=== jj-afk is now known as jjohansen [00:38] Hello Everyone please look at this thread and help me out: http://ubuntuforums.org/showthread.php?p=10542465#post10542465 [00:52] kim0: packages built in ppa [00:53] * hallyn out [00:54] rnigam: I just ran your vmbuilder command on my machine...it worked with no problems....it looks like it is isolated to maverick. [00:55] I would suggest putting the debug level really high for libvirt or using lucid. [00:55] I can't find anything on the web that has that same error. [01:00] tthanks thesheff17 [01:03] thesheff17: could you do a virsh --version on your machine and tell me which version of virsh and libvirtd is running [01:03] rnigam: I built maverick w/ lucid as the underlying os....so strange that doesn't work for you on 10.10 my version is: 0.7.5 [01:06] thsheff17: I see. how can i change the debug level? and how will that help? [01:07] rnigam: first check out /var/log/libvirt/qemu/vmName.log and see if there is anything else in there that will give you more info about virsh start not working [01:08] rnigam: /etc/libvirt/libvirtd.conf contains the log level stuff. [01:09] rnigam: I'm just shocked that no one else has that error...usually google gives me the answer pretty quickly...maybe the debug level will give you/us more insight into what is wrong. [01:14] thesheff17: qemu: could not open disk image /root/vmimages/mav-vm2/ubuntu-kvm/tmpBYvUD4.qcow2: Permission denied [01:15] this is from the logs [01:15] rnigam: can you paste your xml [01:15] pastebin the xml from /etc/libvirt/qemu/vmName.xml [01:20] rnigam: are you using an SELinux kernel?...just looking on google for some fixes.. what does ls -la /root/vmimages/mav-vm2/ubuntu-kvm/tmpBYvUD4.qcow2 say...is that file even there? [01:21] thesheff17: heres the xml : http://paste.ubuntu.com/578124/ [01:23] rnigam: looks good.... you are using virsh start as root correct? [01:23] yup [01:24] and yes thatmfile is present there. [01:25] actually that file gets created when i run the vmbuilder command [01:25] the qcow2 disk file [01:25] rnigam: right I just wanted to make sure it is getting created correctly...my permissions on my files is -rw-r--r-- 1 root root 1238958080 2011-03-05 13:30 /mnt/vm/vm021/ubuntu-kvm/tmpqyXQXh.qcow2 [01:26] does yours match that? [01:28] -rw-r--r-- 1 root root 627376128 2011-03-09 14:20 tmpBYvUD4.qcow2 [01:29] /etc/libvirt/qemu.conf contains username to run the service as...can you check that this is root. [01:31] you mean the userid variable? [01:32] I have user = "root" and group = "root" [01:32] everything in that file is commented out and hence default values are being used. I am not sure what defaults are. LEt me make those changes in mine and try again ! it might take some time to get back. [01:33] are there any other flags in that file turned on for you? [01:33] rnigam: yea yours might be a little...since mine in lucid. [01:33] different [01:33] other than user and group? [01:34] rnigam: that is the only thing that isn't commented out in that file...you aren't running SELinux kernel are you? [01:35] nope [01:35] no se linux [01:37] rnigam: ok...not sure what it could be...permission denied should not happen if you running it as root. [01:37] rnigam: to just test try just doing chown 777 filename and see if it will start. [01:38] ya i am recreating a vm again to check if anything changes after changing those options ! [01:43] thesheff17: In case i forget, thanks so much for all the help. [01:44] rnigam: np....I know how hard it is to find help for virsh/kvm sometimes. [01:44] rnigam: not that I have helped much :) [02:00] thesheff17- Great news.. you helped me enough [02:00] it works [02:01] turns out those two variables needed to be set in /etc/libvirt/qemu.conf [02:01] rnigam: excellent [02:02] rnigam: I'm on vacation next week but if that is the default problem you/I should file a bug for it. [02:02] man... I thought this was the easiest part. Yes we must file a bug [02:03] theres another bug that we need to file... or rather a request for a patch [02:04] when we undefine an image... it doesnt remove the qcow2 files and doesnt free other resources. [02:04] it would be great if we can achieve that with undefine rather than doing manually ! [02:05] thesheff17: what do you think about the request? please comment ! [02:12] rnigam: I would love that as well [02:12] rnigam: my python script does it for me...basically just have a huge wrapper around vmbuilder & virsh. [02:13] ya [02:27] smoser hallyn: the lxcguest scripts work perfectly on the uec images === fisted_ is now known as fisted [03:44] could anybody help me a with postfix issue? [03:50] i'm having issues send email to a particular domain where it always times outs when there is an attachment [03:57] somebody know how to upgrade samba in ubuntu? i tried with apt-get upgrade samba but is doesn work [04:01] Roxyhart0: define "upgrade" because the repositories are not always cutting-edge up to date [04:02] i have samba 3.4.5 and I want to upgrade to 3.5.x [04:02] as I am having problems with windows 7 clients and aparently samba 3.5.x solve it [04:03] which version of ubuntu server? [04:03] 10.04? 10.10? [04:03] OLDER? [04:03] not 9.10 [04:04] didnt say 9.10 [04:04] i said 10.10 [04:04] but i read the version 10.04 still come with samba 3.4.5 [04:04] 10.04 has samba 3.4.7 on it from what I can tell [04:04] lemme check my 10.10 system [04:05] 10.10 has samba 3.5.4 on it [04:05] is upgrading your distribution an option? [04:06] maybe, but is could be risky as I am running file server here... [04:07] also I am not sure if 10.10 has so much bugs? [04:08] I cant vouch for it as i stick with LTS releases (and never use samba) [04:08] although FYI, you should always keep backups even when you arent upgrading your system [04:08] I guess samba isn't in backports? [04:09] patdk-lap: didnt see it in there [04:10] and out of curiosity... patdk-lap, do you support the use of backports updates in a production system? [04:10] s/system/environment/ [04:10] roxyart0, you do know you have like only a month left before 9.10 is dead? [04:10] oh that too [04:10] EvilPhoenix, depends [04:10] some things yes, most things no [04:11] but for something like that, I would just download samba from backports and install [04:11] Roxyhart0: you should probably consider upgrading anyways, what're you using right now, 9.10? you should definitely upgrade the distro (MAKE BACKUPS FIRST) because its going to die very soon (end of life) [04:12] yes i need to do...but what is the version supported, is not 10.04? [04:12] 10.04 will be supported for 4more years [04:12] the version that has 3.5.x samba is 10.10 [04:12] 10.10 will be for another year [04:12] its also supported (and recent, as well as stable from what I can tell) [04:13] most of my samba servers are 10.04 [04:13] well I will try to update at least to 10.04 [04:13] one is still 8.04 [04:13] Roxyhart0: FYI, 3.4.7 is whats in the 10.04 repositories [04:13] but i know there are someway to install samba 3.5.x in 10.04 ...but i dont know the procedure [04:13] Roxyhart0: to get 3.5.x, you'll need 10.10, as I dont see 3.5.x in the repos (including backports) [04:13] what about 3.4 doesn't support win7? [04:13] Roxyhart0: possibly compiling from SOURCE [04:13] which is a pita [04:13] I haven't had any issues with windows 7 and my samba's [04:14] i didn time ago samba 3.4.5 for ubuntu 9.04 [04:14] Roxyhart0: but i'll betcha patdk-lap knows more about samba than i do, you should talk to him [04:14] but i dont remeber how [04:15] patdk, what version of samba and ubuntu do you have? [04:15] Roxyhart0, ask something I didn't just answer [04:19] you said about your ubuntu verison, but what is the match with your samba versions and are all of them working with windows clients for printing? as my problems is sharing printers [04:19] my samba version is whatever is in ubuntu 10.04 [04:19] and I haven't had an issue printing [04:20] the wife and me both used a printer via samba in win7 [04:21] at work, I use a win2003 machine for a print server === MTecknology is now known as MTeck-InPain [05:15] somebody know how to install a patch file? === MTeck-InPain is now known as MTecknology [07:57] <_Neytiri_> i am having a issue settign up a iscsi target on my ubuntu server, i dont know where i went wrong but i cant get my esx host to find the server [07:57] <_Neytiri_> http://www.howtoforge.com/using-iscsi-on-ubuntu-9.04-initiator-and-target i used that tutorial to setup the target [08:26] New bug: #732458 in squid (main) "package squid 2.7.STABLE9-2.1ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100 (dup-of: 732314)" [Undecided,New] https://launchpad.net/bugs/732458 [08:57] jamespage, hi [08:57] jibel: good morning [08:58] jamespage, i'll push an update of usit for desktop testing. I set the version number to ppa15 in the changelog ? [08:58] actually, 1.0-1~ppa15 [08:59] jibel: thats good [08:59] I'm asking this because last time you updated it but I don't know why [09:11] I updated because for some reason that I can't remember your merge proposal version conflicted with the latest release in the PPA [09:11] ~ppa15 is OK [09:11] (~ppa14 is currently published) === twister004_ is now known as twister004 === twister004_ is now known as twister004 [10:00] Any kvm virtualisation guru's in here? [10:01] Guru is a big word :) [10:02] only 4 letters..... [10:02] Anyway, I've been wanting to give spice a try [10:02] Is there an easy way of doing this on ubuntu [10:03] I'm not sure simulation of electrical circuitry is what people normally mean by "virtualization" [10:04] @twb SPICE is a "new" high end remote protocol designed to work with kvm virtual geust systems [10:04] 2d acceleration and stuff like that [10:05] It's really good, i've tested it about 2 years ago and it was working great then. [10:05] so I'm not talking about spice-ng [10:05] ;-) [10:05] "2d acceleration"? As in, a GUI? [10:05] http://spice-space.org/ [10:06] Hardware assisted 2d playback [10:06] Lame [10:06] VMs shouldn't have a GUI any more than the dom0 should [10:06] twb are you really going to asume you know every use case? [10:07] Only the important ones [10:07] SPICE is mostly designed to host virtual desktops [10:07] desktops are lame, too [10:07] High performance 2d graphics using a remote protocol [10:07] *chuckle* [10:08] Dunno what's wrong with NX-compressed X11 [10:08] A lot [10:08] It's an "in guest" protocol [10:08] that means it's a service running inside the guest [10:09] So what you're saying is that your VMs are not only GUIs, but they're not unix GUIs [10:09] lnx-usr: sounds intersting.. we use KVM here for servers, but are looking at pushing into desktops.. [10:09] No thats not what I'm saying, allthough it's true... ;-) [10:10] Is bind9 still best practice for hosting ones domains? [10:10] I'm going through the debtags list and stuff like maradns sounds interesting [10:10] Anyway, I'm implementing Desktop virtualisation systems based on vmware view a lot [10:11] I'd like to be able to give my customers the choice of using ubuntu, kvm with spice [10:11] vmware can FOAD. I wasted the best part of a week trying to make SCO4 work with it. [10:11] I can't right now [10:11] What vmware system? [10:12] lnx-usr: be interested to hear how you go with this. Doesn't seem to be much in the way of software on the link you gave. [10:12] Unforunately, it was vmware-server. We weren't confindent esxi could be tricked into working with our existing backup infrastructure. [10:12] s/backup/DR/ [10:12] Why would you use SCO anyway [10:13] lnx-usr: because the shitty ERP system was written for it twenty years ago [10:13] VMware server is not the way to go [10:13] It's like saying "why are banks still using AIX" [10:13] Kind of like saying "why use desktops..." [10:14] Yeah [10:14] lol [10:14] Customers should FOAD, too [10:14] Anyway, what does your backup system look like [10:14] end users should FOAD..... [10:15] It's basically cron, ssh, lvcreate --snapshot and rsync [10:15] Ah [10:15] That wont work on vmware esxi [10:15] Not without buggerizing around with undocumented vmware calls [10:16] Where are the vmdk's stored? [10:16] iscsi? [10:16] in the dom0 [10:16] esxi is just a broken linux dom0 [10:16] Nope, esxi is not linux [10:17] esxi has it's own kernel [10:17] "Up through the current ESX version 4.1, a Linux kernel is started first,^[5] and is used to load a variety of specialized virtualization components, including VMware's 'vmkernel' component." [10:17] twb: esx != esxi [10:17] Almost no linux userspace anymore [10:17] As I understand you are not using central storage [10:18] They only have ten users [10:18] The server is the centralized storage [10:18] twb: esx is (was) a rhel based hypervisor. esxi doesn't run the linux kernel anymore [10:18] It's like saying Netware is DOS because dos is booted first [10:18] joschi: hum, I thought the only difference was esxi's dom0 didn't have a shitty GUI [10:19] Only the console system was based on Linux [10:19] This made it easier for vmware to implement userspace stuff [10:19] twb: no, they actually strapped the linux parts away [10:19] Now most things moved to vmkernel space [10:21] My advice would be this: Use vmware esxi, use SAN storage (even if it is something like Nexenta, ubuntu with iscsi target or freenas), mount the vmware vmfs filesystem via iscsi on your backup server and backup from there [10:22] That sounds way too "enterprisey" to me [10:22] ok [10:23] then use esxi with the vma [10:23] Where "enterprisey" means "expensive and crap" [10:23] Or move to KVM, headless Virtualbox or Xen. But please don't use vmware server [10:23] vmware-server doesn't work on 10.04 anyway [10:23] I can't remember why, I think it was a problem with the NIC going spastic [10:23] VMware server is the crappiest product vmware ever made === zul_ is now known as zul [10:24] I'd have used kvm but it makes sco koops [10:24] I use ESXi, vsphere and workstation on a daily basis. And I mostly like them. [10:24] Yeha but you also like GUIs [10:25] Yeah, I also use KVM quite a bit, never liked xen tough [10:26] I like kvm and lxc best [10:26] By 12.04 LXC will be kickass [10:26] lol [10:26] Maybe LCR will even be ready [10:27] LCR? [10:27] new to me [10:27] Maybe it's CXR [10:27] sorry, they must not have a gui yet [10:27] Linux Checkpoint/Restart [10:27] Allows you to suspend and resume arbitrary processes/process groups, maybe move them between hosts [10:28] Must be a stupid project, I don't see screenshots..... ;-) [10:29] Kind of like "live migration for applications" [10:29] yeah [10:29] Sounds awesomely cloudy googly like [10:29] Wikipedia actually directed me to http://en.wikipedia.org/wiki/Application_checkpointing [10:33] But for LXC, it would mean the ability to migrate domUs between hosts (and suspend them prior to restarting the dom0) without needing to emulate a full computer (a la kvm) [10:33] less overhead is always better. [10:34] LXC is about as efficient as a chroot [10:34] But it's a lot leakier than kvm at the moment [10:34] Needs more work in the kernel [10:35] btw TWB, if I where you I'd look into using ESXi with the "Vmware vSphere 4.1 command line interface" [10:35] It's a commandline interface you can install on a linux system and use it to script esxi [10:36] Meh [10:36] I'm not really interested in vmware until they start using copyleft licenses [10:36] Ok [10:37] Well I guest I'm going to have to build SPICE myself [10:37] ckpt.wiki.kernel.org is what I was thinking of [10:38] Yeah I found that to [10:38] I'm going to eat now [10:38] Nice talking to you [10:51] LXC and Linux-CR are lightweight enough that I expect e.g. a smartphone to put each "app" in its own container, and to suspend/resume them individually. === jjohansen is now known as jj-afk [11:43] llutz: do you think I need an equivalent to wireless-mode managed [11:43] the guide doesn't mention it [11:44] opps wrong channel [12:42] hallyn: just tested the new ppa code. Here are the findings [12:42] - win7 seems to work well with vnc [12:43] - once installed qxl drivers, windows seemed to have become a bit unstable (crashed a couple of times)! [12:43] - I cannot connect using spicec at all "Warning: Invalid mode" [12:44] - I just found out about http://www.spice-space.org/download/gtk/ .. a gtk client, unsure how it compares to spicec! [12:44] hallyn: that's all, if that client is the official or better one, perhaps if you can build it, I'll try connecting with it as well [12:55] <\sh> hmm...how do we attack the problem that authbind (which is used by tomcat6) still doesn't support ipv6? eventually this patch could help us here: http://toroid.org/ams/etc/authbind-ipv6-support [13:01] hallyn: someone on #kvm mentioned to check this patch http://www.mail-archive.com/kvm@vger.kernel.org/msg50244.html [13:17] hello [13:18] hallyn: new lxc uploaded [13:21] isn't possible to execute files in a webdav server? [13:27] zul: cool, thx. have you tested it? (IIUC it will break current configs) [13:27] no i havent had a chance to [13:28] kim0: we already have that patch. without that, kvm locks up when using qxl [13:31] hallyn: ok good .. what about that new client thing [13:31] dunno [13:32] is that what people said to use? [13:32] well people are not too responsive [13:32] ok. i *was* going to build spice-qemu as a separate package today. Do you think testing the new client is more urgent? [13:33] hallyn: I think so yeah, since currently spicec is not connecting at all [13:33] ok [13:33] at least in my case [13:33] got some unrelated testing to do, but I'll go retest my current packages right now, and then try out that new client. bbl [14:12] hallyn: spice people confirm spice-gtk is the thing to use, spicec is legacy they say [14:12] hey guys i wanna create a new user cuz the place that is hosting my vps seems to have enabled root :( [14:12] how exactly should i add the user too the sudoers [14:13] do i add it like roots setup User ALL=(ALL) ALL ? [14:20] morning all [14:20] arrgh stop snowing [14:20] zul: I'm not. [14:20] Daviey: howdy! hey I resubmitted the eucalyptus-branch against the one in ubunut-virt [14:20] soren: yes you are [14:21] zinser: qhey guys question [14:21] whoops [14:21] guys how do i add a user to the sudoers file [14:21] RoAkSoAx, rockin' [14:21] do i add it like roots setup User ALL=(ALL) ALL ? [14:21] or just add the user to the admin group [14:21] RoAkSoAx, We'll get that uploaded today. [14:22] Daviey: awesome. thanks [14:26] RoAkSoAx, thank you for fixing that. [14:27] smoser: glad to help ;) [14:32] kim0: ok. sorry, i got a bit side-tracked by email backlog. off to create teh package soon. (hopefully before i'm pulled away by calls) [14:49] hallyn: I tried building it locally ( but gave up) I just had to sed 's/celt051/celt/' in the configure script, if that's helpful to you [14:59] kim0: that's actually troublesome. [15:00] probably means there will be more changes to do, mirroring the ones made in spicec to handle higher version of celt [15:03] hi guys. is it possible to specify a system-wide alias for a hostname? just like you'd map an IP address in /etc/hosts, but I need to map a long domain name to a shorter alias, and afaik, I cannot do that in /etc/hosts [15:04] you probably want a 'search' line in /etc/resolv.conf [15:05] jkg: oh, let me try that, thanks [15:08] zul: howdy!! when you have the time, tell me what you think about bug #731616 [15:08] Launchpad bug 731616 in cobbler "koan crashed with ImportError in __main__: No module named koan.app" [Low,Fix committed] https://launchpad.net/bugs/731616 [15:08] RoAkSoAx: yeah i saw that last night ill merge it [15:09] zul: ok awesome. I'm also looking at the yum thingy and we also need python-ethtool (though apparently someone's already working to get it in debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=549323) [15:09] Debian bug 549323 in wnpp "RFP: python-ethtool -- Python bindings for the ethtool kernel interface" [Wishlist,Open] [15:10] anyone seen this error before ? http://pastie.org/private/igmpcadl4txerf2kpequa [15:11] evilsushi: try sudo service apache2 restart [15:11] RoAkSoAx: if you want to take care of it ill upload it for you [15:12] err i was in a deleted directory from a cron job [15:13] zul: yeah I'm gonna look at it today [15:13] RoAkSoAx: k thanks [15:29] hallyn, ping [15:29] your comment in bug 723361 doesn't make sense [15:30] Launchpad bug 723361 in libvirt "Apparmor security unavailable" [Undecided,New] https://launchpad.net/bugs/723361 [15:30] you said "Information was provided as new bug 723361 (which I've marked as a dup of this)." [15:30] ah. never mind. the duplicate info is correct though. the comment is just wrong [15:32] New bug: #732645 in clamav (main) "package clamav-freshclam 0.96.5 dfsg-1ubuntu1.10.04.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/732645 [16:05] SpamapS, good morning, is bug 732314 on your radar ? [16:05] Launchpad bug 732314 in squid "package squid 2.7.STABLE9-2.1ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100" [High,Triaged] https://launchpad.net/bugs/732314 [16:06] jibel: I saw it last night before passing out.. reading now [16:07] oh darn it [16:07] thats because squid doesn't use dh_installinit [16:07] jibel: fix forthcoming.. thanks for pointing it out [16:07] squid is evil [16:08] lifeless: cover your ears! ;) [16:09] well that packaging is evil [16:10] kees: ping who do i nag about the lxc MIR? [16:13] New bug: #732665 in samba (main) "[FFE] Update Samba to 3.5.8." [Undecided,New] https://launchpad.net/bugs/732665 [16:14] SpamapS, thanks for fixing it [16:18] zul: yeah, it seems to try to maintain compatibility a little too hard. [16:19] hallyn: fyi, I marked 723361 as a dupe of 545795. It seems that the reporter doesn't understand how the driver works, but that the main problem is that the USB device doesn't work. 545795 is fixed in maverick but the reporter is using lucid. 545795 has a workaround for the usb issue [16:35] jdstrand: cool, thanks for the info [16:35] jdstrand: smoser: honestly I don't know what happened with that bug, or why I ended up marking it a dup of itself. I swear there was nother bug# involved where the info actually sat :) [16:36] hallyn, there is. [16:36] and it is marked as a duplicate [16:36] (look at the duplicates) [16:36] smoser: waht i mean is i don't know why i did that wrong the first time [16:37] ah [16:37] k === Guest20785 is now known as Sunloung [16:44] zul: what's the bug # for the lxc MIR? [16:44] kees: one sec [16:44] kees: 727200 [16:45] * kees checks [16:47] zul: can you target it to natty? then it should show up in the MIR queue for mterry to assign. === jj-afk is now known as jjohansen [16:47] kees: sure [16:55] Greetings and salutations. [16:56] With processes (in ps auwx) showing as (SERVER), is there any way to find out what the command-line switches were? [17:27] ScottK: howdy!! I have a python packaging question. I'm packaging a python-ethtool. During the build it shows that it is creating /python-ethtool/usr/local/lib and during install W: dh_python2:95: Python 2.7 should install files in /usr/lib/python2.7/dist-packages/. Did you forget "--install-layout=deb"? http://pastebin.ubuntu.com/578435/ . Howver, the resulting binary obviosly has the correct paths. http://pastebin.ubuntu.com/578436/ [17:46] Right.. [17:46] Is there a easy way to see what services my server is actually running [17:48] can anyone here tell me how to switch php from an apache module to cgi mode [17:57] Dans326, you do know cgi will be dog slow? [17:57] better go with fastcgi [17:57] jamespage, do you know how i can see the java console in firefox ? [17:57] or anyone else [17:59] yea I know its slow but trying to make a dev server match a live server I have no control over [18:02] apt-get install php5-cgi [18:02] a2dismod php5 [18:06] I'm trying to make an apparmor policy for memcached, and memcached fails to start because setrlimit is restricted. I can't seem to find a way to allow the process to use setrlimit unrestricted. is this possible? [18:06] it looks like I can enforce a stricter rlimit only [18:10] specifically, apparmor is denying setrlimit(RLIMIT_NOFILE, {rlim_cur=20000, rlim_max=20000}) [18:14] jjohansen: ^ [18:15] Ryan_Lane: if the profile has a rule setting the rlimit, then it becomes controlled, and the task can only change the rlimit to a value <= what is specified in the profile [18:15] SpamapS: need a little help? [18:17] Ryan_Lane: if you want to allow the task to change its rlimit, you can raise the value in the profile, and or remove the "set rlimit" rule, and reload the profile [18:17] the profile doesn't have it set [18:17] maybe base or nameservice does... [18:17] zul: w/ what? [18:18] https://code.launchpad.net/~clint-fewbar/ubuntu/natty/squid/fix-init.d-symlink/+merge/52898 [18:18] needs some testing and an upload [18:18] SpamapS: yep [18:18] * SpamapS is headed to the dentist.. bbiab [18:18] SpamapS: good louck [18:18] luck* [18:19] Ryan_Lane: hrmm, you shouldn't be getting a reject message from apparmor unless the profile has it set some where. It doesn't mediate rlimits unless they are specifically set (or there is a bug) [18:20] memcached fails to set the ulimit when its profile is enabled, and doesn't fail when it is disabled [18:20] Ryan_Lane: can you see if apparmor_parser -p dumps output? [18:21] Ryan_Lane: -p is used to dump the profile after include processing etc, so you get a flattened profile [18:21] jjohansen: apparmor_parser: invalid option -- 'p' [18:22] :( [18:22] Ryan_Lane: well I can give you an older or newer parser with it enabled, unfortunately it got disabled for a release or two [18:22] zul: ok so I just package python-ethtool bug I don't yet know the status of debian bug #549323 [18:23] Debian bug 549323 in wnpp "RFP: python-ethtool -- Python bindings for the ethtool kernel interface" [Wishlist,Open] http://bugs.debian.org/549323 [18:23] zul: what do you think we should do? [18:23] RoAkSoAx: upload it and then we can sync it from debian if it gets done [18:23] I'm just going to ignore apparmor for memcached right now [18:24] zul: alrgiht. gonna ask FFe then first [18:24] Ryan_Lane: which OS release? [18:24] lucid [18:24] it was working properly in hardy [18:24] RoAkSoAx: k [18:24] Ryan_Lane: okay, if you want you can send me the profile and I'll see if I can replicate [18:24] jjohansen: ok. sec [18:25] jjohansen: http://pastebin.com/2c3YH2L5 [18:26] okay thanks [18:27] zul: could you review it first though? [18:27] RoAkSoAx: sure [18:27] zul: do you want me to upload it to chinstrap or revu? [18:27] chinstrap please [18:29] <_Neytiri_> is anyone here familiar with using Ubuntu as a iSCSI target. i cant seem to get my initiators to connect [18:29] sure [18:31] <_Neytiri_> http://www.howtoforge.com/using-iscsi-on-ubuntu-10.04-initiator-and-target i used that tutorial to set up my target and iam useign vmware esxi as my initatior [18:32] <_Neytiri_> i have 2 2tb drives /dev/dsb and /dev/sdd [18:33] zul: done! Please, also note this warning "W: dh_python2:95: Python 2.7 should install files in /usr/lib/python2.7/dist-packages/. Did you forget "--install-layout=deb"?", which I can't figure out why, but if you do let me know. More info here:http://pastebin.ubuntu.com/578435/ [18:36] SpamapS: done [18:38] <_Neytiri_> Target iqn.2011-03.net..pandpra.eywa:iscsi.1 OutgoingUser Lun 0 Path=/dev/sdb,Type=fileio Lun 1 Path=/dev/sdd,Type=fileio [18:38] <_Neytiri_> that is my ietd.conf file [18:39] comment out outgoing user [18:39] and you shouldn't use fileio for a block device [18:39] <_Neytiri_> ok so it should be a blockio ? [18:41] if using a block device yep, should perform better, but doubt it's the cause of any *issues* [18:42] <_Neytiri_> ok thats done [18:43] <_Neytiri_> ok [18:43] <_Neytiri_> i am still got getting the drives to show up on my initiator [18:49] <_Neytiri_> patdk-wk, any idea what could be causin git? [18:49] causing what? [18:49] you never even said you had a problem [18:49] <_Neytiri_> my initiators to not be able to connect [18:49] let along what the problem is [18:50] error message? [18:50] <_Neytiri_> no messages what so ever [18:50] I distinctly remember vmware throwing up messages if it can't connect [18:51] <_Neytiri_> it might be connecting but the drives are not showing up [18:51] did you format them? [18:51] <_Neytiri_> no [18:52] maybe you need to go back and read the esx manual [18:52] it won't *auto* showup [18:52] not in esx [18:52] smoser, do we have an EC2 image for the karmic proposed? [18:52] yes [18:52] <_Neytiri_> it doesent even show up under he storage adaptar [18:53] under storage adaptors, select the iscsi adaptor you configured [18:53] it should show each iscsi target [18:54] <_Neytiri_> there not showing up there [18:54] <_Neytiri_> targets 0 [18:54] click properties [18:54] configure, enable [18:55] then on the dynamic discovery page type in the ip of your iscsi device (or dns name) [18:55] hggdh, use http://uec-images.ubuntu.com/server/karmic/20110308/ [18:55] it's all in the esx manual, really simple [18:55] the 20110310 has the non-proposed [18:55] <_Neytiri_> i did [18:55] you can ssee such things by looking at the 'kernel-info' files there [18:55] if it can't find anything, then iscsi isn't runnin on your host [18:55] <_Neytiri_> rescan shows nothing [18:55] did you restart the iscsi daemon after you edited that config file? [18:55] <_Neytiri_> yes [18:56] mine is very simple config [18:56] <_Neytiri_> it seemed simple whats why i dont know what i did wrong [18:57] Target ign:1998-02.com.example:esx [18:57] Lun 0 Path=/dev/vg/iscsi,type=blockio [18:57] and is all [18:58] and yes, I just added a new target to my esx install to test it [18:58] <_Neytiri_> well tiem for lunck this has to weait [19:05] smoser, thank you [19:39] zul: is kickstarting working in cobbler? http://me.roaksoax.com/Screenshot.png [19:39] i get that error [20:03] hey [20:05] i've got a question: I want to virtualize an Windows XP client on a Ubuntu Server 10.10 ... is there a way to do this without installing the X environment. [20:05] ? [20:06] So funny thing, apt-get install vsftpd. Then a /etc/init.d/vsftp start yields * MySQL is not running [20:06] hm [20:06] cavefish: yes [20:07] cavefish: kvm and libvirt are your friends [20:07] Oke thank you mate! === ogra is now known as Guest18809 === Guest18809 is now known as ogra_ [20:20] RoAkSoAx: There is (IIRC) a fixup that moves it out of /usr/local, but it's better you add install-layout=deb so it doesn't have to save you. [20:23] ScottK: I have --install-layout=deb and it still shows the warning [20:24] RoAkSoAx: Can you pastebin your debian/rules? [20:24] ScottK: http://paste.ubuntu.com/578505/ [20:27] RoAkSoAx: What happens if you make line 14 dh_install? [20:28] * RoAkSoAx checking [20:29] ScottK: ah!! now there's no warning. Thanks for that...w ouldn't have guessed it xD [20:30] * RoAkSoAx wonders why he didn't think about that [20:30] RoAkSoAx: dh_auto_install was trying to build that package again. [20:31] ScottK: I see. So, when overriding dh_auto_install should we always use dh_install rather than dh_auto_install againa, or this is just a particular case? [20:32] RoAkSoAx: Dunno about always, but usually. [20:32] I can't think of a case you wouldn't though. [20:33] Alright. I'll keep that in mind for the future. Thanks :) [20:52] hallyn: howdy! Do you know by any change if there's any reason whye PXE Booting a KVM/virt-manager instance would result in not being able to find a root filesystem if the disk is using virtIO instead of IDE? [20:52] RoAkSoAx: that sounds familiar. It might be a known bug [20:52] which i think soren filed [20:52] * RoAkSoAx looks [20:54] for some reason it's not in my bugs.otl file [20:55] yeha can't find any [20:55] either [20:58] RoAkSoAx: oh, pxe. His was different I think. you say it works when you use ide? [20:58] RoAkSoAx: what is your full cmdline? [20:59] hallyn: /usr/bin/kvm -S -M pc-0.14 -enable-kvm -m 512 -smp 2,sockets=2,cores=1,threads=1 -name natty-pxe -uuid 0e9133db-924d-4b6c-efda-e07910ea2369 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/natty-pxe.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=readline -rtc base=utc -no-reboot -boot nc -drive file=/media/vm1/natty5.img,if=none,id=drive-ide0-0-0,format=raw -device ide-drive,bus=ide.0,uni [21:01] RoAkSoAx: what if you add 'boot=on' (and maybe 'index=0') to the file=/media/vm1/natty5.img spec? [21:01] hallyn: with the command above it's installing normally. let me get you the command with virtIO [21:06] hallyn: ok, this this it fails: /usr/bin/kvm -S -M pc-0.14 -enable-kvm -m 512 -smp 2,sockets=2,cores=1,threads=1 -name natty-pxe2 -uuid 36bc2185-3dad-246c-2506-7ab226bdab47 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/natty-pxe2.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=readline -rtc base=utc -no-reboot -boot nc -drive file=/media/vm1/natty6.img,if=none,id=drive-virtio-disk0,boot=on,form [21:07] I'm trying to set up a MySQL server to be connected to remotely, I've set it to bind-to the correct IP but still am not allowed to connect remotely. [21:07] I'm assuming this is a user permissions thing, but wanted to double check if there was something else that was common [21:10] oneseventeen: you want to make sure your comment out #bind-address = 127.0.0.1 [21:11] oneseventeen: then you have to create a remote user GRANT ALL PRIVILEGES ON *.* TO 'monty'@'%' IDENTIFIED BY 'some_pass' WITH GRANT OPTION; % means the user can connect from anywhere. [21:11] RoAkSoAx: mind you it is possible that the bios simply works with ide as backup and not with virtio. But your cmdline still seems weird - can you try with if=virtio,index=0 in the last bit? [21:12] thesheff17_: thanks! [21:12] that worked perfectly, I can now connect remotely. [21:13] good evening [21:13] hi all. getting a padlock_sha error on boot of my server and it halts. gonna paste to pastebin. [21:13] http://paste.ubuntu.com/578523 [21:13] i have a question about x-forwarding via ssh and using screen the same time [21:14] is it possible to x-forward a program which is running on a server and detach an later reattach it? [21:14] Guest98139: this might help: http://www.vanemery.com/Linux/XoverSSH/X-over-SSH2.html [21:15] thanks geekyadam, i will try i right away [21:18] Guest98139: and you want to look into gnome screen (for detaching,...) [21:19] gnome screen? i do not have a windowmanager on my server [21:20] Guest98139: its text only :-), and it GNU screen (silly me) [21:20] isn't it possible to run the application without that bloat? [21:21] i mean, of course i can run the application with ssh user@server -X [21:21] but i would like to de- an reattach later [21:21] and this does not work with plain screen and ssh -X [21:21] if you want that, you will need like xvnc [21:21] Guest98139: I was really talking about a text only solution for detaching/reattaching [21:22] thanks guntbert, i know that a lot of people use irsi like that [21:22] Guest98139: :) [21:27] i have a phpbb forum. When an admin adds a module from inside phpbb, the ownership is set to user:user instead of user:www-data. how do i fix that? [21:31] that sounds like a correct behavior [21:32] and you can't make user to change permissions to a group he's not part of [21:32] or is there a command line client for 'direct connect' aka dc++? [21:32] and you really don't want www-data to own any .php file on your server [21:34] ivoks, /var/www is user:www-data. When I copy files and folders via SFTP it also defaults them to user:user. Is that normal? [21:35] dravekx: of course [21:35] www-data shouldn't be owner of any page [21:36] if you give rw permissions to www-data user on, let's say, joomla, you can be sure that your page will get defaced [21:36] www-data runs apache service [21:36] that user should only have read permissions on files in your web page [21:36] except for the files that people upload [21:37] smart CMS systems don't upload files over HTTP; they usually provide FTP/SFTP option for uploading [21:37] great example is wordpress or joomla [21:37] even drupal supports upload over FTP [21:37] ivoks, ahhh. :) thx. [21:38] directorires that www-data usually has rw permissions are something like cache and temporary [21:39] don't ever give www-data rw permissions on your page [21:39] i can't stress that enough :) [21:40] and if you have multiple clients on your server, always chroot them [21:40] ivoks, so secure-wise, it should be root:root or user:user almost always. [21:40] yes [21:40] with read permission for other users [21:41] that way a security hole in your web application won't allow attacker to overwrite php files [21:42] downside is that your configuration file, that containes database connection configuration, will be readable by anyone [21:42] that's why you should chroot your users :) [21:43] no, making that file owned by www-data is not good idea; i've seen joomla websites defaced cause the attacker was able to write into that file :) [21:44] best approach would be fcgid [21:44] ok, that's it... good night ;) [21:58] hi all. getting a padlock_sha error on boot of my server and it halts. http://paste.ubuntu.com/578523 [21:59] Has anyone found advantages of using Net-SNMP vs OpenNMS ? [22:00] I never used opennms, what is for? [22:01] SNMP [22:01] Monitoring [22:01] it is supose to be "enterprise grade network management" [22:01] 100% open source [22:02] ohhh, well I know nagios for that which supports snmp [22:02] zennos, [22:29] zul: is cobbler-web disabled but default or something? [22:29] i mean, not working out-of-the box [22:31] kim0: will that was more painfal than it should have been, but spice-gtk finally compiled locally, now I'm pushing it to ppa. (it'll likely be awhile before it gets built there) [22:31] * kim0 feels guilty :) [22:31] why does it have to be that hard [22:31] * kim0 hugs hallyn [22:32] hallyn: can u throw the deb somewhere I can easily grab [22:32] yeah i'll put it on people.canonical, one sec [22:33] kim0: http://people.canonical.com/~serge/spice-gtk-debs.tgz [22:34] thnx grabbing [22:34] note i said it compiled. i didn't run it :) [22:35] i based on devzero's pkg so will send the debdiff to him [22:35] it's be nice if we can sync all with him === skrewler_ is now known as skrewler [22:35] but i he was happy to apckage a separate older celt-0.5.1, i wasn't, which is why my pkgs diverge [22:35] anyway, off to clear my head and think about how to package spice-qemu [22:36] hallyn: I can't spot any binary in there [22:36] zul: lxc update seems to be working for me. old containers don't work, as expected. i should probably see if i can come up with a fix for that [22:36] only /usr/lib/stuff [22:37] kim0: yeah, hm [22:37] oh. haha [22:37] hallyn: docs mention "spicy" [22:37] a cli tool [22:38] i had to rename the client package (bc it conflicts the one from spicec) [22:38] but i didn't rename the debian/spice-client.install [22:38] 'oops' [22:38] biab [22:38] okie [22:42] kim0: gimme 5 more mins [22:43] sure thingie [22:47] kim0: http://people.canonical.com/~serge/spice-gtk_0.5-1ubuntu2-debs.tgz [22:48] this time there are 'spicy' and 'snappy' binaries [22:48] whatever those are [22:48] ok, out for a walk, back in awhile [22:49] is there a best practice for setting up a website in Ubuntu-Server? [22:49] do I just put my default website at /var/www/ or should I create a new site and disable the default? [22:52] hallyn: initial testing looks good :) [23:00] <_Neytiri_> patdk-wk, you still here, i managed to get the drives to shw up now in vm-ware but i get the error: unable to read partition information from this disk [23:10] anyone knows about mysql on ubuntu? [23:11] nertil: what about it? [23:11] https://help.ubuntu.com/10.10/serverguide/C/mysql.html [23:11] i dont know my mysql username and password [23:11] how can i reconfigure mysql ? [23:12] I'm setting up a webserver and can't remember how to set permissions so all members of a specific group have read/write access to certain folders. [23:12] I know it has to do with chmod, but there was a flag I remember seeing at one point to say "apply this to new folders as well" [23:12] man chmod [23:12] Hi, how do I enable the power off button do do a shutdown [23:13] nertil: http://ubuntu.flowconsult.at/en/mysql-set-change-reset-root-password/ [23:13] first hit at google. [23:17] only use that method if you have nothing open to the public internet [23:18] it opens your system for a second [23:18] well untill you flush privs [23:31] How.. "safe" would it be to run some web-services behind Apache with Basic Digest auth over SSL [23:39] is there a problem with seahorse not importing a ssh private key? it says "invalid file format". the key is a valid one though [23:39] it only isn't named "Id_rsa", i use more than one key [23:46] kim0: excellent [23:48] nm found it. had to install seahorse-plugins [23:49] hallyn: yeah, it's working great so far :) with pv qxl drivers, all good. Still cant get sound out, but that's another story, I'll dig into it later. You're awesome ;) === skrewler_ is now known as skrewler [23:50] * hallyn dances a little jig [23:50] kim0: what's the sound issue again? Is it windows + 64-bit qemu-compatible sound drivers? [23:51] hallyn: I'm running 32bit win7, with ac97 card, windows update could find and install drivers for it [23:51] but I'm just still not hearing anything [23:51] with libvirt? [23:52] started via virt-manager yes [23:53] i don't even know how /dev/audio perms get handled nowadays [23:54] hallyn: it's pulseaudio! [23:55] hallyn: another annoying thing, while guest cpu is idle (0%), host has kvm process eating 25% with fans spinning [23:55] I wonder if that's acpi/apic...etc related [23:56] (just to make sure) you don't get that without spice? [23:58] hmm [23:58] let me try [23:59] hallyn: which vga should I test with ? cyrrus ?