[00:14] Aison, what's your setup [00:16] well, i'm using an 8port adaptec raid controller with 8x1TB in raid6 mode [00:16] so i've got 6TB [00:17] the lan adapter is a dualport intel pci-express server nic (running in bonding mode with the core switch) [00:17] but I guess the bottleneck is this samba [00:17] ;) [00:21] damn, it's late, i have got go now, i'm back tomorrow ;) [00:21] alright [00:21] try doing a file copy with `iostat -k 2` running and watch the kb/s === chuck_ is now known as zul [00:31] SpamapS: ok, cool - i think it would be best if you'd briefly comment on how you think they should be handled, and that you will do it when you have time if noone else does first, then unassign, that would be ideal [00:40] hi === dendrobates is now known as dendro-afk [01:23] Hello, I'm having a weird (packaging?) issue with munin-node on 10.04 [01:23] for some unknow reason the config file /etc/munin/munin-node.conf is missing [01:23] even though dpkg -c /var/cache/.../munin-node.deb indicate that this file is in the package [01:24] If a conffile is deleted, easiest way to get it back is to *purge* and re-install. [01:24] and dpkg --info indicate the same [01:24] I have tried to purge and reinstall without success [01:24] removing or reinstalling won't get it back because it assumes you deleted it for a reason [01:24] munin-node.conf is still missing [01:24] dsalvetti: in that case I don't know. [01:24] FWIW I recently switched from munin to collectd, and it's much nicer IMO [01:24] how can dpkg know that I have deleted the file? (vs it's a fresh install) [01:25] dsalvetti: because the file isn't there [01:25] twb: thanks for the tip I'll check it out [01:26] but if I purge apache (for instance) it will remove apache.conf [01:26] and apache.conf will come back is I reinstall apache [01:26] Yes, which is why I said purging should work [01:26] how is that different in the munin-node case? [01:26] purging removes conffiles, remove leaves them as-is [01:26] purging does not wor [01:26] *work [01:26] dsalvetti: and as I said, I don't know why that is [01:26] oh sorry I misread you before [01:27] No problem [01:27] I can easily fix my problem by copying munin-node.conf from somewhere else [01:27] but I would like to see if there is a way to debug the issue [01:28] anyone has any suggestion of what I could do? [01:28] http://paste.debian.net/111774/ <-- my notes for collectd [01:28] Re debugging, I have no ideas [01:30] twb: thanks for the link, what do you prefer in collectd over munin? [02:10] Good evening... is anyone here familiar with the Canonical Ubuntu images on EC2? [02:12] !anyone [02:12] A large amount of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll. [02:15] Hah, thanks for the reply... I rebooted a instance based on AMI ami-2c57a545, and when the instance came back up my /etc/passwd was reset and the user I'd previously created was gone. How can I presist users across reboots? [02:17] I don't know anything about EC2, but an obvious way would be to store auth details on another server, i.e. LDAP, kerberos or NIS [02:18] Wow, thanks for wasting my time twb... that's why I asked if you knew EC2. I have no intention of doubling my costs on EC2 by running another instance just to store auth info. [02:18] Plonk. [02:19] CompDan: I would back up your data and then try dist-upgrade [02:20] 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. [02:21] I'm guessing this issue has something to do with cloud-init, but I know nothing about cloud-init and the documentation seems nebulous at best... :-/ [02:21] CompDan: are you using a EBS volume based ami? [02:21] http://uec-images.ubuntu.com/releases/10.04/release/ [02:21] Yes, ami-2c57a545 - ebs/ubuntu-images-testing/ubuntu-lucid-daily-i386-server-20110322 === Theravadan|afk is now known as Theravadan [02:29] Hrmm.... now I can't recreate it... great. [02:30] Well, I guess nevermind. If it recurs, I'll be back. :-/ [02:31] CompDan: yea I couldn't reproduce it either with the same ami....I would use the ones from this list http://uec-images.ubuntu.com/releases/10.04/release/ [02:43] Going to rebuild with one of the release AMIs and test this again... Thanks for letting me bend your ear (so to speak) thesheff17. [02:57] smoser: 9.04 to 10.04 isn't a supported upgrade path (re your blog post) [02:58] where did you see that ? [02:58] it was probably a typo [03:00] ScottK, ^ [03:17] smoser: In your update note on http://ubuntu-smoser.blogspot.com/2010/04/upgrading-ebs-instance.html [03:18] smoser: Except on review I see I misread it. [03:18] ah. yeah. [03:18] No. No I didn't. [03:18] that part wasnt an update, but could hav been more clear, yes. [03:18] This same basic process should also allow you to upgrade across a release, perhaps from a 9.04 Alestic instance to Ubuntu 10.04 LTS. [03:18] you'd have to go 9.04 -> 9.10 -> 10.04 [03:19] Yes. [03:19] You and I know that, but non-developers wouldn't. Not a big deal since it's not part of the update. [03:27] I am using an EC2 instance to, among other things, generate an image. I am ssh'ed into the EC2 instance. What's the easiest way to display that image on my local screen? 'display' is an ImageMagick program and that's crazy huge for showing a png to the screen. What else should I use? [03:29] apache and a browser? :) [03:30] [apache and a browser] That's my backup plan. [03:32] Sigh, the micro instances are pretty darned slow. :-) [03:47] Just out of curiousity, is it possible to force a package install via apt-get (like mysql-server) that has interactive dialogs to be non-interactive? [03:51] CompDan: look at this last post http://ubuntuforums.org/showthread.php?t=867747 [03:52] Hee. I first had to do that with Solaris and Java. Bah. [03:55] ah, thanks. I feel like such a n00b, all my experience is on non-Linux UNIX platforms, lol. [03:55] CompDan:http://padwasabimasala.posterous.com/non-interactive-scripted-mysql-install-on-ubu [04:02] Hi, I'm trying to install some packages by using the apt-get install command, but everytime I do that it says: The following packages have unmet dependencies: libwxgtk2.8-0: Depends: (tons of other packages listed) [04:02] Everytime I use it, that package pops up. [04:04] Tommy_K: did you do apt-get update && apt-get upgrade i'm pretty sure it will just install it. [04:04] Nope, tried it. [04:04] Earlier one of my team members had to install that package, which was a .deb [04:05] Tommy_K: well I see it in the repo libwxgtk2.8-0 - wxWidgets Cross-platform C++ GUI toolkit (GTK+ runtime) [04:05] Well, I did as well.... usually I check the repository, but this time it wouldn't take it [04:06] And my team member said he tried to use apt locally on that .deb he downloaded [04:06] Could that have caused it? [04:06] usually it install dependencies. wonder if there is a problem with multiple version on one machine. [04:07] you can't just do apt-get install libwxgtk2.8-0 [04:07] Tommy_K: also I would make sure you used the right repo for the right version. [04:07] of ubuntu. [04:07] It migth be worth apt-get remove libwxgtk2.8-0 followed by apt-get install libwxgtk2.8-0 [04:08] Tommy_K: run "yes y | aptitude --simulate install" and pastebin the output. [04:09] That worked [04:09] @ Mathuin [04:09] Yay! I win! :-) [04:09] Never mind, then :-) [04:09] :) [04:09] Thanks much! [04:10] You are welcome. [04:57] hallyn: What I've been doing is tagging such bugs with the tag 'upstart' .. which jhunt and I review every thursday. [05:16] is it possible to ssh -X to view a virtualbox window on my server? [05:22] CoolestGeek: Some versions of VirtualBox support RDP, so you could tunnel that over SSH and use rdesktop to see it, I think. [05:23] yea I know that the virtualbox i'm using supports RDP, as I rdesktop into a headless windows XP [05:24] however, dumbass here deleted the xp.vdi (the virtualbox image) [05:25] and want to set it back up, it can be done via the cli, but it takes ages compared to the GUI mode of setting up a virtualbox machine, so I would really like to set it up via a GUI, but it's not loading via -X. It did originally, as that's how I set it up to begin with.... [05:29] CoolestGeek: OK, so it is the virtualbox Manager window that you want to use remotely, not a virtual screen of a VM. I've never tried it, but it seems like it "should" work like any other X application. === dendro-afk is now known as dendrobates [05:30] yea, it's the manager window I need, the Virtualbox did work it before [05:30] but it was about a year ago I set it up [05:30] i deleted it totally by accident today :S [05:31] CoolestGeek: Ok, so check you can ssh -X other GUI apps from that machine, and then try it with the virtualbox manager, and if it gives you an error, paste the error for us to see. [05:31] when I run virtualbox once i've connected via ssh and used -X it just waits.... [05:31] it does work with other apps [05:32] i've got transmission working now [05:32] it doesn't give an error [05:32] xlogo is a good test program for ssh -X [05:33] vbox is a GTK2 program IIRC, which will be noticably laggy even over a 10mbps line. [05:33] hmm well the connection here is shit (australia) [05:34] CoolestGeek: It might be easier to script the VM setup using the command line interface, rather than fix the issue with remote use of the virtualbox GUI :) [05:34] so maybe I wait till I'm on a faster line and retry [05:34] hmmm yes, but i've not done it like that before, so am a little weary [05:34] but I suppose i will learn things. [05:34] CoolestGeek: oh, you can use it, it'll just be slow and you need to be accordingly patient [05:35] yes, I remember from the 1st time, I was in the UK then and had a considerably faster connection [05:35] so... as we're on the subject of this, does it post a security threat having a virtualbox accessible? [05:36] the XP I had required a login, but is it safe? [05:36] IMO Windows machines are not safe on ANY network, end of story. [05:37] The company has openly said that they do not consider security important for their Windows line [05:37] yea, but I need it on the server to run various crapware not available to linux [05:38] anyway... so you recommend setting up via the cli [05:38] IMO sysadmins should not need nor use a GUI for their sysadmin role [05:38] it's odd, as transmission is running over X now, slow, but still running [05:38] (If they have one on their desktop, I guess that's OK.) [05:39] virtualbox just waits.... [05:57] CoolestGeek: another way to do it is to run a standalone vnc server on your virtualbox host and then tunnel in a vnc client over ssh. [05:58] and then run the virtualbox GUI manager within the vnc session. [05:59] hmmm [05:59] so... I install vnc onto the server [06:00] then from my local machine i use vnc to connect to that? and set it up? [06:00] yep. tunnel the vnc session over ssh. [07:02] Can someone tell me why so many people use Alestic AMI's rather than those found on http://uec-images.ubuntu.com/ ? [07:04] Alestic used to support the ami...now they are supported by ubuntu devs. use http://uec-images.ubuntu.com/ [07:04] Oh, ok, that makes sense. Thank you! [07:07] itsTodd: Alestic is a great resource though as well. [08:05] Morning everyone [08:10] evening for me, but g'morning to you :) [09:12] Hi. I need to avoid mysql to be started on boot. Am new to this startup jobs. /etc/init/mysql.conf exist. If I comment the first start lines, mysql is not started. But then "/etc/init.d/mysql start" does not seems to work. [09:19] Blinkiz: you probably only want to comment the 'start on' lines, nothing else. Then start mysql with '$ sudo start mysql' [09:19] TeTeT, thanks for the suggestion. It was a apparmor problem in the end.. [09:23] hi ! http://paste.ubuntu.com/584698/ <= I would like to know why the pam module "pam_script.so" is not called? [09:39] Fricass, maybe because you met one of the previous filters and they're set as sufficient? [09:40] yep indeed raphink but I would like to leave them as sufficient and called in all cases pam_script.so [09:40] don't know if it's possible.. [09:40] sure [09:40] you'll have to put it as required on top of the stack [09:40] this way, login will fail unless pam_script.so succeeds [09:41] Yep But pam_script MUST be called after the operations done by pam_unix or pam_perso .. [09:41] That's the point :( [09:41] hehe [09:41] let's see [09:41] then pam_unix.so and pam_perso.so are not sufficient [09:41] they're required [09:42] Fricass, so you would like to make sure one of the two (pam_unix | pam_perso) are matched [09:42] and THEN make sure pam_script is also met [09:42] right? [09:42] exactly [09:43] as in [09:43] if pam_unix fails, pam_perso doesn't fail, and pam_script doesn't fail, it's ok [09:43] if pam_unix doesn't fail, pam_perso fails, pam_script doesn't fail, it's ok [09:44] yep [09:44] and what if both pam_unix and pam_perso fail? [09:44] can it still succeed if pam_script succeeds? [09:44] no [09:44] i can't [09:44] it can't [09:44] alright [09:44] a truth matrix can help to clarify the problem [09:45] in my opinion it's not possible :/ [09:47] hmmm [09:51] Fricass, what do pam_perso and pam_script do? [09:52] pam_script uses a file from pam_perso or use the authentication token from pam_unix [09:52] one of my idea is to remove pam_script and called a script at the session opening raphink [09:53] and leave pam_perso and pam_unix as sufficient [09:54] I'm guessing you wrote both pam_script and pam_perso [09:54] since they don't seem to be standard [09:54] :) [09:54] right [09:55] hmmm [09:55] how about [09:55] making pam_unix.so and pam_perso.so optional [09:55] instead of sufficient [09:55] this way they don't allow to success or fail, they're just run [09:56] optional - the success or [09:56] failure of this module is only important if it is the only module in the stack associated with this service+type. [09:56] so they will be run [09:56] but eventually, it's pam_script that will be required and decide whether auth succeeds or not [09:56] no pam_script just runs commands it doesn't decide [09:57] only pam_perso or unix decide [09:57] that's not possible [09:57] pam_script is required, that means it must return a status [09:57] the goal of the stack is not to run commands, it's to authenticate === xampart_ is now known as xampart [09:58] so indeed if you only want to run commands, maybe using sufficient for pam_unix and pam_perso and running pam_script appart would be better [09:58] Indeed you're right [09:59] But I need to write a shell script which is called after the auth process and that can take the $userid and $password .. [10:00] And I don't see how to do that with a simple shell script (easier with a pam module : PAM_AUTHTOK, PAM_USER ..) [10:00] may I ask what is your need? [10:02] I need to take the $user and $passwd ; then depending on $user I use $passwd to do some stuff with partitions. That's the goal of my pam_script. [10:02] If I can write a shell script that can take $user and $passwd it would be great I think [10:03] sorry for insisting, but is there a way you could do without the password? [10:03] No [10:03] like using sudo... [10:05] No because the password provided is not the standard one, it's used with smartcard [10:05] ok [10:07] I'm stuck raphink ! [10:08] you need the password to manipulate the partitions? [10:09] yep I need to get it [10:11] I think you're stuck indeed ;-) [10:11] I'd really try to get rid of the passwd restriction [10:12] :( [10:12] once the user is authenticated in the system, there must be a way to use another auth token for the parititions, no? [10:17] no I need the one used in authentication [10:21] New bug: #741589 in tomcat6 (main) "tomcat cron deletes app log files after 14 days" [Undecided,New] https://launchpad.net/bugs/741589 [10:21] Fricass, I'm out of ideas for you ;-) [10:22] np raphink I thank you for your time [10:23] raphink: once logged, you don't know if it's possible to get the password provided on auth system? [10:23] I would hope not ;-) [10:23] that would be quite an issue [10:24] imagine if you could get my password once I'm logged, you could use my sudo rights... [10:26] yep [10:30] what kind of partition stuff do you need that requires a password? [10:37] Fricass, hi there. Notice some questions how a script can ask for a password. It's easy in batch. Just use something like "read -s passwd". -s means it will not be echoed in stout. === jjohansen is now known as jj-afk [10:37] batch = bash [10:38] Fricass, Then use can use that variable to put into something else. Like it do: echo "$passwd | cryptsetup luksOpen /dev/disk/by-uuid/fe9acab3-1434-43a6-9c8a-73f7d1d0e2bd 500G" [10:39] Blinkiz, Fricass doesn't want an interactive script, he wants to grab the password from pam [10:39] so users only have to authenticate once [10:39] raphink, aha, gave it a try anyway :) [10:39] I hope not pam can tell my password to a script. Kinda security risk [10:40] even root? [10:40] even root [10:41] even pam_unix uses shadow, which contains encrypted passwords, not clear text [10:41] root shouldn't need my password. he can use my privs without it [10:41] (unless when shadow is not activated, but the passwords are still encrypted anyway) [10:42] Fricass, clear text passwords are not supposed to be accessible anywhere [10:42] raphink: I got an idea ; I create a pam_check which is required and checks some results [10:43] then pam_unix, pam_perso are optional, pam_script required (always OK) and pam_check required [10:43] then pam_check will result the auth process [10:43] where do you put pam_check? [10:43] on top of the stack? [10:43] bottom [10:43] I do something similar currently to mix pam_unix (including nss-pgsql) and pam_ldap [10:43] since my users in ldap all have a uid > 60000 and my users in pgsql are < 60000 [10:44] hm [10:44] I think it's gonna work [10:44] I put a pam_succeed.so uid > 60000 [10:44] I see [10:48] So I'll try this solution magic raphink ! [10:48] :D [10:48] let me know [10:48] pam_succeed is an existing module raphink ? [10:49] yes [10:49] !! [10:49] see ls /lib/security [10:49] pam_succeed_if.so sorry [10:49] e.g. [10:49] auth required pam_succeed_if.so uid > 60000 [10:49] ok np [10:49] * raphink thinks pam modules need a good documentation in debian/ubuntu [10:50] raphink: do you think it's possible to do a think like pam_succeed_if.so file is-in directory/ ? [10:50] How do I get support for SftpUmask in sshd_config? [10:54] SlimG: install a version supporting this directive, e. g. an openssh server patched with http://sftpfilecontrol.sourceforge.net/ [10:56] joschi: that patch is only for 5.4p1, I have 5.5p1 [11:10] hi guys, in ubuntu-server iptables, is it possible to add the source as a hostname instead of an IP? [11:12] twister004, I do not know the answer to that but I can guess. Firewall Builder uses script to first lookup hostnames that it converts to IP numbers and put it in iptables. Also, iptables/kernel does not really use hostname to make rules. So no, I do not think its possible [11:13] it works just fine [11:13] but it won't give you want you want :) [11:13] dns changes will never take effect [11:25] i just installed ubuntu server 10.04 with raid1 (software) and get error ( target filesystem doesn't have sbin/init ) after first boot, somebody can help me out? [11:34] patdk-lap.. so, if my hostname association changes, it wont work? [11:42] <_ruben> twister004: not without reloading the ruleset after the dns change [12:20] I've posted a bug and required steps taken to fix the default cobbler package on Natty Alpha 3 - https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/741661 [12:20] Launchpad bug 741661 in cobbler "Web UI does not work from default install (2.1.0~bzr-2009-0ubuntu1)l" [Undecided,New] [12:20] Do I need to post this to the mailing list? never done this before... [12:26] New bug: #741661 in cobbler (universe) "Web UI does not work from default install (2.1.0~bzr-2009-0ubuntu1)l" [Undecided,New] https://launchpad.net/bugs/741661 [12:39] zul: ⤴ [12:40] thank ill take care of it [12:58] hello, dual starup my ubuntu server hagup, any idea how to fix it or i should reinstall, because i don't get any error [13:00] alami: new install? [13:03] pmatulis: yes i mean new install, but the problem is: can i copy iptables configuration? [13:04] alami: you think the hangup is caused by iptables? [13:06] no no the hangup is caused by a update two week ago, i have install some but i forget it, after apt-get update and upgrade, the server stay on startup after bios [13:09] morning all [13:09] hello andreserl [13:10] howdy raphink [13:10] fine thanks [13:10] you? [13:11] pretty good [13:12] alami: iptables rules are created by issuing the iptables command (for each rule). best is to gain access to the list of commands and then apply them to your server === Jonny51 is now known as Jonny5 === Jonny51 is now known as Jonny5 [13:17] alami: but maybe i misunderstand what you mean by 'copy iptables configuration' [13:19] pmatulis, i don't know iptables good, and i have see if there is some to copy this rule, or something like that, but i can list this rule and copy them and do it another time after the new installation+ [13:21] alami: alright. you should also look into ufw [13:21] !info ufw [13:21] ufw (source: ufw): program for managing a Netfilter firewall. In component main, is standard. Version 0.30.0-1ubuntu2 (maverick), package size 140 kB, installed size 804 kB [13:21] ufw == uncomplicated firewall [13:21] i don't understand that ufw but i will google it [13:22] https://help.ubuntu.com/community/UFW [13:23] why i need that? i have right now i webmin acces to the server, i can excute command from there i will only excute iptables --list and copy them to a file.txt [13:25] pmatulis do you understand me [13:26] alami: i think so. but i would stay away from webmin. it can mess things up on ubuntu [13:26] !webmin [13:26] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. [13:26] webmin is evil [13:27] i thing that why my system is hanging up [13:28] hggdh: around? [13:30] just the other day webmin messed up a bind/dns setup [13:30] (as i was made aware) [13:31] webmin doesnt seem reliable [13:32] lol [13:32] Daviey, available? [13:33] hggdh, o/ [13:33] Daviey, we still have the euca bug to work out [13:34] hggdh, yeah... i am tied for the next 2.5 hours at least. :( [13:34] hggdh, did you complete that reinstall last night? [13:34] i don't found also any iptable rule or config files [13:35] Daviey, (a) I can wait; (b) yes and additionally: sometimes -- at least twice, so far -- we *did* get IP addresses [13:42] hi...I can't edit a file, alldough I have permissions to do it. The group has write access and I'm part of the group. the file system is ext4 mounted with 'default' and the files are not immutable [13:47] m_tadeu: look at the permissions of all parent directories. it can also be an apparmor issue [13:51] pmatulis: it's inside /var/www, and I'm part of www-data...the group has write permissions inside that dir and sub dirs...care to explain that apparmor issue? [13:54] m_tadeu: apparmor imposes further restrictions on r/w on some directories. check under /etc/apparmor [13:57] hggdh, Oh great.... I'd rather totally failure or total success... sometimes getting an IP addresses sounds painful to debug. :/ [13:58] Daviey, fun, is it not? Here [13:58] hggdh, It's more than fun, it's total excitement.. [13:59] Daviey here´s what I found so far: when you start fresh euca, all instances fail -- sorta: they start, but never get metadata [13:59] then, magically, the get both metadata *and* ip addresses [13:59] then, also magically, they do not anymore [14:00] during *all* this time euca's own dhcpd fails to start. Consistently. At least we do have a consistent error somewhere [14:01] so... who is providing euca with ip addresses -- and mind you, the correct ones? === Jonny51 is now known as Jonny5 [14:04] hey guys how can i vew a list of cron jobs that i have on my system? [14:04] crontab -l [14:05] and check /etc/crontab and /etc/cron.d/ [14:09] zul: howdy [14:10] kirkland: whats up? [14:10] zul: do you want to take a look at https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/741661, or would you rather i fix it? [14:10] Launchpad bug 741661 in cobbler "Web UI does not work from default install (2.1.0~bzr-2009-0ubuntu1)l" [Undecided,New] [14:10] kirkland: yeah i was going to add it to a Readme.Debian [14:10] zul: are we taking it as far as we can, programmatically already? [14:11] kirkland: yes i think so [14:11] zul: i'd think we should be able to do the a2enmod and apache2/conf.d changes, no? [14:11] kirkland: well i already talked to clint about this and he thought no [14:12] zul: hmm, i'd think we should be able to do all of the steps he details in there, except for the authentication change [14:12] * RoAkSoAx recalls having seen postinst scripts doing a2enmod [14:12] zul: and that one we could improve upon in 11.10, perhaps with a debconf question [14:12] yeah but we removed them [14:12] zul: at SpamapS request? [14:12] kirkland: doesnt matter to me really if you want go ahead [14:13] zul: yeah, i'd like to get this as absolutely far as we can; probably everything but the auth change [14:13] zul: and even that one, I might add a low priority debconf question for username and password [14:14] I can login with cobbler user/pass right now [14:14] without having to do the htdigest [14:16] kirkland: im open to anything but im on a call right now [14:16] zul: okay, no problem [14:16] zul: mind if I take a crack at it later today? [14:16] kirkland: go ahead [14:16] zul: i'll run my changes by you, if that's cool [14:17] kirkland: yep [14:19] kirkland / zul.. I think we can do it, but to do it smart is harder... :)... essentially.. a2enmod is probably not ideal as we don't remember the state it was before we installed. So if you removed cobbler, we'd leave it not as the user is expecting (if i had a module enabled for another app). [14:19] I thought we did something clever in the conf.d... did that not get committed? [14:20] no it didnt it kind of broke your apache config [14:27] New bug: #741748 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 75" [Undecided,New] https://launchpad.net/bugs/741748 === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [14:29] I can't edit /boot/grub/grub.cfg as root...howcome? [14:31] m_tadeu: you seem to be having a lot of permissions problems. odd. but if you read that file you'll see you're not supposed to hand-edit it [14:31] is there a grub.cfg? [14:31] hwo are you trying to open it? [14:31] how [14:31] sudo -s....then vi grub.cfg [14:33] should work [14:33] what error? [14:34] vi says it's open with readonly permissions [14:35] @ALL: Anyone have TACACS+ (tac-plus) experience? I am confused with the Config File settings [14:37] Im not familure with -s - something to do with the shell? [14:40] as that directed toward me? [14:40] was* [14:40] no [14:40] k [14:40] do you think this is the correct room for TACACS+ help? [14:41] can never tell - you just need one person who knows what it is [14:42] I'm starting to think not a lot of people implement it on linux.......this has been a hard thing to research [14:43] mailing lists are often a good source [14:43] more ppl there [14:43] is there a website for a list of them? How do I use that to reach out? [14:44] all the major distros have them [14:44] try to google ubuntu mailing list [14:44] ok, I'll give that a go, thanks [14:45] I'm on 10.04 LTS, when I set a crontab for root, with it set for 12:00, with: script.sh >> /folder/log, it spawns 5 - 10 instances of the script that needs to run. I can run the command manually and it works fine without issues. Any ideas? Thank you. === dendrobates is now known as dendro-afk [14:45] dasunsrule32: Can you paste/pastebin the crontab line that you used for that job? [15:00] which mail server you guys recomend? [15:01] m_tadeu: postfix [15:02] pmatulis: thanx === dendro-afk is now known as dendrobates [15:28] Pici: [15:28] yes, one sec [15:29] Pici: http://pastebin.com/u1icgeMV [15:30] if you need to see the script too, let me know [15:31] dasunsrule32: Well, that will run every minute when the hour matches 0. This will run once at midnight: http://pastebin.com/6BybMhLw [15:33] hrm [15:34] * dasunsrule32 goes back to reading man page [15:34] thanks Pici [15:34] * dasunsrule32 turns red from embaressment [15:34] :p [15:35] Pici: one more thing, does my /etc/crontab look ok to you? [15:36] http://pastebin.com/vGv1GmF7 [15:37] dasunsrule32: I'd modify it so that the last two lines have some minute there, otherwise those will run every minute during 5:00-5:59 and 6:00-6:59 respectively. [15:38] Er, on those particular days that they're scheduled to run of course. [15:39] dasunsrule32: For comparison, my /etc/crontab: http://pastebin.com/zKSfuTC1 [15:39] ok, gotcha [15:39] so the wildcard = bad in cron, depending [15:39] :p [15:40] s/=/* [15:40] Depends on what you want it to do. [15:41] something like that? http://pastebin.com/rvqPzJ2v [15:41] dasunsrule32, generally speaking, it's a good idea to keep the default /etc/crontab [15:41] and only add files in /etc/cron.d and /etc/cron.* [15:41] raphink: ok, any specific reasons why? [15:41] curiousity kills the cat. :p [15:42] well unless you have a reason to change the way cron.daily, cron.weekly and cron.monthly are run [15:42] the defaults are usually well thought [15:43] I personally use user crontabs, but then again, I don't administrate all the servers that I run cronjobs on. [15:43] user crontabs are nice, too :-) [15:44] ok, I will take these in consideration [15:44] Thank you for the help. :) [15:44] dasunsrule32, I mean, you're free to modify /etc/crontab [15:44] but there's hardly ever a point [15:44] no, i understand what your saying [15:44] also, if you modify /etc/crontab and it gets changed in a later version of Ubuntu [15:44] you will have to deal with the merge [15:45] yes, unless is specify to not touch that file [15:45] whereas putting your rules in /etc/cron.d ensures you're the only one to manage the file [15:45] agreed [15:45] I am just using root's crontab [15:45] dasunsrule32, sure, but then you might miss a fix/feature [15:45] true [15:45] /etc/cron.d/* are root crontabs, too [15:45] right [15:45] :-) [15:46] for some reasons when I had it in cron.d, the job Pici was helping me with wouldn't run [15:46] note: if you need daily crontabs in /etc/cron.d/*, you can use @daily instead of the time spec [15:46] same with @hourly, @monthly, etc. [15:46] so I just dropped it into the crontab [15:46] right [15:47] cron.d jobs dont need to be +x? do they? [15:47] no they don't [15:47] i didn't think so, rhel is the same [15:47] and they're the format of /etc/crontab, not user crontabs [15:47] conffiles hardly ever need to be executable [15:47] right [15:47] why does ubuntu +x cron.daily? [15:48] cron.{hourly,daily,monthly,...} are different [15:48] they're not conffiles, they're scripts [15:48] ok [15:48] gotcha [15:48] called from /etc/crontab [15:48] ah [15:48] me see [15:49] cron reads /etc/crontab and /etc/cron.d/* [15:49] and /etc/crontab runs all scripts in /etc/cron.{daily,weekly,monthly}/* [15:49] gotcha, kills my confusion [15:49] :D [15:49] thanks [15:49] RIP [15:49] and /var/spool/cron/crontabs . Thats where crontabs edited using crontab -e go. [15:49] :p [15:49] yes [15:49] ok [15:50] but they follow a different syntax [15:50] Indeed. [15:50] they don't have a "user" column [15:50] which is kind of logic, but not always obvious :-) [15:50] right, i figured that out the hard way on rhel [15:50] o.O [15:50] hehe [15:50] and they're best used with "crontab -e" when logged as the suer [15:50] user [15:50] s/used/edited/ [15:51] [15:51] :-) [15:51] hehe [15:51] :p [15:52] well, I've been training myself in le bash scripting, so I thought it'd be good to start using cron to you know, em....automate [15:52] :p [15:52] Or crontab -u username -e if you have the privleges. [15:52] sure [15:52] Pici, yes, that too :-) [15:52] I have sudo/root everywhere [15:52] ;) [15:52] good, use it wisely :-) [15:52] always do [15:53] my linux admin skills are decent, just some areas i am trying to strengthen [15:53] there's always areas to strengthen, that's what makes the job thrilling :-) [15:53] yep! [15:54] * dasunsrule32 loves sys admin [15:54] I manage about 500 web servers [15:54] hehe [15:54] apache/tomcat mainly [15:54] some iis [15:54] * dasunsrule32 barfs on iis [15:54] oops [15:55] :p [15:56] stinks, they use mostly perl for scripting here, so I am having to learn that [15:56] never used much before [15:56] perl is very powerful [15:56] yes [15:56] so I have seen [15:57] not my favorite language, but powerful nonetheless [15:58] yea, not a fav of mine [15:58] what's great with Perl is the CPAN [15:59] agreed === dendrobates is now known as dendro-afk [16:03] 0 0 * * * root /usr/bin/nightly.sh >> /home/cmsgs/logs/cmsgsteam-nightly-log.txt 2>&1 [16:03] that should be fine in cron.d, correct? [16:04] Yes. [16:04] mdeslaur: /win 2 [16:04] ahh [16:04] arghh [16:04] mdeslaur: sorry :) [16:04] Can we able manage ubuntu machines from sapcewalk? Is it possible? === jj-afk is now known as jjohansne === jjohansne is now known as jjohansen [16:04] * mdeslaur pokes RoAkSoAx with stick [16:04] ok, cool [16:15] Is any buddy can help to solve this! Space walk installation on Ubuntu [16:19] I'm a little confused. I thought I successfully bonded my two NIC's together, but "eth1" still pulls a separate DHCP address. What can I do? [16:20] Roasted_: this is what I did awhile back, http://goo.gl/xAhuQ [16:21] ohhh! I need bond0:0 [16:21] be nice if the guide I read said that <_< [16:21] dasunsrule32, would they each have the same IP tho? Can I use the same static IP for both? [16:22] bond0:0 is a new virtual adapter [16:22] just use bond0 [16:23] but I did... [16:23] I used bond0 and that was it [16:23] the entire bottom with bond0:0 I didn't have, yet eth1 was pulling DHCP addresses. [16:23] then don't assign bond0 an ip, and only assign bond0:0 an ip [16:23] :) [16:23] I'm lost... [16:23] why only 0:0 [16:24] depends on what kind of bond you're doing [16:24] mine was not failover [16:24] which sounds like what you want [16:24] I just want to boost the speed [16:24] this server is handling LTSP thin clients [16:24] so I'd like to use both gig NICs instead of just 1 since the hardware is there to utilize [16:24] you should get 4 nic's then [16:24] :) [16:25] :x doesn't exists, it's only kept for backwards compatability from iproute2 to ifconfig [16:25] I don't have 4 [16:25] I have 2 [16:25] and have two pairs [16:25] so I'd like to hook up 2 [16:25] for failover [16:25] "getting 4" isn't really an option. [16:25] you would only need to get two :p [16:25] heh [16:25] okay [16:25] 4 [16:25] is not an option [16:25] I have 2 to work with [16:26] why is one pulling DHCP? [16:26] I changed the config a bit since then, let me look [16:26] one sec [16:27] thanks === dendro-afk is now known as dendrobates [16:33] Roasted_: http://pastebin.com/2DdC8QiA [16:33] something like that should work [16:34] you have to specify that adapter to be static [16:34] if you have inet dhcp, that's what you'll get [16:35] make sure ou have the bonding module loaded [16:35] lsmod |grep -i bond [16:36] make sure our switch supports 802.3ad too [16:36] it should [16:40] this one would be better, forgot some address info: http://pastebin.com/AFFSxaCw [16:40] something like that [16:40] anyway, good luck [16:40] back to work [16:42] can all help me [16:42] this about for php-gd not support to anti aliasing image [17:29] is it possible to run ubuntu-server with a gui? [17:42] DrDetroit, yes. [17:42] sudo apt-get install ubuntu-desktop [17:44] thank you [17:44] I have server installed but I dont uinderstand the update manager, so I thought if I could get one that was like my desktop updater that would be ok [17:48] heh? [17:48] apt-get update; apt-get dist-upgrade [17:48] done [17:49] well, maybe a reboot [17:49] DrDetroit: What part of the update process is confusing? [17:50] I dont understand why it tells me that some pkgs will be held back [17:50] in my ubuntu desktop the update manager just tells me i have updates and i just install them [17:51] in my server, it confuses me as to what I should be doing [17:51] I am not that smart [17:51] no, it warns about held packages too, but defaults to installing them [17:51] oh [17:51] well [17:51] held back is cause it is installing a NEW package, that didn't exist before [17:51] maybe i will boot up the server again and see how many updates it wants to do now [17:51] like a new kernel [17:51] i have not been using it cause I was confused [17:52] upgrade won't install them, dist-upgrade will [17:52] i think i read somewhere i can configure it to automatically update itself without me being involved, is that correct? [17:52] dist-upgrade isn't for ugprading to a new release, its for whactly what patdk-wk just said,. [17:52] !dist-upgrade [17:52] A dist-upgrade will install new dependencies for packages already installed and may remove packages if they are no longer needed. Please see !upgrade for the proper way to upgrade to a new version of Ubuntu. [17:53] Would anybody have any experience with bonding network interfaces? I tried to bond them based on an official Ubuntu guide but I'm not really getting anywhere with it. [17:53] its not that I want to upgrade, i have 10.04 LTS [17:53] i just want it to stay current [17:53] Roasted_, several [17:53] several what? [17:54] DrDetroit: apt-get update will only upgrade packages that are already installed. If one of those packages now depends on a new package that you don't have installed it will be held back. Thats what dist-upgrade is for. [17:55] Hello, Im curious.. got a bit of "weird" trafic on my firewall logs and Im trying to do some sniffing to see.. what it actually is [17:55] Now I've fired up tcpdump, but it doesnt seem to output anything usful.. I was expecting it to output the sort of thing you would get with Wireshark [18:05] hi, freenas to ubuntu server [18:07] Hi, my syslog is showing a lot of messages relating to issues with ata3, but I'm not sure how to relate that to the disk device names (/dev/sda etc.) - any suggestions? [18:13] hello.... hello (echo) [18:16] hello [18:16] hello [18:16] hi [18:17] hi, freenas to ubuntu server [18:17] Thats not a question. [18:17] many q [18:17] Don't ask to ask, just ask. [18:17] Pici: thanks for the info, I have started up aptitude again to see if I can understand it better [18:18] do you use ubuntu server as a nas [18:21] centHOGG: not at this moment, I have used it as such in the past [18:21] thx... [18:31] Pici: apprecitate the help, I have 45 security updates and 50 upgrades to do, but I did figure it out with your help and the help pages [18:31] DrDetroit: good to hear :) [18:32] I am hoping this will make a excellent replacement for my front end machine, which is the firewall, web and mail server for me [18:32] my old one has been running since 02 and is getting long in the tooth [18:49] zul: I'm assuming the netboot testing was for x86 and i386 only, right? [18:53] robbiew: yep thats what i have :) [18:53] zul: and frankly all we care about at this point [18:54] robbiew: ding ding [19:44] How does ubuntu-server display the very nifty system information when I first log into it? [19:44] I would like to be able to do that whenever I want, not just when starting up [19:46] DrDetroit: landscape-sysinfo [19:47] thanks so much!! [19:47] (for the rest of the MOTD contents, see files in /etc/update-motd.d/ that generate each piece :-)) [19:47] will do, thank you [19:51] ok now i need to configure my eth0 [19:51] for my local network [19:51] back to reading [20:19] hello guys [20:20] hello [20:20] Can I change screen resolution in Ubuntu server? [20:20] with sudo nano /etc/X11/xorg.conf [20:20] ? [20:20] i can't able to install post fix i got this error [20:21] i got this error : http://paste.ubuntu.com/585025/ [20:21] what i have to do ? [20:23] hello [20:23] kerneloops_: very few people run a server with a GUI, so prepare for patience :-) [20:23] xD [20:23] guntbert: nice one [20:24] :) [20:25] artuio: in my opinion the » and -> characters are wrong, delete them and try again [20:26] guntbert: https://help.ubuntu.com/community/ChangeTTYResolution [20:26] that not X :P [20:27] kerneloops_: of course, but you were specifically asking about X (or so I understood at least) [20:28] yeah my bad [20:28] kerneloops_: if you want to go that way remember that grub2 is configured differently [20:30] guntbert: sudo nano /etc/default/grub [20:30] ? [20:31] kerneloops_: right, but might want to try it first from the grub menu without changing any files, -- and afterwards run sudo update-grub [20:44] well guntbert [20:44] i try this one :http://paste.ubuntu.com/585034/ [20:44] not working too [20:44] i got this error now http://paste.ubuntu.com/585035/ guntbert [20:46] artuio: there are still : -> characters are wrong, delete them and try again [20:46] no not [20:47] see this http://paste.ubuntu.com/585034/ [20:47] this is the syntax [20:47] and this one http://paste.ubuntu.com/585035/ is the output of that [20:47] where you see -> ? [20:48] well i find it just to need to » by ' [20:48] and woking [20:48] thanks for your participation [20:51] artuio: glad you worked it out :-) [20:54] an other thing [20:54] is it easy is it easy to script all my work ? [20:55] i mean automate the installation of all things [21:02] anyone can tell me a good proxy server? :) [21:02] PleXs: open proxy? [21:02] PleXs: nearly everybody uses squid [21:02] oh :P [21:02] you want to setup one [21:02] I would learn to setup a vpn instead [21:03] no I want to limit internet wifi use [21:03] k [21:03] kerneloops_: those two tasks are not related (in my opinion) [21:03] and use IPSec tunnel to use full option internet :) [21:04] and local lan [21:04] guntbert, you would advice squid ? [21:05] PleXs: I don't know any other - so yes - if the idea of "web proxy" suits your needs at all [21:06] i'm installing 10.04.2 server and what application does it use for the dns server? [21:08] bastidrazor: Ubuntu ships with BIND (Berkley Internet Naming Daemon) (from https://help.ubuntu.com/10.04/serverguide/C/dns.html ) [21:09] okay, i'm used to unbound. i guess a little learning can't hurt on bind. [21:09] thanks guntbert [21:09] bastidrazor: :) [21:20] ugh... when will the php gd thing end! lol [21:22] macrocosm: wrong window? [21:22] no lol [21:22] ubuntu ships with a very old gd [21:23] just gets old recompiling php every time I use ubuntu [21:24] hmm, why recompile it? [21:24] why not just package it, and be done with it [21:24] because you cannot update it [21:24] sure you can [21:24] I do all the time [21:24] any instructions on the net? ive looked everywhere and tried a lot of things . best is usually to recompile [21:25] there is a debian fix .. but that broke some other things on my system [21:26] hmm ... will look into it .. thanks for the tip [21:26] :) [21:28] patdk-lap ... what do you mean by "package it" doesnt really do much in google search. [21:33] Is there a system-wide way to autostart a notification system for all users when they log on to the console? (Other than writing to every users autostart directory) [21:36] The program I need to start is a disk-quota warning system, it will pop up notifications at fixed intervals prompting you to clear out diskspace if you've exceeded the soft quota limit [21:37] I don't want the users to be able to switch off the autostarted program via their System->Preferences thing [21:38] ... and it should work for both Gnome and KDE users... [21:40] acpi-support shouldn't I use this in my old ubuntu server machine? [21:41] How old? [21:42] ScottK: 10 years old maybe [21:42] or 11 [21:43] Anything made 2000 or after should be ~OK. [21:43] << 2000, no. [21:43] ScottK: when I shutdown it continues turned on [21:43] at least the fans [21:43] Dunno. [21:43] need to press down power button until it shuts down [21:43] hehe [21:44] need to find motherboard manual for it [21:48] holy 107mb the old kernel === baffle_ is now known as baffle [21:52] how can I upload a file to my SSH server? [21:52] with scp? [22:02] kerneloops_: yeah scp can do that [22:06] Can anyone help me with some shell scripting [22:07] semiosis: having trouble because of spaces in file path [22:07] ^ [22:08] you can put a backslash (\) in front of the space, or enclose the whole filename in quotes " or ' [22:08] semiosis: i am using scp filepath user@host -P portnumber [22:09] k [22:09] well you also need a colon (:) after user@host to tell scp that it is a remote location, like this... [22:09] scp "/path/to/file with spaces" user@host: [22:10] semiosis: it's over lan [22:10] that will put the file in user's home directory on host [22:10] do i need to use it? [22:10] without the colon scp will make a local copy to a file named user@host, just like regular cp [22:10] k [22:10] you can specify a particular file to write to after the colon as well, like this... [22:10] scp "/path/to/file with spaces" "user@host:/tmp/remote copy of file" [22:11] i think that will work, you can also read the scp manual (command: man scp) for more details [22:12] semiosis: I need to change the port [22:12] portnumber: No such file or directory [22:12] lol [22:13] scp -P 22222 "/path/to/file with spaces" "user@host:/tmp/remote copy of file" [22:13] yeah [22:13] thanks a lot semiosis :) [22:13] check the scp manual, in your shell with command "man scp" or here http://manpages.ubuntu.com/manpages/maverick/en/man1/scp.1.html [22:13] good luck, i have to go [22:14] you're welcome :) [22:14] bye [22:16] Is a ubuntu server running at 55C too hot? [22:17] that's hot [22:17] r u in hell [22:17] :P [22:17] hehe [22:17] my desktop runs at 65C [22:18] damn [22:18] just trying to decide if i should move the server to a larger case with more and bigger fans [22:18] I run them with the cases open [22:18] just cause they seem to get too hot when enclosed [22:22] DrDetroit: maybe it's time to use a good cooling system [22:23] there is a channel about ##hardware [22:24] kerneloops: these are just junker machines I make out of old stuff, the reason server runs hot is that the ps sits right underneat the ps in the mini tower [22:24] I am considering moving it to a large tower case with 4 fans [22:25] where the cpu will sit away from the ps [22:25] what is ps [22:25] :p [22:25] power supply [22:25] i am too poor to buy new stuff [22:25] hehe [22:25] ok [22:26] im having fun with a computer i found in the garbage [22:26] :P [22:26] mine are all garbage [22:26] even the main one? [22:26] x) [22:26] my main box (firewall, mail server, webserver is a pentium 2 [22:26] hehe [22:26] been running since 02 without a hitch [22:26] also does dhcp [22:26] for my home network [22:27] but i figure eventually it will fail and i want to have a replacement ready [22:27] lol [22:27] it runs redhat 7.3 [22:27] * DrDetroit giggles [22:27] u are too leet for me [22:27] heh [22:28] i have servers running rh7.3 debian 3, 4, 5 and freebsd 6 and this ubuntu 10.04 desktop and now a ubuntu 10.04 server [22:28] im using 10.10 sv [22:28] ah [22:28] just for fun [22:28] nod [22:28] thats all this is, just for fun [22:29] to learn and get used to cli [22:29] x) [22:29] i used to own and run a rural isp and I hate to forget all that I leared in the old days [22:29] so i like to continue to make and run servers to keep my hand in the game, so to speak [22:29] hehe [22:30] u r pro [22:30] my chat server runs on debian [22:30] naw [22:30] i swim in the shallow end of the gene pool [22:30] * DrDetroit grins [22:58] I am trying to make soundcard work [22:58] aplay -l shows [22:58] card 0: SI7018 [SiS SI7018], device 0: trident_dx_nx [Trident 4DWave] [22:58] Subdevices: 32/32 [22:58] 32?? [23:03] I have no clue [23:03] sorry [23:21] KIT KIT [23:21] sry wrong tab [23:37] may I safetly remove /root/.aptitude ? [23:37] I uninstalled it [23:38] kerneloops_: It might implode the universe [23:38] what [23:38] big bang? [23:39] Kind of.. [23:39] So if you dont mind killing everything, you can delete it [23:39] Slyboots_: config file is empty and i purged aptitude [23:39] i use apt-get [23:40] Aye delete it, odds are its just configuration [23:40] i'll leave it anyway [23:40] yes it is === DrDetroit is now known as DrD_away