[00:00] yeah, like RPD you need one to serve and one to connect [00:00] vino does that as well or not as featureful? [00:01] not sure, only really used RDP and VNc [00:08] dwatkins: okay, made a secure password using lower/caps/nums/special key combos [00:08] HazRPG: now make sure you don't forget it, just in case... [00:09] dwatkins: its my preferred password when sites/applications let me use it [00:09] I call is as my high-priority/secure password, so should be safe there [00:09] just a pain to type in at times :P [00:10] adduser for creating new users correct? [00:11] useradd, no? [00:11] no ? [00:11] ...and don't forget the -m [00:11] I guess it depends on the distro and year. [00:11] ubuntu 10.04 [00:11] hasn't adduser been in since 8.04? [00:13] hello [00:13] I'm trying to get natty to load up gdm login screen [00:13] it fails :( [00:14] i've always used useradd personally [00:15] I'm running an oveau driver [00:15] but the monitor is a big 24" one. [00:15] what card do you have, andylockran? [00:15] nvidia 7900GS [00:16] worked fine with maverick [00:16] shouldn't have upgraded so early :p [00:22] what kind of failure? black screen? Xorg crash? [00:23] dwatkins: how do I give the new user sudo/root access? [00:24] andylockran: Not 100% sure, but you may be afflicted by https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-nouveau/+bug/723012 [00:24] Ubuntu bug 723012 in xserver-xorg-video-nouveau (Ubuntu) "Xorg segfaults on nouveau" [Undecided,New] [00:24] * HazRPG finding the ubuntu manual a bit daunting [00:24] HazRPG: honestly, I dn't know the official method; I think there's a command, but I just edit the relevant file with visudo [00:24] That I can appreciate, HazRPG - understanding an entire OS can be a little daunting. I like to thing of it as little ants doing their jobs [00:24] that seems a likely candidate, andylockran [00:25] dwatkins: ^^ [00:25] yeah, I recall seeing something in the manuals about visudo [00:29] * HazRPG is somewhat lost [00:30] sorted it :) [00:30] I know how to lock out root, however it would be silly to do so if my new user doesn't have sudo access yet [00:30] Cepheus: thanks for your help [00:30] I upgraded to the latest today [00:30] and it looks kewl [00:30] andylockran: awesome. [00:31] it looks more than kewl [00:31] one strange thing is that text resolution in terminal looks weird. [00:31] kinda stretched, vertica [00:31] l [00:31] but screen res is correct [00:32] andylockran: got natty + nouveau working? [00:33] popey: yeah [00:33] how to turn off that damn autohide :p [00:34] do you know how to turn it off? [00:34] I use the proprietary NVIDIA driver; my card is a little too new for nouveau support [00:34] at least, at an acceptable standard [00:35] no, i dont andylockran [00:36] I'm amazed nouveau is good enough to run minecraft ;) [00:38] ah, the minecraft bug is spreading far and wide and fast. [00:38] oooh, pressing super gets the menu to display [00:51] I was after more info about xen so I went to there site only to find that they've had a serious hardware failure. Seeing as xen is about virtualisation and the ability to failover.... it's a bit ironic [01:01] That's tidy - googled for new version of my original wordpress theme [01:01] found a good 'un :) [01:01] http://zrmt.com/ Theme is Cordobo Green. [01:20] hmm, the group "admin" doesn't seem to exist [01:20] * HazRPG looking at /etc/group [01:20] adm does though [01:25] thats right [01:25] bah, bed! [01:26] 10043 andy 20 0 458m 158m 34m R 145 4.8 1:41.25 banshee-1 [01:26] wow [01:26] %CPU for banshee hitting 177 [01:28] ah ha! I think I get it now! :D [01:36] I personally prefer Rhythmbox to Banshee [01:36] mono is a bit of a hog... [01:36] everything is :/ [01:37] at least it is starting to feel that way ;) [01:37] the faster computers get, the less important optimisation is for devs [01:38] result: bloat [01:39] and then the need for even faster comps ;) [01:59] why is it that I hate documentation ... yet it is essentially what I'm doing now T_T [02:09] question about secure shell keys, I created one and linked it to my launchpad like a week ago... just wondering, I'm guessing I could make one for connecting to my vps... how would I limit access on my vps so that only my key is allowed access? And how would I use it to connect to it? [02:13] HazRPG: I'm guessing you have full access? [02:14] yeah [02:14] I just bought a vps for £15 a year [02:15] plan to host my blog onto it, and possibly running irssi over screen [02:15] just trying to lock it down though [02:17] so far, I've changed root password to a really really secure password (very obscure!), created a new user (that's me), created an admin group, made admin have some sudo access via visudo, and made my user a part of the admin group [02:18] also been poking through /etc/ssh/sshd_config [02:19] so far the only change I've done is "PermitRootLogin no" [02:19] and added "AllowUsers " [02:19] but I haven't saved that file yet though [02:19] I'd generate a ssh key instead of allowing passwords [02:19] that's a secure thing to do [02:20] you mean what I've done so far is a secure thing to do, or the ssh key thing? [02:20] limiting by ssh key is what I'd like to do [02:21] I've created one on my workstation (different from my launchpad one) [02:21] once you can confirm your SSH key works for login [02:21] but how do I use it [02:21] right [02:22] in your homedir [02:22] cd ~/.ssh [02:22] much appreciated in advance btw :) [02:22] copy id_rsa.pub (or the equivalent) in your homedir .ssh folder, into the remote .ssh dir - and renamed it to authorized_keys [02:22] this [02:22] or listen to Cepheus [02:22] sorry - that was a very quick explanation [02:23] don't forget to chmod it to 700 and make sure you are the owner [02:23] otherwise SSH will refuse to use it [02:23] * HazRPG opens up new terminal to confirm new user works [02:24] now, if you did all that, ssh -i /path/to/your/privatekey user@host [02:24] user is your username obv, and host is your host [02:25] if that works [02:26] right ok so .ssh doesn't exist in my home directory so I'm doing mkdir .ssh [02:26] okay. [02:27] chmod 700 .ssh [02:27] make sure you chmod it to 700 [02:27] correct? [02:27] yes [02:27] right [02:28] user@host being my current machine? [02:28] HazRPG: The machine you want to connect to via SSH with private key [02:28] and the user [02:30] I'm guessing id_rsa is my private key [02:30] it is indeed. [02:30] (opening it says private key, so assumption seems correct) [02:32] okay, it asked for password after doing that... but I'm logged in using ssh -I /path/to/privatekey user@host [02:33] little i. [02:33] yeah little i [02:33] its just auto-word correct automatically changes it to caps on pidgin [02:33] ah [02:34] just did ls -a on .ssh and there's nothing there - but I'm guessing it shouldn't? [02:34] no, it should appear on ls -a [02:34] hmm, maybe I chmod it wrong [02:34] hang on [02:35] right directory? [02:36] no I think I just typed in "chmod 700 .ssh" instead of "chmod 700 .ssh " [02:38] hmm, ls -ag shows this: [02:38] drwx------ 2 admin 4096 2011-02-24 02:26 .ssh [02:38] what's the name of the user, anyhow? [02:39] hazrpg [02:39] try chown -R hazrpg.hazrpg .ssh [02:39] or, sudo chown -R hazrpg.hazrpg .ssh [02:41] hmm, its still not showing up in .ssh [02:44] hmm [02:44] so .ssh is in /home/hazrpg? [02:44] and authorized_keys is in .ssh? [02:44] on my local machine? [02:45] on the remote machine [02:45] the one you're trying to ssh to [02:45] on the remote there's nothing in the .ssh folder [02:45] ah. you need to copy id_rsa.pub (or its contents) into the authorized_keys file there. [02:46] ah, is there a quicker way to do that rather than typing it all out? [02:46] never really used ssh to transfer files before [02:47] HazRPG: Sure. open id_rsa.pub in gedit, select all, copy. [02:47] heh seriously? [02:47] yup [02:47] then [02:48] echo *paste* > /home/hazrpg/.ssh/authorized_keys [02:48] should work [02:48] (over ssh) [02:48] don't type out *paste*, but right click > paste insteadd [02:49] guess I need to put "" in between that otherwise the spaces will just mess things up [02:49] heh, don't worry I knew that one ;) [02:49] yes [02:49] my bad! [02:50] ;) [02:50] right, done that [02:50] guess I should log back in again :) [02:50] chmod -R 700 ~/.ssh [02:51] then you should be able to log in with the command from before [02:53] should authorized_keys also be part of my group instead of admin btw? [02:54] I think it should be as long as you're the owner and permissions are 700 [02:54] I did chown on it just in case [02:54] right logging out and back in again [02:55] well ubuntu just asked for my ssh passphrase, so I'm guessing something went right that time :) [02:56] still no id_rsa in there though :( [02:57] don't worry about that. all you need is the authorized_keys in there. [02:57] ah ok === 84XAAABJE is now known as Seeker` [02:58] that login okay? [02:58] yeah it did [02:58] awesome. [02:58] now, the other bit that you wanted [02:59] * HazRPG writes this all down just in case I need to reference it in future [02:59] to disable passworded logins from SSH [02:59] well to only allow a person with an authorized ssh key yeah [03:00] (aka me) [03:00] sudo echo "PasswordAuthentication no" >> /etc/ssh/sshd_config [03:01] I'll use vim, since I always like to make sure I comment stuff [03:02] then sudo /etc/init.d/ssh restart [03:02] now, your server will only accept public key logins [03:03] public key logins? [03:03] logging in with your key. [03:04] yeah I got that [03:04] but does that mean anyone with the public key will be allowed? [03:04] (my public key I mean) [03:04] *meant private key. [03:04] hope so :P [03:04] so of course: [03:05] don't give away your public key [03:05] Hmm, would I still need "AllowUsers hazrpg" then? [03:05] since I added that in earlier [03:06] hang on, then why would launchpad add public keys if you couldn't give that one away [03:06] surely it's the private one you should never give away :P [03:06] Well, it works like this. [03:07] The Public key verifies your identity. anything wanting to verify your identity just needs your public key. [03:07] The private key IS your identity. Anyone that has it is you according to the public key. [03:08] and, keep the allowusers line. [03:09] I thought authentications could only happen if you had the private key [03:09] yeah I will do [03:10] (keep AllowUsers) [03:11] The public key is like a record of your thumbprint. [03:11] The private key is like your thumb itself. [03:11] People can know your thumbprint but they can't go round putting your thumbprint everywhere [03:12] so someone with the public key, can't gain access to my server unless they had the private key to go with it? [03:12] exactly so [03:12] so just make sure you don't lose your thumb =p [03:13] I've backed up both keys [03:13] you just had me concerned for a moment, since I have a public key on launchpad - when you said don't give it out, well I already have a public key out there on the net [03:14] no. the public key can be given to anyone. [03:14] *phew* [03:14] lol [03:14] thank you very very much dude, been a great help :) [03:14] no problem. Sorry that I faltered through this a bit =p [03:14] you shall be much credited on my blog when I write up my adventures with ubuntu server [03:15] its cool [03:15] <== still an ubuntu server trainee [03:15] learning stuff pretty quick though [03:16] found screen very useful when the internet was being choppy the other night [03:16] so glad that was one of few commands I learned early on [03:16] learning is the big hurdle with linux. once you learn, you are the master! [03:16] indeed! [03:17] I thought I knew a lot until I started messing with ubuntu server in a VM [03:17] was almost like everything else was small fry [03:18] thing I've noticed is, that control in linux is very easy and straight forward - you just need to know your commands/files & directories well [03:18] in windows, anyone can pretend to know anything because most of it is point-click [03:19] always funny to see sysadmins go nuts when they're point-clicks don't work and they can't work out what's wrong :P [03:19] yes. that is one of the beauties of GNU/Linux and other similar operating systems: everything can be done the same way. [03:19] their* [03:19] I think the only thing that varies in linux is the sudo command [03:19] I've found all the others seem to exist in pretty much all [03:19] GUI is nice and accessible. but you're limited to whatever the person who wrote the software wants you to see [03:20] thus the reason I'm trying to learn all this :) [03:20] got fed up of my home server not doing what I explicitly want it to [03:20] with the command line, you don't have to memorize menus or spend hours looking for options. [03:21] or worry that the GUI will change and you can't find it again :P [03:21] (updates, etc) [03:21] oh, the number of times this happens [03:21] especially microsoft [03:22] they love doing this. [03:22] tell me about it :/ [03:23] last service pack messed things up big time with my apache server and a few other things [03:23] See: Office, Windows, Visual Studio, Paint, MSN/Windows Live Messenger, Internet Explorer [03:23] it decided to reset a few environment variables and other stuff, and moved them around [03:23] they don't look the same for more than 5 minutes. [03:23] heh agreed [03:24] I must say, I'm starting to love the command line [03:24] I haven't updated yet. I dislike Microsoft's big updates. Especially when their operating systems bluescreen while doing them and render your system 100% inoperable [03:24] going from maybe using it a few times in a week [03:24] I've gone to using 5-7 at a time every day! [03:25] no matter what operating system, I can guarantee you I always have at least one terminal open =p [03:25] even on my phone! [03:25] oh I meant my windows server I have, it's a student licence I have on it [03:25] keep meaning to root my nexus :P [03:26] ah. I've got one but I've not used it. [03:26] put cm6 or something on it [03:26] nexus one? [03:26] :o why not? [03:26] I bought a hacker's phone ;) [03:26] do tell ;) [03:26] no, a Windows Server student license [03:27] yeah I got it from Uni last year [03:27] Nokia N900. Not particularly handsome or bulky in the spec department. [03:27] but it's raw linux. [03:27] essentially customised debian. [03:27] oh wow, I almost bought that phone too! [03:27] is it any good? [03:28] spread the joy, dish out the dirt! [03:28] It works okay as a phone, but it shines in the hacker department. [03:28] almost got that phone myself, since I've always preferred nokia's phones - plus the slide out keyboard seemed like a bonus too [03:29] Cepheus: how so? raw terminal access? [03:29] Everything is almost identical in structure to debian/ubuntu - command line is there with bash, your full array of tools, [03:29] Xorg and pulseaudio [03:29] wow [03:29] it's desktop linux adapted for the phone. [03:29] * HazRPG looks at his nexus... [03:30] see that was one thing that almost put me off it [03:30] well did put me off it [03:30] I wasn't sure if they'd pull of the fact that it had too many tools from the desktop side of things - was afraid it might end up being a sluggish machine to run [03:31] s/of/off* [03:31] the third party apps are not as extensive as android's at all though. but there are huge amounts of open source software ported. [03:31] It's not actually that slow, surprisingly. [03:32] I recall reading someone trying to port blender to it just for fun as proof of concept [03:32] when I read that, my jaw dropped and wished I'd got one instead of the nexus [03:32] hah. [03:33] if lwjgl supported OpenGL ES... well, it might possibly play Minecraft. [03:33] but [03:33] it doesn't [03:33] and it'd probably run very slowly on account of the limited memory and non-desktop processor [03:35] I thought it had something comparable to the atom on-board [03:35] I thought it was at least 1GHz [03:35] Cepheus: I have a G2 running android myself :D [03:36] oh wow, hey :) [03:36] nah, it's 528mhz qualcomm [03:36] in the n900 [03:36] nope. 600MHz Cortex A8 [03:36] I thought the n900 was 528? [03:36] overclocked maybe :P? [03:36] hehe [03:36] give it some more juice! [03:36] HazRPG: my G2 has an 800Mhz processor in it, I've overclocked it to 1.8ghz [03:37] nice xD [03:38] says here that the default max frequency is 600MHz [03:38] I've gone up to 1.1GHz [03:39] hmm, apparently my vps doesn't have man installed :S [03:39] I wish android was more like maemo, it's a shame maemo died. [03:39] yeah [03:39] it died of windows phone 7 [03:39] xD [03:39] windows mobile 7 is just a joke [03:39] I think the problem is google is so big that people trust them blindly [03:39] Microsoft is way too late to the party to make much of a difference [03:40] The biggest problems with maemo are the 3 largest overheads [03:40] Xorg, Pulseaudio, and Gecko. [03:40] heh did you hear about microsoft wanting geohotz to jailbreak the windows 7 [03:40] for their phone [03:40] powerful? yes. also a bit large. [03:41] HazRPG: seems completely stupid lol [03:41] Cepheus: you could say that, but if they'd packed it into some slightly better hardware then you wouldn't be saying that :P [03:41] I would have thought that they would have chosen WebKit over Gecko, really. [03:41] HazRPG: It was a for-market prototype, really [03:41] I've heard people saying they put android on the ol' n900 [03:42] seems like such a waste to place it on such a device :( [03:42] they have. It doesn't work quite right yet. [03:42] I want Intel to hurry up and get MeeGo to a usable state... maybe that'll work out [03:42] however I guess with android being on it, you do get to have a lil more leg room as far as resources go [03:43] but I didn't like that direction completely either [03:43] right I really really need to write down the stuff you showed me earlier before I forget [03:43] hah [03:43] back in a bit [03:44] well, the only thing I reall didn't like about MeeGo was the choice to use RPM over dpkg [03:44] best way to learn is to do, and then write it in your own words - it sticks better then :) [03:44] oh yes. [03:44] I really wish rpm would die :/ [04:01] hmm something doesn't seem right here [04:03] /etc/group shows this "admin:x:1001:" [04:03] or does the number not really matter? [04:03] also, shouldn't my user be added on at the end? [04:04] :q! [04:04] oops [04:38] Cepheus: btw, thank you for the help earlier :) [04:45] no problem. [05:58] btw, MeeGo development is still ongoing and even the amount of commits Nokians do to it hasn't fallen [06:00] it's way too early to call MeeGo dead [06:00] "dying" then [06:00] ? [06:01] I'd say "struggling" until the full commitment of Nokia works out [06:01] "on life support" [06:02] but it has been struggling since day one with Android being so strong [06:02] in theory it's on a strong basis in comparison to Android, which in many ways is a closed box [06:02] but... [06:02] theory doesn't work like that [06:05] but then again, feel free not to join my fragile optimism, it is a bit mandatory for me but I can fully understand why others don't feel the same :-/ === ax_ is now known as asgw [06:55] morning gues [06:55] guys* [06:55] and gals* [06:56] hmm... what does the red "42!" mean in byobu [07:09] morning [07:09] HazRPG: 42 updates available to apply with apt-get upgrade [07:09] AlanBell: ah, awesome :) [07:10] AlanBell: muchas gracias :) [07:11] would explain why I couldn't find any results for it in google [07:11] my first thought was "wow, meaning of life, the universe and everything" [07:13] Morning.. [07:13] morning [07:14] Looks like we're all watching the Meego news... [07:14] :P [07:15] I was a little concerned about why it was a half'n'half blend of Debian and Red Hat... would that have described it accurately? [07:16] hmm, latest apache2 seems to be very different from what I'm use to (config-wise) [07:16] they've moved all the files around [07:16] So a bit like GRUB2 was to GRUB? [07:16] Not that I would know - preinstall user here... [07:17] alexcockell: nah, I use apache2 on my existing server, but I only patched it up every so often [07:17] the whole config was pretty much one file though [07:18] now it seems to be at least 4 [07:18] that I can see [07:18] I like it the idea, means stuff is only placed where it needs to be... but still learning where stuff is meant to go [07:21] morning [08:12] Morning all [08:30] half tempted to go back to bed already [08:40] morning [08:40] shauno: Looking at the weather forecast, today is supposed to be quite good, if you go back to bed, you might miss this years summer [08:40] heh, after securing my vps up and doing a bit of config [08:41] under "Technical Info" it says "Server Status: SSH login failed" [08:41] that's on the website for my vps [08:41] I wonder if that's because of the way I've set it up [08:44] I've set it to only allow ssh key logins, and restricted root access, and only one user is allowed to login (me) [08:44] that's pretty rock solid surely... [08:44] unless I've got neighbours already trying to access my server [08:56] hi folks [08:56] I think I should give ubuntu server a rest for a little bit [08:56] let some of the stuff I've done so far sink in lol [08:58] I think I've wrote about ~200 lines of stuff so far of things I've learned! [09:06] HazRPG: that's pretty good! But, yeah, you can overdo the experimenting! :) [09:06] its why I'm documenting everything I do in my own words :) [09:07] that way its sticking in my mind better [09:07] plus it means I have something to reference that I'll be able to understand at a glance [09:08]