 |
| RoyK | ivoks: mkdir -p :P | 21:46 |
| ivoks | what's next? | 21:46 |
| ZacLnxNewb | then ln -s /storage/home/public /storage/home/zachary | 21:46 |
| ivoks | wtf? :) | 21:46 |
| RoyK | ZacLnxNewb: mount -o bind is better | 21:47 |
| ivoks | what? why? what are you trying to do? | 21:47 |
| uvirtbot | New bug: #709944 in apr (main) "package libapr1 1.3.8-1build1 failed to install/upgrade: le paquet libapr1 est déjà installé et configuré" [Undecided,Invalid] https://launchpad.net/bugs/709944 | 21:47 |
| ZacLnxNewb | ivoks: basically have the home directories on the 2nd hard drive, and have a public directory that all the users can access | 21:47 |
| ivoks | then don't do that | 21:48 |
| ivoks | move your home to /media/storage (but mount the disk there first) | 21:48 |
| ivoks | change home path in /etc/passwd (command is vipw) | 21:48 |
| ivoks | and you are done | 21:48 |
| ivoks | as for public, just create /media/storage/public | 21:49 |
| ivoks | and chmod 1777 /media/storage/public | 21:49 |
| ivoks | that's it | 21:49 |
| ivoks | or mount second disk as /home | 21:50 |
| ivoks | :) | 21:50 |
| ivoks | axisys: is it working? | 21:51 |
| axisys | ivoks: nah.. its cool | 21:51 |
| ivoks | ? | 21:51 |
| axisys | ivoks: it is not in production.. i can just rebuild it | 21:51 |
| axisys | before I was getting grub rescue> .. not I get grub> | 21:52 |
| ivoks | :/ | 21:52 |
| ZacLnxNewb | ivoks: I personally want the disk to remain as storage | 21:52 |
| axisys | but sinc emy root is LVM .. grub does not recognize it | 21:52 |
| ivoks | grub2 is new to me too | 21:52 |
| ZacLnxNewb | ivoks: Why is it bad practice to do what I did though? | 21:52 |
| ivoks | axisys: but /boot is on ext3? | 21:52 |
| axisys | /boot is ext2 | 21:52 |
| ivoks | axisys: on /dev/sda1 | 21:52 |
| axisys | ivoks: yes | 21:52 |
| ivoks | then grub should see it | 21:53 |
| axisys | the tab completion works now.. but i cannot point to a lvm disk | 21:53 |
| ivoks | ZacLnxNewb: http://tldp.org/LDP/Linux-Filesystem-Hierarchy/html/index.html | 21:53 |
| axisys | ls from shows the lvms but it says unknown fs for root.. which is ext4 | 21:53 |
| ivoks | axisys: eh? you type in root=/dev/mapper/volumegroup-logicalvolume | 21:54 |
| axisys | ivoks: yes | 21:54 |
| ivoks | axisys: and initrd after that? | 21:54 |
| axisys | ivoks: no | 21:54 |
| ivoks | hehe | 21:54 |
| ivoks | lvm module is in initrd | 21:55 |
| hallyn | kirkland: ppa:serge-hallyn/virt | 21:55 |
| ivoks | 22:19 < ivoks> linux /vmlinuz-(hit TAB) root=/whatever/is/your/root ro | 21:55 |
| ivoks | 22:19 < ivoks> initrd /initrd.img-(hit TAB) | 21:55 |
| axisys | ivoks: oh ok.. let me try again.. | 21:55 |
| RoyK | hrmf... so, three full ZFS VDEVs, slow-as-fuck fileserver, replacing 21+1 2TB drives soon with 3TBs, adding some 2,5TB worth of SSDs for L2ARC, some quick SSDs for SLOG, this will take some time............... | 21:55 |
| ZacLnxNewb | ivoks: Well, I'm going to have it remain storage, I guess I'll just chnage the home directories to be on the storage | 21:55 |
| RoyK | zfs is fine, that's for sure, until the shit hits the fan | 21:56 |
| ivoks | ZacLnxNewb: ok | 21:56 |
| axisys | so run it like this? | 21:59 |
| axisys | insmod part_msdos | 21:59 |
| axisys | insmod ext2 | 21:59 |
| axisys | set root='(hd0,msdos1)' | 21:59 |
| axisys | but my root is lvm | 21:59 |
| ivoks | root in grub is not linux root | 22:00 |
| ivoks | it's the root where grub config is | 22:00 |
| axisys | ivoks: so I shoudl type set root=(hd0,1) instead | 22:00 |
| ivoks | yes | 22:00 |
| axisys | not set root='(hd0,msdos1)' | 22:00 |
| ivoks | in my grub.cfg it's msdos1 | 22:01 |
| axisys | oh ok | 22:01 |
| ivoks | why is that, i'm not sure | 22:01 |
| ivoks | probably cause insmod part_msdos | 22:01 |
| RoyK | msdos ftw! | 22:01 |
| RoyK | no memory protection, no fancy memory management... | 22:02 |
| axisys | everytime i install a ubuntu-server from a cd iso, I need to modify the installation with hit F6 and remove quiet and add console=ttyS0,9600n8 to finish the install from serial.. how do I modify that line and re-iso the image ? | 22:28 |
| axisys | my servers iloms have a way to install or boot from remote iso.. but usually the gui is slow when installing remotely.. i rather do it from cli .. | 22:30 |
| ivoks | i've done it only with pxe installer | 22:30 |
| axisys | ivoks: with pxe .. i have to have a dhcp on same network .. little difficult .. ilom -> cd iso works better.. | 22:31 |
| axisys | we have servers all over the country.. | 22:32 |
| axisys | all our servers have iloms | 22:32 |
| axisys | if i know which file has that command.. i could modify and re-iso it and give that a try | 22:32 |
| ivoks | axisys: on install cd there's isolinux dir | 22:32 |
| ivoks | in it there's text.cfg | 22:32 |
| axisys | cd /mnt/isolinux .. i am in there.. let me find the file | 22:33 |
| axisys | oh.. its in that dir | 22:34 |
| axisys | found the append line | 22:34 |
| ivoks | you could also modify isolinux.cfg so that default is text.cfg instead of vesamenu.c32 | 22:34 |
| axisys | thanks | 22:34 |
| axisys | ivoks: even better | 22:34 |
| ivoks | but test it with kvm or something | 22:34 |
| ivoks | i've never tried changing default | 22:34 |
| axisys | ivoks: yep.. | 22:34 |
| axisys | i guess i need to add a serial on top .. so even the menu shows up in serial.. instead of blindly hitting enter twice | 22:35 |
| axisys | let me find the syntax for that | 22:35 |
| axisys | i will test it in virtualbox .. so to make a iso .. just mkisofs .. correct ? | 22:36 |
| ivoks | https://help.ubuntu.com/community/InstallCDCustomization | 22:38 |
| ivoks | skip to Burning the CD | 22:38 |
| axisys | ivoks: thanks a lot :-) | 22:39 |
| axisys | nice.. i could make changes to the preseed too | 22:40 |
| axisys | creating all these LVMs take a while | 22:40 |
| axisys | i have to do the same for two other servers | 22:40 |
| ivoks | instead of serial, i like to start network console and just ssh into installer | 22:42 |
| axisys | ivoks: how? | 22:44 |
| axisys | ivoks: you mean with dhcp ? | 22:45 |
| axisys | or pxe rather ? | 22:45 |
| ivoks | no... | 22:46 |
| ivoks | you kickstart/preseed everything before partitioning | 22:46 |
| ivoks | and add anna/network-console to kernel line | 22:46 |
| ivoks | you have to preseed password | 22:46 |
| ivoks | https://help.ubuntu.com/community/Installation/NetworkConsole | 22:47 |
| ivoks | installer starts, sets the network, language, keyboard, hostname, all that | 22:48 |
| ivoks | and then starts sshd | 22:48 |
| axisys | wow! | 22:48 |
| axisys | let me check it out | 22:49 |
| ivoks | you can ssh to it | 22:51 |
| ivoks | and then get the console in the installer | 22:51 |
| ivoks | or just continue installation | 22:51 |
| uvirtbot | New bug: #719056 in sg3-utils (main) "Sync sg3-utils 1.30-1 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/719056 | 22:56 |
| kirkland | hallyn: using the qemu-kvm, qemu-common, seabios, and vgabios from your ppa: | 23:26 |
| kirkland | $ kvm -m 1024 -smp 2 -hda natty-server.img -vga std | 23:26 |
| kirkland | kvm: pci_add_option_rom: failed to find romfile "vgabios-stdvga.bin" | 23:26 |
| kirkland | hallyn: same for -vga vmware | 23:27 |
| kirkland | hallyn: -vga qxl dumps me to the qemu monitor, strangely | 23:28 |
| === Kiall is now known as Kiall|AFK | ||
| kirkland | hallyn: yeah, we just need to add a few more *.bin to debian/install: http://paste.ubuntu.com/567155/ | 23:44 |
| marks | Hey all, i am having some Apache issues, i can't access my site without the WWW, can anyone give me a hand at debugging this? | 23:56 |
| BigRedS | marks: you probably need a ServerAlias without the www | 23:57 |
| BigRedS | assuming you don't already have one | 23:57 |
| marks | BigRedS, how would i go about adding that? To HTTPD.conf? | 23:58 |
| jkg | my first guess would be /etc/apache2/sites-available/default | 23:59 |
| jkg | just under the line that says ServerName www.bigred'sdomainname, hopefully :-) | 23:59 |
| kirkland | RoAkSoAx: testdrive -u file.img is broken (again) | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
