jiboumansDaviey: what's the PPA url? i can take a look now00:00
sorenhudson's deprecated anyway.00:03
sorendeb http://pkg.jenkins-ci.org/debian binary/00:03
sorenis what I use.00:03
Davieyjiboumans, https://launchpad.net/~hudson-ubuntu/+archive/testing00:03
Davieyactually, ~ubuntu-hudson is based on Natty... so soren's suggestion is probably better for LTS.00:04
jiboumansDaviey: you know me well :) of course i'm on LTS (smoser++)00:04
Davieyjiboumans, What?!  You aren't putting production loads on the development release?!00:05
jiboumansDaviey: indeed, I'm not hitting the crack pipe :)00:05
hallynDaviey: ok, i'll try ffe process00:06
hallynDaviey: I do seem to recall that debuild was failing until i refreshed patch 01-kvers.patch00:06
hallynDaviey: but, hopefully you're off for the night and will read this in the morning :)00:06
Davieyhallyn, Make sure you note that you spent significant time trying to cherry pick a fix etc.  And new upstream snapshot seemed both more reliable, and less time - and more supportable rather than a massive patchset00:07
DavieyLay it on thick :)00:07
Davieyhallyn, Ah, debuild will crap out if the patch contains fuzz... when quilt push doesn't... really annoying variation of defaults!00:08
SpamapSDaviey: 3.0 quilt or --with quilt ?00:09
SpamapSI think the 3.0 (quilt) thing is a bit broken. We really need 3.0 (bzr)00:10
DavieySpamapS, "quilt pop -a ; quilt push -a" works.. with default setup, mentions fuzz and offset... but the build process will only accept offset but not fuzz.00:11
DavieySpamapS, I recently pondered the idea of 3.0 (bzr), but can you imagine converting all of debian? :).... Really, i think bzr needs to have native knowledge of .pc00:12
sbeattieDaviey: there is an experimental 3.0 (bzr) somewhere, 3.0 (git) got bumped from experimental to approved recently, I though.00:13
sbeattieerr, I thought.00:13
Davieysbeattie, Yeah - but how useful is that for /everything/... Other than a few DM that use bzr and Ubuntu native packages?00:14
sbeattieDaviey: useful? when has that ever been a criteria? :-)00:15
DavieyHas everyone else had puppet adverts following them across the internet today?00:15
ScottKDo nightmares about clowns count?00:17
DavieyDepends if you have the nightmare whilst awake :)00:18
RoAkSoAxkirkland: dude could you also please publish the tarball for poewrnap at launchpad/net/powernap?00:33
=== tsimpson_ is now known as tsimpson
=== tohuw is now known as Tohuw
TohuwIs there any compelling reason to leave usergroups=yes in adduser.conf if I'm configuring an Ubuntu LAMP server? Granted, I need to watch my perms (e.g. 644 not 664), but that's just paying attention, not a real argument against it.01:38
twbThere are two cases where the group permission is relevant: /home/fred (private personal files) and /srv/share (shared files that need group write access).01:40
twbIME you cannot handle both correctly with plain POSIX permissions, so it is better to err towards privacy and leave usergroups=yes.01:41
twbThis allows users to opt-in to a shared group on specific files (i.e. /srv/share) rather than having to opt-out of same for /home/fred.01:41
Tohuwtwb: good point. thank you01:42
twbObviously if you value security over convenience, you should study one or more LSM MACs, like grsecurity, selinux or apparmor.01:42
Tohuwtwb: I'm going to learn apparmor last, but I do plan to incorporate it to some extent. I figure, get it working, then harden it. :)01:44
twbYou're running PHP so you're pretty much screwed anyway01:44
Tohuwtwb: why are the default directory perms in adduser.conf 0755 if you're not supposed to execute stuff in /home?01:44
twbTohuw: the default behaviour is to give world read access to files in $HOME01:45
twbOn the basis that sharing is useful, e.g. so you can read alice's .bashrc for handy things to put in your own01:45
Tohuwtwb: "You're running PHP so you're pretty much screwed anyway" <-- it depends, I would say. You can harden php decently through proper php.ini and phpSuExec configuration.01:45
twbOne quarter to one third of ALL vulnerabilities announce each year are PHP related.01:46
Tohuwtwb: I was more asking about the "7" part. Doesn't that allow the user to execute from their home?01:46
twbTohuw: no, it's a umask.01:46
twbActually, not it isn't.01:47
twbThat's the actual permission that /home/fred will be set to, so 7 means rwx01:47
TohuwSo, why allow execution? I though executables were supposed to be in */bin dirs?01:48
twbTohuw: execute permission on a directory means that you're allowed to cd into it, IIRC01:49
twbSomething like that.  Anyway, you need it01:49
Tohuwoh. Hm!01:49
TohuwI'll be darned; you're right01:50
twbRun info coreutils 'File permissions'01:50
TohuwRevoking the executable bit prevents cd to the dir.01:50
twbUnfortunately there's only info page, not manpage01:50
twb`x' the permission the USERS have to execute the file, or search it if it is a directory.01:51
Tohuwthe whole "oh let's only make info pages because info lolrulez" attitude is frankly annoying.01:54
twbinfo foo | less01:54
twbNow you have a big manpage01:55
uvirtbotNew bug: #735239 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade: 子程序 installed post-installation script 傳回了錯誤退出狀態 75" [Undecided,New] https://launchpad.net/bugs/73523902:26
Tohuwtwb: haha. It's more about telling users "just use man to find out about stuff", only some things don't have a man, or even worse, an outdated/very sparse one.02:29
TohuwThough I suppose telling users, "just info it" is valid as all man pages are read by info, AFAIK02:29
aarcane_anyone here using a SAS Expander, and willing to recommend it for use in a new system ?  i'm shopping for a SAS Expander for a ubuntu based system, and would love to hear from anyone running one now.02:30
twbBy "expander" do you mean a chassis that houses the disks, or a card that has SATA ports, or what?02:34
aarcane_a SAS expander is a circuit board, often housed on a PCI(E) shaped card or in a 5.25" bay that goes inside one of the chassis that houses the drives (or a main system) that allows multiple drives to be connected to one controller.  Most of the expanders I've seen take one SFF-8088 or 8087 cable from a controller card, and "expand" it to connect 16 or 24 drives plus 2 additional expanders.02:37
aarcane_I've also seen SAS expanders built directly into a backplane, but those are too expensive for me.02:39
TohuwOkay, I've RTFM, but I still don't understand what format the quota for quotauser should be in...02:43
Tohuw(quotauser as set in adduser.conf)02:43
* twb looks for a picture02:45
twbHm, OK02:46
twbI can't help; I mainly deal with SATA02:47
=== raul is now known as bigbang
TohuwIs there a strict 1:1 relationship between inodes and files? I.e., every file has an inode.03:22
=== bigbang is now known as krux
Patrickdkeverything on a disk has an inode03:47
Patrickdkeven directories, symlinks, ...03:48
Patrickdknot all inodes are files03:48
twbTohuw: no, two files can have the same inode (i.e. a hard link)03:49
jmarsdenPatrickdk: well, multiple hard links often fit inside one inode, too... touch foo; ln foo bar ; ls -i foo bar  # both have same inode number :)03:49
Patrickdkya, I wasn't thinking about that03:49
twbSimilarly, if you open a file, delete it, then create a new file, both files will be /tmp/x, but they will have different inodes03:49
Patrickdkand wasn't even thinking about it that way03:49
PatrickdkI was thinking stuff (files,dir,...) -> inodes -> blocks03:50
Patrickdkinodes is a collection of blocks, basically03:50
Patrickdkor, an inode03:50
Tohuwtwb: thanks, I received the answer in another channel. I'm clear on it now. Is dumpe2fs the "standard" tool for viewing free inodes?03:50
twbBy contrast, FAT has no inodes, so you cannot delete an open ifle03:50
Patrickdkreally df -i03:51
Tohuwgood ol df03:51
twbTohuw: I don't know why you would ever need to do that03:51
twbdf -i lists the percentage of inodes used/free03:51
Tohuwtwb: setting rational quotas for my partitions03:51
twbTohuw: number of files is a rough guide to current inode usage within a specific directory tree03:52
TohuwGiven that I could theoretically run out of inodes before running out of blocks03:52
Patrickdkthen for quota purposes, it's pretty much dir+files=inodes03:52
twbTohuw: try find /home/ -user fred -xdev | wc -l03:52
Patrickdkhopefully user fred is a standard user, and doesn't have only maildir files :)03:52
Tohuwtwb: right, but I was more interested in total free inodes, to try and devise a policy for limiting them.03:52
Tohuwfred is my mta AND sql log rotation holder! :D03:53
PatrickdkI'm doing one inode per 32kb currently03:54
TohuwPatrickdk: what brought you  to that decision?03:55
Patrickdkit was the ratio setup before me, and I didn't see any point in changing it03:55
Patrickdk4k is just normally overkill03:56
Patrickdk64k is too big though :(03:56
Patrickdk16k would probably be good03:56
Patrickdkbut some users abuse inodes, not too many03:56
twbLook at what users are using, then halve03:56
PatrickdkI'm probably going lower the inode limit good pretty soon03:58
Patrickdkonce I convert all the email03:58
aarcaneHi, Me again, still wondering which SAS Expanders people have used in here with a Ubuntu system05:00
patdk-laphow can we answer that when you don't stick around for an answer?05:16
jmarsdenpatdk-lap: You could try answering using memoserv, if you really want to :) :)05:17
patdk-lapI could05:18
patdk-lapbut I seriously don't even think the os knows about sas expanders05:18
patdk-lapit's just sees drives connected to a scsi card05:18
patdk-lapas long as the expanders and sas card get along, all should be good05:18
=== twister004_ is now known as twister004
smoserjamespage, awake ?06:08
=== twister004_ is now known as twister004
uvirtbotNew bug: #735296 in samba (main) "package winbind 2:3.4.7~dfsg-1ubuntu3.4 failed to install/upgrade: underproces installed post-installation script returnerede afslutningsstatus 127" [Undecided,New] https://launchpad.net/bugs/73529607:12
=== twister004_ is now known as twister004
luckymuraliHi all09:50
luckymuraliI installed ubuntu server 10.04 64 bit and there is no desktop on it09:51
luckymuralii want to install desktop on that machine but there is no internet09:51
TheInfinityluckymurali: of cource theres no desktop enviroment - servers usually don't have xorg / gnome09:52
TheInfinityluckymurali: and - then you have to set up your network connection :)09:53
_rubenluckymurali: if you want a desktop, install the desktop edition .. it's obvious i'd say09:53
luckymuraliyes i know that, my concern is how to install desktopn on server without internet09:53
_rubenyou'd use the desktop cd/dvd to install it, as it's not on the server cd/dvd09:54
TheInfinityluckymurali: get an internet connection. set up your wireless connection via cli.09:54
TheInfinityor whatever you need for internet09:54
luckymuraliTheInfinity,I need Desktop without internet09:54
luckymuralibut i dont know where is the desktop pacakge09:55
luckymuralithe desktop I need to use is for a specific reason09:55
* _ruben points to #ubuntu09:55
* TheInfinity would also say #ubuntu because i dont see the relation to server topics09:56
luckymuraliany way thanks for your suggestions09:56
uvirtbotNew bug: #735369 in bacula "Bacula Admin Tool (bat) does not work well with Qt 4.6.2 in Lucid" [Undecided,New] https://launchpad.net/bugs/73536910:02
=== Nafallo_ is now known as Nafallo
jdepihallyn: Hi hallyn; could you please post a link to more info about updating the apparmor profile (re mail on ubuntu-server list); i found some info on https://apparmor.wiki.kernel.org/index.php/Libvirt but I must say I have no experience with apparmor...11:06
uvirtbotNew bug: #735402 in squid (main) "package squid 2.7.STABLE7-1ubuntu12.2 failed to install/upgrade: sub-processo script post-installation instalado retornou estado de saída de erro 1" [Undecided,New] https://launchpad.net/bugs/73540211:21
uvirtbotNew bug: #735409 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 (not installed) failed to install/upgrade: il sottoprocesso nuovo script pre-installation ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/73540911:37
=== e-jat_ is now known as e-jat
=== zul_ is now known as zul
RoAkSoAxmorning all13:20
lynxmanmorning RoAkSoAx13:23
hallynjdepi: jdstrand may know of an actual link about updating apparmor profiles for libvirt instances, but please send reply in email to whatever msg i sent yesterday, and we'll figure it out13:33
jdstrandhallyn, jdepi: that link and the /usr/share/doc/libvirt-bin/README.Debian.gz should have everything needed13:34
jdepihallyn: i did :-)13:35
hallynjdstrand: thanks, I should'vethought of that one13:35
jdepijdstrand: thanks, i'll have a look13:35
ivoksidea for UDS:13:44
ivoksno... make that13:44
ivoksrequest for UDS: ACL by default13:44
ivokswhy are we still in the 20th century? :)13:44
patdk-wkacl by default on what?13:47
patdk-wknever used acl's13:49
sorenivoks: Last we had that discussion, I think Adam Conrad (infinity) said something about Samba changing its behaviour if the filesystem had ACL enabled... and then we decided not to enable it. I think it13:49
sorens ripe for another discussion.13:49
ivoksmakes life easier in some situations... /me thiks about samba and nfs13:49
ivokssoren: hm... i can't remember what it was13:50
sorenivoks: Anyways, it was almost 5 years ago. :)13:51
sorenivoks: Hmm... Or was it in Boston? Anyways, several years ago for sure.13:51
ivoksi think it was prague13:52
* soren tries to envision the Prague session rooms13:53
sorenI also forget when infinity left13:53
ivoksi didn't know he left :)13:54
zullike 2 years ago i think13:55
zulivoks: its on my list to bring up13:56
ivoksthanks :)13:58
ivoksok, maybe pushing it by default is over the line14:00
ivoksbut, lots of people are unaware of it and we could probably make better docs by mentioning how to utilize acl14:00
ahs3absolutely; better docs are a minimum.  simple tools to enable acl's would also help, imo14:03
RoAkSoAxivoks: pacemaker now also has support for acls14:23
hallynDaviey: do i need to create a new bug for the open-vm-tools FFE?14:23
RoAkSoAxhallyn: is there a merge bug opened already? If so, nope14:24
hallynthere is a bug open which the merge is needed for14:25
hallyn(bug 727342)14:25
uvirtbotLaunchpad bug 727342 in open-vm-tools "package open-vm-dkms 2010.06.16-268169-3ubuntu1 failed to install/upgrade: open-vm-tools kernel module failed to build" [Critical,In progress] https://launchpad.net/bugs/72734214:25
hallyncani just mark that one 'new' and put the info in there?14:25
ivoksRoAkSoAx: hm... i don't see how's that relevant for pacemaker :)14:26
RoAkSoAxhallyn: yeah, add [FFe] at the beginning of the bug title. You can also modify the title, and off course add the description for the FFe14:26
ivoksRoAkSoAx: pacemaker doesn't do anything on the filesystem... ACLs are of no use for it14:27
ivoksRoAkSoAx: maybe you are refering to pacemaker's internal ACL14:27
RoAkSoAxivoks: "S.U.S.E. has implemented support for ACLs. This means that you can now delegate permission to control parts of the cluster (as defined by you) to non-root users."14:27
ivoksright, no internal ACL14:27
ivoksACL = access control list14:27
ivokswhat i was refering to is acl on filesystem14:27
RoAkSoAxivoks: yeah yeah but I mean, your conversation of FS ACL's reminded me mof pacemaker's14:28
ivokss/right, no internal ACL/right, so internal ACL/14:28
ivoksright... that's a nice feature14:28
RoAkSoAxkirkland: howdy!! I just uploaded python-ethtool which is required by koan, could you please take a look at it when you have the time since it's in the NEW queue? thanks14:30
Davieyhallyn, no14:42
DavieyRoAkSoAx, Has it had FFe14:43
RoAkSoAxDaviey: python-ethtool? yes14:57
RoAkSoAxhallyn: yeah just use the same bug. I usually put [FFe] before the title of the bug and enhance description, etc etc  (sorry for the delay i though I replied :) )14:58
=== ogra is now known as Guest56191
=== Guest56191 is now known as ogra_
lynxmanp/whois soren15:02
lynxmansoren: hey, saw your presentation at fosdem about Openstack, great one15:03
lynxmankirkland ping15:03
kirklandlynxman: hi15:04
kirklandRoAkSoAx: sure, i'm on a call at the moment15:04
RoAkSoAxkirkland: no worries, whenever you have the time is fine ;) Thanks15:04
lynxmankirkland: hey *waves* I had some unexepected troubles with the upstart file for mcollective and I modified it on my 1.1.3 packaging to get it closer to what SpamapS suggested (for mcollective-server-provisioner, which kinda is the same category) just wanted your opinion/ideas on it15:05
lynxmankirkland: http://pastebin.ubuntu.com/580609/15:06
=== jjohansen is now known as jj-afk
lynxmankirkland: no hurries though15:06
kirklandlynxman: np, i'm on the phone for the next ~1 hour15:07
lynxmankirkland: can easily wait :)15:07
orudiehow can I check mail for root user ?15:08
nimrod10orudie, 2 ways: either log in as root   and type   mail     ,   or as your user (asuming you have sudo access) type   sudo mail15:11
zulisnt there a meeting today?15:12
RoAkSoAxzul: daylight saving15:12
RoAkSoAxis in effect15:12
zuldamn farmers15:13
lynxmanzul: blame the sun15:13
zullynxman: farmers are more tangable15:13
lynxmanzul: true true15:13
* SpamapS <heart> daylight savings time15:15
SpamapSthe sun will actually be up for the meeting.. woot15:15
orudiehow can I view sshd log ?15:17
lynxmanSpamapS: I resent daylight savings time for stealing 1 hour of my life15:17
twbI resent it for wasting my time and everyone elses15:17
twbI resent it for being a government-controlled resource15:17
* RoAkSoAx doesn't really care15:18
twbI especially resent when said government changes the start/stop times with only TWO WEEKS NOTICE because of some goddamn sporting even15:18
* RoAkSoAx doesn't really care about daily savings15:18
ivoksorudie: mail for root should be forwarded to the user15:18
lynxmanorudie: depends on what you're looking for, mostly in /var/log/auth.log15:18
RoAkSoAxarght daylight*15:18
lynxmanRoAkSoAx: inside a datacenter there's no daylight to save :D15:19
twbAnyway, edison and friends obviated the need for a daystar15:19
RoAkSoAxlynxman: hehe indeed. In my case is none sense since I have light till 8pm or so15:20
SpamapSlynxman: it only borrows it ;)15:20
lynxmanRoAkSoAx: lucky you15:21
RoAkSoAxlynxman: not really... because of that I don't sleep till late nite15:21
lynxmanSpamapS: yeah it's given back in October when I don't need it anymore to enjoy summertime :)15:21
lynxmanRoAkSoAx: me neither, but I just do it as an anti-farmer protest ;)15:22
* lynxman joins together memes craftfully15:22
SpamapSlynxman: except in summer time when would you rather have more daylight.. when you've just awakened, or near sunset ...15:22
lynxmanSpamapS: hmm fair point15:23
hallynhm?  I prefer light int he morning, thank you15:24
hallynnight time should be dark.  Lit by xmas lights.15:25
lynxmanhallyn: even if it wakes you up?15:25
* hallyn for a moment relives college :)15:25
hallynlynxman: because it wakes me up15:25
hallynyou know.  at 8am.  feh15:25
twbYou're talking to someone who doesn't get out of bed before 10AM15:25
lynxmanhallyn: that's too soon15:25
SpamapSUnfortunately... my child/wife/alarm clock wake me up long before the sun threatens to do so naturally15:25
lynxmantwb: how does that feel?15:25
hallynall right, ubuntu desktop cd is still hanging on partman15:26
twbNow, OK, it is 2:30AM and I am in the office15:26
twbBut that is not the point15:26
hallynvmbuilder to the rescue15:26
SpamapS"The datacenter!?, what is it?!" ... "Its a dank dark dungeon filled with servers and star wars fans, but thats not important right now."15:26
hallynit crowd?15:27
SpamapSAdaptation of Airplane!15:27
hallyn(sounds like leslie nielsen)15:27
twbI liked when they gave her "the internet" in a box15:27
hallyni figured it crowd had an airplane moment15:27
hallyn'DONT DROP IT'15:27
twbAirplane was awesome15:27
lynxmanSpamapS: I've heard people get lost in datacenters... then they come back as deformed creatures after years of roaming through the cabling...15:28
twbIt's rebadged in .au, so when it was last on the telly I was watching for an hour going "this seems a lot like Airplane..."15:28
SpamapStwb: haha doh!15:28
hallynhm,e how does one have vmbuilder write to a lvm partition...15:29
uaneed help please, i can not install virtual box15:29
twbAdmittedly at that point I had only read the script on usenet, not actually seen the film15:29
uacan you help please?15:29
twbua: that's not part of Ubuntu; it would be better to talk to your vendor (Oracle)...15:29
SpamapSvirtualbox isn't part of Ubuntu?15:30
SpamapSvirtualbox-ose - x86 virtualization solution - base binaries15:30
* SpamapS has never tried to run it on Ubuntu so I'm actually curious15:30
uaspamaps>sorry i didn't understand what you mean15:31
twbAh, mea culpa15:34
twbI forgot there was an open source "edition"15:34
twbua: you probably want virtualbox-ose, which is 4.0 in natty, but not before15:35
uatwb>yes thank you, i tested now, it seems working15:36
RoAkSoAxDaviey: ok so I was thinking we can ship two powernap-eucalyptus configs. One for when in powersave and the other for when in any other action method. The one for powersave would be default and will only have a [ProcessMonitor] for kvm, while the one for any other action method will have a [ProcessMonitor] for /sbin/init15:36
uamay be i've to restart15:36
RoAkSoAxDaviey: they can be installed in /usr/share/eucalyptus/ and the default either symlinked or copied to /etc/powernap/config.d/15:37
uatwb>can you tell me how could i inscrease the size of/boot?thank you15:39
twbua: you probably can't15:40
twbUsually if /boot is its own partition, it'll be a simple primary partition, with another partition immediately after it15:41
twbIn theory it could be on LVM, in which case you can lvextend15:41
twbIf /boot is just part of your normal root filesystem, you can delete other stuff, and/or extend that partition.  But if you're complaining, this is probably not the case15:42
twbNote that vbox images probably don't belong in /boot -- /srv/vm would make more sense15:42
uatwb>i've given 32Mb for /boot witch is own partition, but not it's  full, that's why i'd like to increase it or purge somefiles ...15:47
uvirtbotNew bug: #734984 in debian-installer (main) "Ubuntu server Natty listening to port 953 in tcp and tcp6" [Undecided,New] https://launchpad.net/bugs/73498415:49
uai've given 32Mb for ( /boot) witch is it own partition, for now boot patition is  full, that's why i'd like to increase it or purge somefiles in...15:50
uatwb>are you there friend?15:51
uawhere are you?15:52
=== erichammond1 is now known as erichammond
kpettitI just setup a new ubuntu 10.04 server and I'm trying to move over some apache virtualhosts.  I'm trying to use the default setup where you a2ensite and such.16:50
remix_tjso what is your problem?16:51
kpettitMy sites show up in etc/apache2/sites-enabled but when I try to go to their url's I only get the "default"16:51
remix_tjkpettit: paste an example of the virtualhost16:51
remix_tjto http://paste.ubuntu.com16:51
kpettitif I remove the "default" site I can see my first virtualhost and only my first one.  It doesn't seem to be paying attention to the  ServerName16:52
kpettitit's fustrating becuase same config works on identical ubuntu server.  but I think that one is ubuntu 9.10.  I'll paste...16:52
remix_tjmaybe you copied something that is connected to the old machine16:53
remix_tjonly this?16:53
kpettitIt's odd becuase if I remove the default it will show this domain's settings, but only this one.  Like it's only going to show the first virtualhost or something16:53
remix_tjand other virtualhosts are set as?16:53
remix_tjyes, he serves the first working match16:54
kpettitexactly same as the one I paste except the domain name and directory are different.  I've got 3-4 of them on there16:54
remix_tjkpettit: and you are trying to access to http://www.setuplinux.com16:54
kpettitRight now if you go there it goes to the "default" with is a hello world.   It doesn't pay attention to my virtualhost file unless I remove "default".16:55
kpettitIf I remove the "default" then it only pays attention to the next virtualhost in line for all the other virtualdomains.16:55
kpettitthis is a copy of the ports.conf which has the "NameVirtualHost" directive and such.  I also put in the "default" virtualhost file.16:57
remix_tjeverithing is correct...16:57
kpettityeah that's what I figured.  Haven't had a issue where it only ever paid attention to one virtual host unless I hadn't set the NameVirtualHost directive or something, but it's there so I'm a confused.16:58
remix_tjlet's verify something16:58
kpettitIt's a default brandnew install with updates as of this morning.16:58
remix_tjls -la /etc/apache2/sites-enabled/16:58
patdk-wkin mine, I deleted the default one16:58
remix_tjls -la /etc/apache2/sites-available/16:58
remix_tjso we can check16:58
kpettitIt shows 000-default and my www.setuplinux.com and other sites.16:58
=== JayFo is now known as JFo
kpettitI just verified it's not a permission thing.17:00
remix_tjtail -n 50 /var/log/apache2/error.log17:01
=== jj-afk is now known as jjohansen
kpettitit's something to do with the namevirtualhost directive not working right.17:04
remix_tjmaybe you do not need to add NameVirtualHost *:80 a second time17:04
kpettitI did and one of the virtualhosts worked.17:04
kpettitbut another one didn't so I'm checking on that.17:05
remix_tji've some vhosts with namevirtualhost specified, other not17:05
kpettitit should be a generic thing that you only need to specifiy once17:07
remix_tjkpettit: why you specified on serveralias the same thing is specified on servername?17:08
kpettiti got it wokring.17:09
kpettitfor whatever reason it didn't like everything being in different files.  I copied and pasted all my virtualhosts in the one "default" config and it works17:09
kpettitI have no idea why it works in one config rather than having them in the seperate configs like is supposed to be the default17:10
remix_tjthe default is with different configs17:10
patdk-wkI have mine in 12 different files17:10
remix_tjbecause it includes sites-enabled/*17:10
patdk-wksome files have more than on vhost line, most have one17:10
kpettitwhat I mean by "default" is the file /etc/apache/sites-available/default17:10
patdk-wkyou shouldn't use sites-available17:11
patdk-wkbut sites-enabled17:11
kpettitfor whatever reason on this one my different virtualhosts config files weren't looked at.  But I put them all in the one file and it works fine17:11
patdk-wksites-available is ignored :)17:11
kpettitthat same line is still in there and it works fine.17:12
kpettitso it wasn't causing it to fail.17:12
patdk-wkcause default is symlinked to sites-enabled17:12
kpettitpatdk-wk, yeah I had them all in sites-available and there were symlinked to sites-enabled using the a2ensite commandline17:13
kpettitit would only look at one file.  If I removed default it wouldn't only look at the next virtualhost and not any others17:13
patdk-wkI just ignore sites-available completely17:13
kpettityeah, I normally do that.  I was just trying to follow more the standard on Ubuntu.17:14
patdk-wkseems way too confusing for what I do, to have them doubled up in two directories17:14
kpettitno biggie.17:14
kpettitI like the idea behind it.  It's nice when having lots of virtualhosts so you can turn on/off easy.  But didn't work for me this time around17:15
remix_tjkpettit: the apache2.conf is set at default? no customizations at all?17:24
kpettitremix_tj, yes.  It was a default install as of 2 hours ago17:25
NidHelp6092âñåì ïðèâåò17:25
NidHelp6092åñòü æëàíèå ïîìî÷ íóáó?17:25
remix_tjNidHelp6092: as far as i can see you're doing a pretty UTF-8 test case.17:26
remix_tjkpettit: putting everything in a file works?17:27
remix_tjkpettit: the name of that file?17:29
kpettit /sites-available/default17:29
kpettitI just put all my stuff in the "default" file.17:29
kpettitmy 3 domains are up and running now.   All seems well.  not sure why having them in the different files didn't work.17:30
remix_tjkpettit: try grep sites-enabled /etc/apache2/apache2.conf17:30
remix_tjlet's take a look to the config17:30
kpettitInclude /etc/apache2/sites-enabled/17:31
remix_tjwith * at the end?17:31
kpettitI know it was looking in the directory becuase if I removed "default" and added my own it worked as well.  But it only ever looked at the first file it found.  NOt any others17:31
kpettitno, it's just like I pasted17:31
remix_tjkpettit: try replacing with this17:32
kpettitShoudl it have a * at the end?17:32
remix_tjInclude /etc/apache2/sites-enabled/[^.#]*17:32
patdk-wkmine doesn't17:32
kpettitmy old server doen't either.  I'll give it a try here in a bit though.17:33
remix_tjkpettit: also my lucid server does not17:35
remix_tjkpettit: this is an example of my working vhost on a single file17:36
remix_tjis not much different than yours..17:37
kpettitthat hosed me up.  I'm not sure what's happening with that.  Have to role back.17:37
kpettitusually apache is very straight forward for me.  Oh well, it's all working now.17:41
kpettitthanks for the help remix_tj17:45
* RoAkSoAx is off to lunch18:04
TKswI'm having some problems with a static ip on an ubuntu server. I have configured the network in /etc/network/interfaces and double checked it against other servers on the same subnet (but with another IP off course). When I run "/etc/init.d/networking restart" I get an SIOCADDRT: No such process and the interface fails to come up18:05
TKswAny idea what could be causing this error?18:05
TKswdhcp works just fine18:05
pmatulisTKsw: maybe pastebin you interfaces file18:06
remix_tjTKsw: ifconfig -a and cat /etc/network/interfaces, please :-)18:06
pmatulisdo *not* paste that stuff in here18:06
TKswno no18:06
TKswJust have to get a dhcp adress and then ssh :P18:07
deucepAnyone here configured a samba share to have password authentication?18:17
patdk-wkper user? or per share?18:21
TKswAnyone has any clue what my network problem could be? :P18:23
remix_tjTKsw: remove this two lines18:24
remix_tj network xxx.xxx.102.018:24
remix_tj        broadcast xxx.xxx.103.25518:24
TKswNope, still getting the error18:25
remix_tjare you sure gateway, netmask and address are matching?18:26
remix_tj(i see also ipv6 configured on your eth0...)18:26
TKswhaha, found the error18:26
TKswAfter one hour of looking at the interfaces files I had typed an ip-adress wrong ;P18:26
TKswWe were even two persons looking really hard at it and still didn't discover the error18:27
TKswAnyway, thanks for the help :)18:27
=== Jonny51 is now known as Jonny5
zulDaviey: ping did you upload bind sru yet?18:43
format120hey, im turning an old laptop into an ubuntu server, hopefully should be ssh, ftp, email-(I have a gmail that i want to use for now) and web-(the domain name for this will be my new email pretty soon, i hope) will someone please point me to a few guides? inital googleing didn't turn anything up18:43
Davieyzul, No, doing that today18:43
RoAkSoAxDaviey: they can be installed in /usr/share/eucalyptus/ and the default either symlinked or copied to /etc/powernap/config.d/ --> ideas?18:43
DavieyRoAkSoAx, hmm.. either/or i think...18:44
format120oh, and an IRC server, if thats possible, havent googled it yet18:44
DavieyRoAkSoAx, it's a config file, that people should be able to edit IMO... so a real file in /etc/ is better IMO.18:45
DavieyRoAkSoAx, if it's /usr/share/, it should be static.18:45
RoAkSoAxDaviey: right, but in /usr/share there's "examples" and one of these configs should be default and the other is a choice or backup or additional18:46
format120yep, I would like to include IRC into that list18:46
RoAkSoAxDaviey: and since /etc/powernap is not eucalyptus config it should not go by default there IMHO18:47
DavieyRoAkSoAx, I don't think it matters either way tbh... Personally, adding complexity of a symlink seems unecessary.18:47
DavieyRoAkSoAx, Well fair point, if we consider something like phpmyadmin and apache2... that uses the symlink approach.18:48
Davieyfor a conf.d.18:48
RoAkSoAxDaviey: indeed18:48
DavieyRoAkSoAx, go with that!18:48
Davieymake it so.18:48
format120anyone want to help?18:56
RoAkSoAxDaviey: alrigth18:58
Davieyformat120, I'm really sorry, people aren't ignoring you - we are just all really busy at the moment.  Please hang around, and hopefully someone will help soon.19:00
smoserjamespage, or anyone else...19:02
smoserwondering if anyone is aware of a "generic native launcher" applet19:02
format120ok Daviey19:02
smoserwe're using this nx web runner applet. but it basically just an applet that downloads native binaries, puts them into a user directory and then launcches them.19:03
format120thanks, and im not just waiting for someone to hold my hand, I'm still googlein19:03
smoserit seems like there might be a more generic (open source/modifiable) applet that does that19:03
bobgi rebuilt a  package (asterisk-mp3) and made it available on a local repository but my client ignores this version and downloads it from the official repo.  How do I get my clients to use my local repo with higher priority than the official repo?19:09
jmedinagoogle for apt pinning19:10
Pici!pinning | bobg19:14
ubottubobg: pinning is an advanced feature that APT can use to prefer particular packages over others. See https://help.ubuntu.com/community/PinningHowto19:14
bobgubottu, Pici, thanks.  it seems that pinning control which release a package is taken from . I have the exact version of the file on my local repo (its only rebuilt to fix a appearent build mistake in the official version(https://bugs.launchpad.net/ubuntu/+source/asterisk-addons/+bug/560656)).  How does apt decide where to get a file if it exists in more than one repo? I know I could bump the version number of my build but I would rather19:25
bobg not if I don't need to19:25
ubottuError: I am only a bot, please don't think I'm intelligent :)19:25
uvirtbotLaunchpad bug 560656 in asterisk-addons "The mysql add-on module is out of sync with asterisk" [Undecided,Fix released]19:25
Picibobg: It grabs the most recent version number unless the pinning setting say differently.19:28
RoAkSoAxDaviey: you haven't yet merged the branch that creates the new eucalyptus-admin-tools package right?19:28
DavieyRoAkSoAx, don't /think/ i have19:29
DavieyRoAkSoAx, I merged the adding of it, but not the new package19:29
RoAkSoAxDaviey: ubuntu2 was the one you merged, which was fixing the installing of the missing euca_admin python module19:30
format120is there an automatic way to get ubuntu server on a USB? all the guids I found are outdated, or give you a .exe to do it, and Im on Arch linux19:33
bobgPici, do you know what it does if the exact same filename (package version) exists on more than one repository?  Is it arbitrary which one it chooses?  is the order in the sources.list file significant?19:33
RoAkSoAxDaviey: don't yet merge it though. I'm gonna  do the powernap configs on top of that19:33
Picibobg: I suppose it would be arbitrary.19:34
bobgformat120, when I did it about 6 months ago it was surprisingly difficult. I think that the method I used was to mount the usb stick as a virtual drive on a xen virtual machine and then install Ubuntu into the VM -- i followed some how to  (sorry i don't have any details)19:37
bobgPici, thanks19:37
format120ok, ill do some googleing, thanks19:37
DavieyRoAkSoAx, ack19:39
kirklandDaviey: RoAkSoAx: i prefer the /usr/share + symlink approach19:46
RoAkSoAxkirkland: yeah that's best IMO19:46
kirklandRoAkSoAx: \o/19:47
RoAkSoAxkirkland: Daviey where shall we document this changes though?19:50
kirklandRoAkSoAx: hmm19:51
kirklandRoAkSoAx: at least in http://help.ubuntu.com/community/UEC19:51
kirklandRoAkSoAx: possibly a release note, if the admin needs to take action19:52
RoAkSoAxkirkland: yeah I think a release note is definitely required as this will affect anyone who's running powernap on the NC's19:53
kirklandRoAkSoAx: okay19:54
kirklandRoAkSoAx: i can help you with that, if you like19:54
RoAkSoAxkirkland: sure :)19:54
format120hey guys, I'm trying to setup an ubuntu server, but don't have access to a cd drive.  I could use a USB key, but that looks hard, can someone point me to a guide on installing over the network?  I'm in Arch linux on this box, by the way19:57
geekbriis it possible somebody might have a clue why my following cron line spits out an error about end of file unexpected expecting ")".*/2 * * * * . /etc/web/conf.d/reporting.env && cd /home/reporting/trunk/crons/ && echo "---------------------------------- `date`" >> /var/log/fc-crons/KPI_build.log && /usr/local/bin/php /home/reporting/trunk/crons/freecause_daily_KPI_build.php $(date -d yesterday +%Y-%m-%d) >> /var/log/fc-19:58
geekbricrons/KPI_build.log 2>&119:58
format120wait, nevermind, I didn't bother to check the ubuntu website, and fourms said that it was really complicated19:59
genii-aroundformat120: You might want to look at https://help.ubuntu.com/10.04/installation-guide/i386/linux-upgrade.html it shows a method using debbootstrap19:59
_rubengeekbri: i'd put all those commands in script and have cron call that .. much cleaner imo, might ease up the debugging too20:04
RoAkSoAxkirkland: should the symlinking be handled in eucalyptus-nc.postinst or shall I just tweak the packaging for that?20:04
geekbri_ruben: i may just very well do that, as it seems it runs fine as a bash script20:04
_rubengeekbri: i try to keep my cron entries as clean as possible, so i basically write a script whenever it needs to do more than 1 thing ;)20:05
geekbri_ruben: i was just trying to avoid the internal dilema of where do i keep my script that run as crons ;)20:07
_rubeni tend to just shove 'em in /usr/local/(s)bin/20:08
sorenlynxman: Thanks!20:09
_rubenor depending on the "frequency", one of the cron.{hourly,daily,weekly} dirs20:09
geekbrii stil am dying to know what i've done wrong however :). I noticed a couple things. one since im using crontab -e i didn't need the users name, and two i used . to source the .env file instead of source20:09
kirklandRoAkSoAx: it should be in a debhelper .links file20:10
_rubengeekbri: you might be using bashisms and cron might be using sh .. just guessing here though20:10
kirklandRoAkSoAx: unless logic is required20:10
kirklandRoAkSoAx: in which case, postinst would have to be used20:10
_rubenand i tend to avoid crontab -e as well ;)20:10
geekbri_ruben: im pretty sure that is the problem.  I think its the entry  $(/bin/date -d yesterday +%Y-%m-%d)20:10
_ruben/etc/cron.* is already scattered enough ;)20:11
RoAkSoAxkirkland: yeah i'm just using dh_link in debian/rules... btw... I think I'm just gonna ship 1 conf that has kvm-euca = "kvm" and init = "^/sbin/init". Though kvm-euca will only be enabled20:11
RoAkSoAxso that if admin changes from the default action of powersave to any other one, they'll have to change use the init ProcessMonitor rather than kvm-euca20:11
geekbri_ruben: i think im just going to go ahead and put this one in a bash script :)20:13
benccwith l7 filters, can I port forward http:// requests to port 8000 and ws:// requests to port 9000?20:49
benccI found good iptables resources but not l7 filter resources20:50
_rubenbencc: no20:50
bencc_ruben: so what do i7 filters do?20:51
_rubenbencc: NAT happens at the very first (SYN) packet, which doesn't have the URI in it20:51
bencc_ruben: so there is nothing I can do?20:51
_rubenthere's a lot of things you can do, just not what you want to ;)20:51
benccexcept for a proxy?20:51
_rubenproxy would be best solution for this, yes20:52
bencc_ruben: what about using port 8080, can I count on it to be open for most users?20:53
benccfor http of course20:54
_rubenfor certain values of "most", sure ;)20:55
_rubencorporate businesses filter whatever they feel like, though i think 8080 would be kinda safe20:56
bencccool. 8080 it is :)20:56
benccif my users will be blocked, I'll send them here to complain20:57
_rubenor just use ipv6 and don't have to deal with the ipv4 depletion issues and port overloading20:57
benccwhat do you mean?20:57
_rubensounds to me your trying to offer 2 services on the same port on a single ipv4 address ... which is a result of the ipv4 depletion (no more ipv4 addresses "soon") ... ipv6 is one of the solutions to that20:59
benccaren't I depend on the hosting service?21:00
_rubenusualy you are, tho any self-respecting hosting service would already offer ipv6 or atleast be able to offer it in the very near future21:01
_rubenthen again, i'm an optimist from time to time21:01
benccthey usually charge for additional ip addresses21:01
benccit doesn't cost much but it is another manual step in the deployment21:02
jkgof course a service accessible only over ipv6 is currently not accessible to many, many people...21:03
_rubenmake sure the service is "interesting" enough, put it on non-standard port on ipv4, and standard port on ipv6 ;)21:04
_ruben"forcing" others to bite the bullet as well21:04
benccconvince fb to switch to ipv621:05
* Patrickdk has switched fully to ipv6 awhile ago21:07
Patrickdkthe only thing I have that doesn't do ipv6 is fail2ban and mysql21:08
_rubenbencc: fb as in facebook? they're on ipv6 atleast partially21:12
bencc_ruben: so when I go to facebook.com I see ipv6 ip21:12
_rubennah, there's www.v6.facebook.com21:13
_rubenstill fetches most of its resources over ipv4 though i think21:13
benccserver not found21:14
Patrickdkworks here21:14
_rubensame here21:15
Patrickdkit freaking redirects me to ipv4 though21:17
PatrickdkHTTP/1.0 302 Found21:17
PatrickdkLocation: http://www.facebook.com/common/browser.php21:17
Patrickdkextra fail, they must be doing a ipv6 http proxy -> ipv4 backends21:17
shaunoodd, I get sent to Location: http://www.v6.facebook.com/common/browser.php [following]21:18
PatrickdkYou are using an incompatible web browser. (firefox 3.6)21:19
Patrickdkman facebook failing all over the place21:19
Patrickdkya, this time I got recirected to that also21:20
SpamapSturbotax didn't want to run on chromium for linux.. changed the useragent to windows.. finished taxes in 20 minutes. Suck it Intuit.21:20
Patrickdkfacebook must be having ipv6 routing issues21:20
format120speaking of ipv6, can you set that up as a service? like ipv6 routing, then PAT onto an ipv4 external network?21:21
=== Bilge is now known as magic8ball
Patrickdkset it up as a service?21:22
=== magic8ball is now known as Bilge
Patrickdkyou mean, nat64?21:22
remix_tjformat120: no no no!21:22
Patrickdknat64 + dns6421:22
remix_tjnat to external ipv4 is pretty useless21:23
Patrickdknot if your running an ipv6 only internal network21:23
remix_tjwhat is the utility of running ipv6 internally if you are not connected to ipv6 public network?21:23
Patrickdkwho said it wasn't?21:24
Patrickdkbut not the whole world is ipv6 yet, so21:24
format120I did Patrickdk, and I know its pointless, but its fun\21:24
Patrickdkoh? I didn't see the, only ipv4 external21:24
remix_tjyou can simply use a dual stack network, i did it in my office21:26
remix_tjor you can try messing around with totd and ptrtd21:27
shaunoif you're going to go that far, why not just find a tunnel broker? with that 1 more step, you could make the 6 actually useful21:27
format120it sounds like fun.  I have fios, and might be getting a new server, so i might add a fiberoptic nic, and just have fios directly to the server, and use it as my router, that would be sweet21:28
remix_tjyou can build in very few minutes an ipv6 router with a linux machine connecting your network to the ipv6 internet using a tunnelbroker like HE.net21:29
remix_tj(as i did at work)21:29
format120cool, well, I'm working on installing my first server, ever, right now, so it might be a while, with many dumb questions inbetween21:32
Fredrickhey, what landscape? it seems like its for managing large clouds of servers. do i want it to manage my updates? this is my only, and first server22:40
RoyKFredrick: landscape works well, but it isn't free22:41
Fredrickoh, lol, so i don't want it.22:41
RoyKpkgsync or similar systems exist for doing the same22:42
Fredrickim builing the first 100% free network, gifted crappy PC's linux OS's, and free use of my rich friends soler panels, when hes not useing them, and if I do all of his yard work. lol22:43
Fredrickso what would be the best choice for a single server?22:43
RoyKwell, all that depends on the load etc22:44
Fredrickprobably small, server is for DHCP and other router stuff, maybe a little ssh, ftp, and if im lucky, webserver22:45
Fredrickoh, and email22:45
Fredrickthats why im making it, the rest are just bonuses22:45
Fredrickim thinking, no automatic updates? and just ssh in, and do sudo apt-get update every now and again?22:46
RoyKand apt-get dist-ugprade22:47
RoyKdist-upgrade, even22:47
RoyKapt-get update will only update the index22:47
Fredrickoh, how is that diffrent22:47
RoyKsecurity updates will happen automatically if chosen so in the setup22:47
Fredrickso pick that one?22:47
RoyKFredrick: apt-get update updates the package index, but doesn't download anything, use apt-get dist-upgrade (or perhaps apt-get upgrade if you're paranoid) to upgrade the system22:48
Fredrickyea, I went with that one.22:48
Fredrickok, why would apt-get upgrade be more secure than apt-get dist-upgrade22:49
air^AFAIK upgrade doesn't do kernel upgrades.22:49
RoyKnot really - dist-upgrade will only upgrade to the latest sub-release (as in from 10.04.2 to 10.04.3 when that eventually arrives)22:49
RoyKair^: even dist-upgrade doesn't upgrade to 2.6.35, which is recommended22:50
Fredrickoh, ok22:50
Fredrickso how do I get up there?22:50
RoyKapt-get install ...22:50
Fredrickmy install disk is kinda old, so i might be back at .122:50
Fredrick10.4.1 that is, not 10.022:51
RoyKthere is no 10.022:51
RoyKthere is 9.10 and 10.0422:51
Fredrickso just apt-get install is more prefer than apt-get install upgrade?22:52
FredrickI meant 10.01, but i hit enter to early22:52
RoyK10.01 doesn't exist either22:52
RoyKit's year.month, with 6 months between each release22:53
Fredrickand its barely perfered over apt-get install dist-upgrade?22:53
Fredrickoh, ok22:53
RoyKthere is no such thing as "apt-get install dist-upgrade"22:54
Fredrickthen why so long in between 10.04, and 10.10,22:54
RoyKapt-get install somepackage22:54
RoyKor apt-get dist-upgrade22:54
RoyKFredrick: how long between april 2010 and october 2010?22:54
RoyKit's quite simple22:54
Fredrickerr i mean why are we still on 10.04, and not 10.1022:54
ubottuLTS means Long Term Support. LTS versions of Ubuntu will be supported for 3 years on the desktop, and 5 years on the server. The current LTS version of Ubuntu is !Lucid (Lucid Lynx 10.04)22:55
air^10.04 is LTS.22:55
Fredrick4, plus 6 is ten22:55
Fredrickyou said it was 6 months,22:55
RoyKbetween releases, yes, but two years between LTS releases22:55
Fredrickok then22:55
RoyKfor a home setup, any release will probably do22:56
RoyKbut for production setups, I use LTS22:56
Fredrickthanks, i only have one keyboard, so i have to switch it back to the server, but ill stay in the channel, and switch back when i have a nother question22:56
RoyKFredrick: isn't your server networked? ;)22:57
Aisonhello, where do I set the network settings and nfs mount settings so that nfs is mounted AFTER the network is up?22:59
Aisoncurrently nfs tries to mount the fstab entries before the network is up and so it fails23:00
Patrickdkwhat nfs version?23:00
Patrickdknormally, _netdev23:00
Patrickdknfs4 ignores _netdev23:00
Patrickdkhave to do it manually23:00
Aisonvery nice....23:01
Fredrickok, im at Software selection, whats a LAMP server?23:24
PiciFredrick: Apache, mysql, php23:24
Fredrickok, why would I want that?23:25
Fredrickwhat would a user be doing, in order to require a Lamp server? arent apache, and php programing languages? and msql a database?23:28
Fredrickok, well what about a Tomcat Java server?23:31
shaunoapache's a web server.  php is a programming language, and mysql a database.  together they make the stereotypical linux-based webserver23:31
Fredrickoh, thanks23:32
Fredrickwhat about Tomcat Java?23:32

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!