/srv/irclogs.ubuntu.com/2011/04/01/#ubuntu-server.txt

RoAkSoAxkirklandi here waiting for shuttle to take me to airport00:06
RoAkSoAxi mean hotel00:06
pHrohello00:11
panfistis there any info on best practices regarding system time?00:23
panfisti vaguely remember reading about how it should be set to gmt in BIOS and in the os stored as an offset from that or something...?00:23
kirklandRoAkSoAx: cool00:31
kirklandRoAkSoAx: ping me when you're at the hotel00:31
RoAkSoAxykirkland will do im still on my way00:31
kirklandzul: i can't build cobbler more than one00:34
kirklandzul: the build leaves a bunch of garbage around00:35
kirklandzul: and are we still using lp:~ubuntu-virt/cobbler/ubuntu ?00:51
kirklandzul: it looks out of date00:51
=== Guest38942 is now known as jemofthewest
JasonnOk, well I ALMOST got PPTP VPN service to work on my server, just i cant connect to it01:00
jeeves_mosshow do I set up a local DNS server behind a NAT?01:03
kirklandzul: can you get that branch fixed so that I can work on a couple of bugs?01:03
pmatulisJasonn: PPTP?  are you serious?01:10
jeeves_mosshow do I set up a local DNS server behind a NAT?01:11
uvirtbotNew bug: #746847 in cobbler (universe) "cobbler packages don't rebuild" [Medium,In progress] https://launchpad.net/bugs/74684701:17
Jasonnpmatulis: Yeah01:19
Jasonnpmatulis: Why?01:20
uvirtbotNew bug: #746854 in cobbler (universe) "upgrades broken if symlinks exist, one symlink is plain wrong" [High,Fix released] https://launchpad.net/bugs/74685401:26
e_t_jeeves_moss: there are two options for DNS that I know about. One is Bind9, essentially THE standard of DNS. The other is dnsmasq. In my opinion, dnsmasq is easier to configure. Once you have your DNS server running, you just have to point your client machines to use it. This can be done either manually or through DHCP.01:29
jeeves_mosse_t_, can you point me to a simple "how to" URL01:44
e_t_jeeves_moss: There's this for Bind: http://news.softpedia.com/news/How-to-Host-Your-Own-Domain-With-Bind9-on-Ubuntu-49585.shtml01:46
e_t_jeeves_moss: For dnsmasq, just install it and read the /etc/dnsmasq.conf file. It has extensive explanation and instructions in the comments.01:47
aliveriusi get a lot of hdd usage on my generally idle server01:50
aliveriushow can i see what processes use it?01:50
e_t_There is a program called iotop that shows (more or less) which processes are writing to the disk and how much.01:52
=== dendrobates is now known as dendro-afk
MetaJakesomething keeps changing my /etc/resolve.conf to a different nameserver then the one I save it as...  any idea what might be causing this?02:16
JasonnWhat is something useful i can throw on my server>02:27
Jasonn??02:27
e_t_MetaJake: check to see if you have the package "resolvconf" installed. NetworkManager also makes changes resolv.conf.02:27
MetaJakee_t_ I see thank you02:27
e_t_Jasonn: what do you want your server to do?02:28
Jasonnanything useful02:29
JasonnNot: seedbox, apache, proxy, vpn02:29
e_t_You could make it a virtual machine host with kvm.02:30
Jasonnonly has 10GB dick space02:30
Jasonndisk**02:30
Jasonnlol;02:30
e_t_CUPS would make it a print server.02:30
Jasonnits a VPS, so dont really have a printer02:31
e_t_If it's got more than one Ethernet card, you could turn it into a router.02:31
JasonnHmmm02:31
JasonnIt doesnt02:31
Jasonnlol02:31
JasonnIts a server outside of my network, in a diff country02:31
JasonnAnyways, Im thinking of something awesome, along those lines02:32
Jasonnlike02:32
Jasonn:(02:32
e_t_If you play World of Warcraft, you could set up your own server with bnetd.02:33
JasonnHmm02:34
Jasonndont play02:34
Jasonnit02:34
JasonnD:02:34
Jasonnsomething to do with networking02:34
e_t_After eliminating Apache, proxy, and VPN, there's not much left.02:35
e_t_Do you want to try an email server?02:35
JasonnYesh02:35
e_t_Or IRC?02:35
JasonnCould i host a server for freenode02:35
Jasonnwith only 256mb ram?02:36
e_t_That's probably below what they'd like. They also want at least 1.5Mbit up and down connection speed. You could ask them.02:37
Jasonnnope02:37
e_t_Is this a personal project, or is it work-related?02:37
Jasonnpersonal02:37
Jasonnjust to gain knowledge and stuff02:37
e_t_You're paying for a VPS "just to gain knowledge?" That sounds expensive. I just have an old laptop with a busted screen for my server.02:38
JasonnIts $5/mo02:38
Jasonnreally not much02:38
Jasonnplus 20% off02:38
e_t_Mine is $0/month.02:39
JasonnI have a server at home too02:39
JasonnIts just i run a website too02:39
JasonnSo i want it for that02:39
Jasonnand actually, your probably costs you more in electricity bills than mine does in total u.u.02:39
Jasonnplus, i dont have a fast connection at home02:40
e_t_An email server is really easy to set up (if you already have a domain). In Ubuntu, the default mail setup is Postfix for SMTP and Dovecot for IMAP/POP3. You can also use Exim4. Either one will prompt you for information during installation and you should be up and running quickly.02:41
JasonnHmmm02:43
MetaJakee_t_ sorry to wander away there. I'm just testing elementary functions of apache.. httpd, php mysql. eventually I will be using python and its' webdev frameworks. but...02:43
JasonnBut then the reverse DNS of the server would have to be the one of the email?02:43
Jasonnbrb02:43
MetaJakei made some changed to some apache config files and now /etc/resolve.conf keeps changing on me like i said and I can't get a connection to my internet at all.02:44
e_t_Jasonn: Actually getting your mail accepted by other servers (Gmail, Yahoo, Hotmail) is a different matter.02:44
e_t_MetaJake: resolve.conf only affects DNS resolution. Try "ping -c 4 72.14.213.105" (google.com). If that fails, then DNS is the least of your problems.02:45
MetaJakeok. actually I just got my connection back (tested using apt-get update)02:46
MetaJake... I think  I'm back in business.. I had made some changes to the configuration of my virtual machine that I forgot about.02:47
MetaJakebeen a spaghetti sort of day.. in all its learning02:47
e_t_OK. What you could do is make resolv.conf how you want, then "sudo chmod 444 /etc/resolv.conf" to prevent even root from writing to the file afterwords.02:47
MetaJakeah, i gotcha. Nice tip, I'm writing that down for next time, similar situation02:49
=== dendro-afk is now known as dendrobates
Jasonne_t_: THen how do i get the mail accepted?03:04
e_t_I don't know. I have my server set to use Gmail as a smarthost. Gmail then trusts my server because I gave it my login credentials, and everybody else just gets a message from my Gmail account.03:06
e_t_Jasonn: http://www.techrepublic.com/article/get-it-done-host-your-own-e-mail-server/503291403:08
e_t_It's not a how-to, but it's got useful information.03:08
e_t_Also, http://serverfault.com/questions/9594/cannot-send-email-to-hotmail-or-msn-addresses03:10
Jasonne_t_: How do i install it?03:16
e_t_Which?03:16
Jasonnmail server03:17
e_t_Do you want Postfix or Exim4?03:17
Jasonndifference?03:18
Jasonne_t_: ^03:20
Jasonndifference?03:20
e_t_Exim4 offers (I think) a more detailed installation. Postfix is Ubuntu's default mail server; Exim4 is Debian's.03:20
JasonnIll take exim03:21
Jasonnjust apt-get install exim4 ??03:21
e_t_I think so.03:21
Jasonndont work03:23
JasonnIt gives me an error, but i cant copy and paste because putty doesnt let me03:24
e_t_You're in Windows? take a screenshot of the putty window.03:28
shaunoputty lets you; drag to select & it goes straight into the clipboard  (it's more difficult to tell it to _not_ copy)03:31
JasonnCan i get a domain, and set the a records to 192.168.1.140 and then when im in my local network, it will go to 192.168.1.140??03:34
thesheff17Jasonn: yes I do it all the time.03:35
JasonnWorks?03:35
JasonnThanks03:35
e_t_No. Any address beginning with 192.168 is not routable on the Internet. You need a static public IP.03:35
Jasonn:OO03:36
JasonnThen what can i do03:36
Jasonn?03:36
e_t_How do you connect to the server?03:36
thesheff17Jasonn: I create domain names all the time that are webServerPriv.domain.com -> 192.168.7.15 and it works fine.03:37
shaunothe "when I'm in my local network" bit is real relevant there.  you can put any address you want in the A record.  you'll only be able to reach it from places it's routable tho03:37
thesheff17A host records03:37
Jasonne_t_: Local server03:37
e_t_I thought this was your VPS.03:37
Jasonnnope03:39
Jasonntalking about another serrver03:39
e_t_OK. If you want a server on your LAN to just do stuff on the LAN, you don't need a domain at all. If you want people on the Internet to be able to email you though, you need a registered domain name and a public IP address. You will then configure your router or gateway with the public IP address and forward all traffic to the server on the LAN.03:41
pHroi like this channel much better than #ubuntu, much better conversation04:09
=== dendrobates is now known as dendro-afk
=== samferry is now known as Guest41306
uvirtbotNew bug: #746963 in clamav (main) "package clamav-base (not installed) failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/74696305:46
itsNeHi! Are there any sendmail guru's on?06:40
=== reisi_ is now known as reisi
qwebirc44173How can I disable all the power management ?07:44
mithranhi can someone suggest me a good native tool to use for ubuntu as a client, to take ssh/telnet of an appliance and store the logs, execute commands, set term type, , etc?...I already tried teraterm via wine and putty, but is there any other tool that maybe better?08:07
mithranthe client will be run on ubuntu 10.04 desktop08:07
qwebirc44173^08:08
mithranhi  qwebirc44173: is xshell any good, ive seen some people run it?08:09
xamparta bit of a problem with dovecot+postfix vacation autoreply: our mailaddresses are the form $firstname.$lastname@$domain and they are delivered to $user@$dovecot.server. when i use sieves autoreply, the from-address in the reply message is $user@$dovecot.server, not the proper mail address.08:10
xampartis there a way to use the $first.$last@$domain in reply messages from-address?08:11
shaggy2hey guys, I need to change the ip address in bind files from 192.168.0.8 to a different ip is there a quicker way to do it?08:27
shaggy2better explination, I have about 15 bind9 database files, all with about 10 refferences to 192.168.0.8 I want to know if there is a quicker way to change it rather then manualy opening every file08:29
andreasf_shaggy2: Something like "sed 's/192.168.0.8/192.168.0.100/' < file1 > file1.new"08:32
sorenOr "sed -i"08:33
sorenAlso, s/192.168.0.8/192.168.0.100/ might replace 192.168.0.87 with 192.168.1007, for example.08:33
sorenSo: Be careful.08:33
shaggy2wouldn't that copy the file and apply the changes in the new file?08:33
sorenshaggy2: andreasf_'s solution would put the changes into a new file (which you can then proceed to rename, if you're happy with the changes).08:34
andreasf_Back up your original files before attempting this :-)08:34
sorenshaggy2: "sed -i -e 's/blah/blah/g' file.conf" will act on file.conf in-place.08:34
shaggy2I might just stick with the way I know. might be safer. if I stuff something up I was planning to format anyway, I thought I would just try to change the ips so I didn't have to, bind 9 aint the only thing that needs to be changed08:35
_rubenuse 'sed -i~', it'll backup the existing files with the ~ suffix08:37
qwebirc44173How can I disable all the power management/saving ?08:38
sorenqwebirc44173: Why?08:39
qwebirc44173soren: problem shutting down.08:41
qwebirc44173soren: we are discussing at #ubuntu08:41
sorenqwebirc44173: So you want to disable power management so that you can be sure it won't shut down?08:41
qwebirc44173lol08:41
qwebirc44173I want to be sure it shuts down*08:41
sorenqwebirc44173: This makes no sense.08:42
qwebirc44173soren: power saving08:42
sorenqwebirc44173: It's sort of like removing the wheels from your car, because you don't feel it's driving very well.08:42
qwebirc44173soren: how to disable power saving08:42
qwebirc44173maybe it's the problem. i need to know08:42
sorenPowering off is power management.08:44
sorenIf you're talking about CPU throttling, that's a different story.08:44
sorenI'm not sure you can thoroughly disable CPU throttling or frequency scaling.08:45
sorenIt used to be a module, but I think it's built-in no.08:45
sorennow.08:46
sorenqwebirc44173: You could talk to the good folks in #ubuntu-kernel.08:46
qwebirc44173ok08:49
qwebirc44173thanks08:49
* sky1 is looking for an user which has experience with the tracking issue software Request Tracker /msg me08:51
huatsmorning09:18
jamespagettx: hey - snap!09:20
ttxjamespage: snap?09:21
ttxoh :)09:21
jamespage:-)09:21
ttxjamespage: young padawan needs to learn more if he wants to be as fast as the jedi master09:21
jamespageI think we must have been looking at it at exactly the same time - I though I had discovered a new 'feature' in launchpad that recognised the words 'duplicate' and 'bug xxx' and did automagic stuff :-)09:24
sorensky1: If you really want help, I suggest you just start explaining your problem.09:41
sorensky1: Even if I was a requesttracker expert, why would I /msg you?09:42
sky1hm... ok09:43
sorensky1: Here, in the channel, there are tons of people who can help. If I get bored along the way, someone else can pick up where I left off. What would be my motivation to give that up?09:47
sky1i would like to use a template  from an copy of a document for Improvement suggestions for RT..  it's no problem to convert these in a format like html or sth like that ... if i do so is it possible to integrate these html document  for a ticket creation in RT?09:47
sorensky1: For stuff like that, I recommend looking at one of the requesttracker mailing lists:09:48
sorenhttp://bestpractical.com/rt/lists.html09:48
sky1ok ...thnx09:49
eagles0513875hey guys whats the name of the mod_zlib package for php on lucid?09:51
_rubeneagles0513875: there is none, as it's built in09:52
eagles0513875ok is it enabled by default or do i need to go digging around in the php.ini file09:53
_rubeni assume it's enabled by default09:53
eagles0513875ok will dig around in php.ini09:55
eagles0513875thanks09:55
volkanHow do i remove a package pin? Can i just delete the /etc/apt/preferences.d/ files?10:07
volkanI checked the documentation but the method proposed doesn't work: echo PACKAGE_NAME install | dpkg --set-selections returns nothing and after apt-get update apt-cache policy PACKAGE_NAME is still set to the pinned version...10:10
qwebirc44173output of /sys/power/disk is test testproc [shutdown] reboot10:13
qwebirc44173is this the reason I cant shutdown the system properly?10:13
=== FireCrotch is now known as nickmoeck
qwebirc44173...........10:38
rickspencer3Daviey, hey, beta 1 is out, what's the word on the street wrt server?10:46
Davieyrickspencer3, haven't yet had much community feedback.. which isn't uncommon... looking at the incoming bug count, looking reasonable.  the beta1 qa'ing is looking pretty good.10:47
Davieyrickspencer3, The documented (release notes) eucalyptus bug should now be fixed in the archive, so apt-get upgrade away10:48
rickspencer3Daviey, nice!10:52
qwebirc44173Allocate IRQ for PCI VGA on10:52
rickspencer3Natty! Natty! Natty!10:52
qwebirc44173good?10:52
* Daviey passes rickspencer3 a pair of pompoms.10:55
ttxDaviey, zul: saw http://www.stackops.org/ ?11:09
ttxDaviey, zul: Lucid-based openstack ISO, with agent-based post-install config11:10
Davieyttx, I did!  I downloaded the iso.. not had a chance to complete installation with beta1 this week.11:13
Davieybut thanks for pointing it out.11:14
zulttx: yep11:27
jamespageDaviey, ttx: we have had quite a few reports of bug 65454911:27
uvirtbotLaunchpad bug 654549 in tomcat6 "Tomcat6 fails to upgrade if JAVA_OPTS contains /" [Low,Confirmed] https://launchpad.net/bugs/65454911:27
jamespageThe fix is quite small; SRU worthy?  Happy to handle if you think so11:28
Davieyjamespage, looking11:29
jamespageDaviey: this is the fix - http://pastebin.com/Bq6tHhW611:30
Davieyjamespage, is it just upgrades or new installs aswell?11:31
jamespageSo it would be upgrades only where extra stuff has been added to /etc/default/tomcat6 with '/' characters11:31
jamespagenormally JAVA_OPTS11:32
Davieyjamespage, So the only catchment is people updating from lucid -> maverick?11:33
jamespageDaviey: yes - and people applying security fixes to based Maverick installs which have had extra options added11:34
jamespageTBH it probably impacts Lucid as well11:34
* jamespage goes to look11:34
DavieyAh, if it does, and the fix looks trivial - and backported, shoot for it :)11:35
jamespageSo this was added in Maverick by the looks of things - so does not impact Lucid11:35
jamespageDaviey: ^^11:36
Davieyjamespage, ahh... looks totally Fix Released then?11:37
jamespageDaviey: fixed release in Natty; however Maverick still has the issue11:37
jamespageLucid not impacted11:38
Davieyjamespage, It doesn't seem that high impact to me... but if you have the patch, and can throw out the SRU dance, comments... seems a good idea.11:38
jamespageDaviey: well it can be worked around but it is annoying - I'll stick it on my list as low priority - have some ec2 testing stuff todo from beta-1 testing.11:39
Davieyjamespage, ec2 testing, fixes or using it?11:40
jamespagedaviey: changes to the way it runs; broader use during beta-1 threw up a few things that don't work so well.11:41
DavieyOh dandy.11:41
jamespagedaviey: going to move to a new type of Jenkins project for it to make reporting easier - http://jenkins.qa.ubuntu-uk.org/job/natty_server_ec2/11:41
Davieyjamespage, Am i able to sign up to get mails on failures?11:42
DavieyThat reporting matrix looks good!11:42
jamespagedaviey: I think we should get some mailing lists setup for failure notifications - what do you think?11:44
Davieyjamespage, That sounds a really, good idea11:45
jamespageack11:46
Davieyjamespage, Is it looking like your jenkins instance will cover more than just server eventually?11:47
jamespagedaviey: TBH it already is - we have desktop and alternate ISO testing running in it at the moment11:48
DavieyAh, i didn't know that had been achieved...11:48
jamespagedaviey: it does not really fit into a t1.micro any more - I broke it yesterday when I used a new Jenkins feature - it ran out of memory....11:49
Davieyjolly good :)11:49
doko_what is the status of xen in main? still at -3.3?12:17
raphinkrpinson@rpinson:~$ rmadison xen-3.3 | grep natty12:21
raphink   xen-3.3 | 3.3.0-1ubuntu13 |         natty | source12:21
doko_ahh, there is a patch in the bug tracker ...12:24
doko_server team, please have a look at the openldap and postfix build failures12:24
=== doko_ is now known as doko
qwebirc44173I need help enabling APM support!12:44
qwebirc44173please!12:44
sorenqwebirc44173: What sort of hardware are we talking about?12:45
qwebirc44173amd pcchips 810lmr12:47
qwebirc44173m810lmr12:47
qwebirc44173it supports APM12:47
sorenWhat processor is it?12:48
qwebirc44173soren: http://www.ciao.co.uk/Productinformation/PCCHIPS_M810_LMR__540987212:48
jmazaredo0 0 * * 1-6 am I right? this will run the program at midnight every monday to saturday except sunday?12:55
qwebirc44173jmazaredo: man crontab12:55
jmazaredoya i did that im just confused12:56
qwebirc44173theres a bunch of guides on the internetz12:57
zulDaviey: the ftbfs is a transient error i think14:36
RoAkSoAxmornin all14:37
Doonzis there an open source alternative to cpanel?14:38
semiosisDoonz: webmin, maybe14:44
semiosishi RoAkSoAx14:45
=== dannf_ is now known as dannf
=== AndrewMC is now known as SpockVulcan
Doonzsemiosis: any recommendation on a vm server? don twanna use vmware14:51
Doonzis virtual box decent?14:51
=== mrmist is now known as evilmist
semiosisDoonz: i havent used virtualbox, just vmware and centos xen.  have you checked out ubuntu enterprise cloud?  i plan on setting that up sooner or later14:58
Doonzim just starting to play around with it14:59
iclebyte_workDoonz, yes it is15:08
iclebyte_workvery handy15:08
iclebyte_workI've run production VM's on it too15:09
iclebyte_workmy experience has been that it's a solid product15:09
=== Pici is now known as ZarroBoogs
MagicFabhi all - if anyone speaks French here, you're invited to contribute to this translation (SAGE Sysadmin code of ethics): si qq'un veut participer à cette traduction, vous êtes invités: http://sketchpad.cc/PPM2DE5gDL15:30
RoyKMagicFab: #ubuntu-fr might be worth a try15:39
MagicFabRoyK, tx, I am inviting a few people15:39
kirklandcjwatson: hi, do you have an idea when you'll rebuild d-i for beta2?15:48
cjwatsonI'll do it now15:49
=== dendro-afk is now known as dendrobates
zulDaviey: yeah so openldap ftbfs is bogus16:02
=== cmagina-afk is now known as cmagina-office
* rcconf hello all16:12
RoyK 16:13
rcconfHow can I use Ubuntu Server as Live CD?16:13
RoyKyou can't16:13
rcconfno?16:13
rcconfI just want to get to cli16:13
RoyKoh16:14
rcconf:)16:14
RoyKpress alt+left16:14
RoyKs/left/right/16:14
RoyKor alt+f<something>16:14
rcconfRoyK: in the first menu?16:14
RoyKI think you have to go through the language settings before the terminals spawn16:14
rcconfRoyK: where it say16:15
rcconfs16:15
rcconfTry Ubuntu16:15
rcconfno16:15
RoyKor even - choose 'repair' in the menu16:15
rcconfit only shows Install16:15
rcconfetc16:15
RoyKubuntu server doesn't have the 'try ubuntu' choice (iirc)16:15
rcconfyes it doesnt16:16
rcconfso how I do boot and access the disks16:16
RoyKbut if you choose install, and then go through the kbd/language settings, new terminals should be available on virtual terminal 2-4 IIRC16:16
genii-around2 and 3 I think, 4 used to be for error messages from the install, etc16:17
rcconfRoyK: there is recue mode and stuff16:17
RoyKrcconf: that's the easy way, yes16:17
rcconfhttp://www.cyberciti.biz/faq/howto-boot-ubuntu-linux-rescue-mode/16:18
RoyKrescue will prompt for a root partition and mount that16:18
rcconfRoyK: it didnt mount16:18
rcconfdont know why16:18
RoyKwell, if you get a terminal, then just mount it yourself :)16:18
RoyKcat /proc/partitions16:18
RoyKthat'll show you what's there16:19
rcconfk16:19
RoyKrcconf: any luck?16:24
rcconfno16:25
rcconfRoyK: cat proc shows the partitions16:25
rcconfnow what i do?16:25
RoyKmount <dev> <mountpoint>16:26
rcconfmount sda /media/ ?16:26
rcconfmount sda /mnt/16:26
rcconfor sda116:26
RoyKsda is the drive16:26
RoyKsda1 is the first partition16:26
rcconfyes16:26
RoyKmountpoint can be anything16:26
RoyKI guess /mnt should do fine16:27
RoyKeven /asdf will do :P16:27
rcconfRoyK: mount /dev/sda1 /media/ mount fail16:28
rcconfinvalid argument16:28
RoyKrcconf: pastebin /proc/partitions16:28
rcconfcant16:28
RoyKwell, what partitions do you have there?16:28
rcconfoh i will try the home partition16:29
RoyKif in doubt, run a fsck on them first16:29
=== dendrobates is now known as dendro-afk
rcconf:)16:29
rcconfi was trynig to mount swap16:29
* rcconf facepalms16:29
* RoyK hands rcconf a beer :)16:30
* rcconf drinks water16:33
rcconf:D16:33
jacobfoggWe currently have 9 web/db servers and I am trying to map them out and am looking for some advice as to what to include in my report... I have a good start, but don't want to miss anything worthwhile...16:33
ttxdaviey, zul: if you want to have parallel LXC/KVM support in openstack, you should probably +1 the "Re: [Openstack] heterogeneous instance types" thread16:35
RoyKjacobfogg: start off with distro/kernel versions, list of installed packages and perhaps an OpenVAS scan16:38
zulttx: done and done16:38
jacobfoggRoyK: got everything but the scan so far.16:39
jacobfoggI also have hardware specs: Proc's, Ram, HD's16:40
RoyKlshw is nice for that16:40
jacobfoggNice! ... I also have Internal/External IP's, Primary and secondary (if applicable) purpose16:41
RoyKOpenVAS can be a bit paranoid, so try to weight those alerts on your mental scales :P16:41
=== dendro-afk is now known as dendrobates
a456hey everyone, i have an ec2 instance on amazon with ubuntu, i see my test page for apache, but inside of /var/www/ i see folders for cgi-bin, html but nothing inside them, any idea where the page is served from16:52
RoyKjacobfogg: make sure you run chkrootkit on those machines as well16:52
RoyKa456: check the apache config16:52
jacobfoggThanks =)16:53
a456RoyK: i cant find the apache2 config16:54
=== raphink is now known as raphink_afk
RoyKa456: /etc/apache216:54
raphink_afkgrep -r "cgi" /etc/apache216:55
a456hmm -bash: cd: /etc/apache2: No such file or directory16:55
raphink_afkhow did you install apache?16:55
RoyKa456: perhaps lighttpd is running?16:55
a456it was preinstalled on amazons ec2 image16:55
a456http://50.17.186.175/16:55
RoyKlol - that's fedora16:56
a456so its apache16:56
RoyKnot ubuntu16:56
a456oh fuck16:56
a456hah16:56
a456sorry ive been up since 4am working /west coast time/ grr16:56
RoyKa456: /etc/httpd16:56
RoyKa456: and perhaps /j #fedora :P16:57
raphink_afk;-)16:57
a456thx guys hah17:02
a456i was confused because any host ive had had a test page liek that but included an html file17:02
a456that was served via the server? the dir was emtpy which is why i was co nfused once i "touch index.html"17:03
a456i could see, thanks!17:03
jamespagehggdh: around?17:30
Nafallohallyn: hi. I've just updated bug 74649717:45
uvirtbotLaunchpad bug 746497 in libvirt "libvirt installs firewall rules on package upgrades" [High,Incomplete] https://launchpad.net/bugs/74649717:45
Nafallohallyn: hopefully that's all of the questions answered...17:45
RoyKheh - starting an openvas scan on this old single cpu machine: load average: 57.30, 53.72, 39.7017:46
KiallRoyK, didn't you're parents talk to you about playing with matches? The same rules apply to what you're doing right now ;)17:50
RoyKKiall: lol17:52
RoyKKiall: just scanning a network I manage :)17:52
RoyKbut from the outside to see if there are any cracks17:53
Kiall... and starting a fire at the datacenter that server is hosted at while you're at it ;)17:53
RoyKhaven't seen a server that can't handle 100% load yet17:53
RoyKanyone that produces a server that stops at 50% should be hanged17:54
KiallI have .. and it did end in a fire too .. but it was a crappy old dust filled desktop someone was doing stupid shit with ;)17:54
RoyKthen the problem probably was noone had vacuumed the server recently...17:55
RoyKdust can be quite a bitch17:55
hggdhjamespage: now I am18:09
cjwatsonkirkland: uploaded a new debian-installer; should be ready for tomorrow morning's daily builds18:31
kirklandcjwatson: rock, thanks18:31
kirklandcjwatson: will test then18:31
hallynNafallo: so restarting libvirt-bin did reinstate the routes right?18:38
Nafallohallyn: routes? who talked about routes?18:40
hallynNafallo: filter rules i meant18:40
hallynall right well let me try to reproduce18:41
hallynthanks for the info18:41
Nafalloit did indeed, yeah :-/18:41
=== skaet is now known as skaet_afk
RoAkSoAxSpamapS: any ideas why this is showed? while upgrading eucalyptus start: Unknown parameter: IF19:32
RoAkSoAxstart: Unknown parameter: IFACE19:32
DavieyRoAkSoAx, It has always done that, it's when, aiui, an emit doesn't fill $iface... the problem is that upstart doesn't let it pass unoticed now19:38
Davieynot sure of the fix tho :)19:38
=== Slyboots_ is now known as Slyboots
SpamapShmm19:40
SpamapSis IFACE used in the script/exec lines?19:40
Decepticonis amazon AWS doing some april fools joke? i cant login since april 01 12:00 or ping the httpd19:44
Decepticonit shows as a running instance though19:44
=== SpockVulcan is now known as AndrewMC
RoAkSoAxSpamapS: no it is not19:49
RoAkSoAxSpamapS: this is the job http://paste.ubuntu.com/588357/19:52
RoAkSoAxSpamapS: ARGH.. this one.. http://paste.ubuntu.com/588358/19:53
RoAkSoAxSpamapS: but the upstart job has not changed in quite a while19:54
RoAkSoAxand because of that, the upgrade /install in natty fails19:54
DavieySpamapS, IFACE is not used... previously that was not a problem with upstart... it would give a warning, but not fail to start19:59
SpamapSoh but it *IS* used19:59
DavieySpamapS, interetingly, when i appended IFACE=eth0, it still blocked19:59
SpamapSinstance $IFACE19:59
DavieySpamapS, yeah19:59
SpamapSthats very very important19:59
Davieybut in natty, it matters that it's not provided19:59
SpamapSIts *critical*20:00
Davieyin <natty, it didn't20:00
SpamapSand actually a good thing that its refusing to start20:00
DavieySpamapS, it wasn't critical pre-natty20:00
SpamapSits exposing a confusing thing though20:00
SpamapSwhy is it used in instance, and not in the scripts20:00
DavieySpamapS, one moment20:00
SpamapSI'd like to see a comment explaining that added to the file20:01
DavieySpamapS, it gave a warning before natty, but didn't fail...  I questioned it during the cycle, but because it worked - we just carried on with it.20:01
Davieyas a unknown :/20:01
SpamapSIt looks like the script needs to run multiple times.. every time a net-device-up runs..20:01
SpamapSSo, you just need to add this20:02
SpamapSenv IFACE=manual-start20:02
DavieySpamapS, well yeah, but postinst, we don't emit the interfaces20:02
DavieySpamapS, Ahh!20:02
DavieySpamapS, to the postinst or the upstart job?20:02
SpamapSupstart job20:02
DavieySpamapS, when was that introduced?20:03
SpamapSthat way any time somebody runs 'start eucalyptus-network' it works20:03
SpamapSDaviey: natty of course. :)20:03
SpamapSit bit me a few times as well20:04
DavieySpamapS, ok.. but doesn't change anything else?20:04
SpamapSNo, as you guys have noted, its not used anywhere else.20:04
Davieyie, the current job works as is, after a reboot.20:04
SpamapSI see the point of the thing..20:04
SpamapSits saying "check to see if there's a default route every time a net device is up"20:04
Davieyoooo20:05
SpamapSand w/o the instance stanza, it would race if multiple interfaces came up20:05
SpamapSI would suggest that it be   'start on net-device-up IFACE!=lo' .. since the code makes no sense on loopback only.20:06
DavieySpamapS, so add both of them entries, the env and amend the start on line?20:06
Davieyhggdh, are you around?20:07
hggdhDaviey: always20:07
Davieyhggdh, :D20:07
Davieyhggdh, Are you free? :)20:07
hggdhexpept, of course, when I am elsewhere20:08
hggdhDaviey: I was until now. But, mind you, I am married20:08
Davieyheh20:08
hggdhDaviey: what can I do for you?20:08
Davieyhggdh, Are you able to re-provision these machines, with stock beta1?20:08
Davieywell.. actually.. only cempedak actually.20:09
hggdhDaviey: hum. For stock beta1, it might be better to reinstall20:09
hggdhno biggie20:09
hggdh(I ran a dist-upgrade, and some other packages got upgraded as well)20:09
hggdhDaviey: give me ~ 20 min, and we will be all set20:10
Davieyhggdh, yeah.. cempedak uncovered an upgrade issue20:11
hggdhDaviey: just what we needed20:12
Davieyhggdh, think we have a fix, thanks to SpamapS .20:12
Davieyjust need to test it20:12
hggdhDaviey: installing stock beta1 now20:13
Davieyhggdh, groovy20:13
=== dendrobates is now known as dendro-afk
kirklandRoAkSoAx: ping20:27
RoAkSoAxkirkland: pong20:28
kirklandRoAkSoAx: i'm going to head your way shortly20:28
kirklandRoAkSoAx: sorry, i've been caught up here all day :-(20:28
RoAkSoAxkirkland: no worries :)20:28
kirklandRoAkSoAx: did you find some good wifi at a coffee shop?20:28
kirklandRoAkSoAx: there's some good places around there20:28
RoAkSoAxkirkland: actually end up staying in the room :). But, the Java Jives cafe seems like a good polace20:29
kirklandRoAkSoAx: it's a beautiful day though!20:29
RoAkSoAxand its right next to the hotel20:29
kirklandRoAkSoAx: i'm going to come pick you up20:29
kirklandwe'll get you out the hotel shortly20:30
kirklandRoAkSoAx: once again, my apologies20:30
RoAkSoAxkirkland: no worries, was working here too :) and btw.. robbiew said he might be coming too20:30
kirklandRoAkSoAx: cool20:31
kirklandrobbiew: want to meet us at Austin Java on Barton Springs road?20:31
robbiewnah...I need to drop off stuff at the venue20:31
kirklandrobbiew: I figured we'd finish the work day there, or at Uncle Billy's before heading over to Threadgills20:31
kirklandrobbiew: ah20:31
robbiewkirkland: they having the speaker's dinner at Threadgills again?20:32
kirklandrobbiew: yes, but Riverside location, at least20:32
kirklandrobbiew: which is better than the original20:32
robbiewah, very nice20:32
robbiewfor sure20:32
kirklandrobbiew: do you need help @ the venue?20:32
kirklandrobbiew: either today or tomorrow?20:32
robbiewnot today...as for tomorrow, I can't sit there all day...but have folks lined up to man the booth20:33
robbiewjust given out CDs at the table20:34
robbiewand ubuntu lanyards as bag swag20:34
RoAkSoAxrobbiew: my presentation is afternoon so I can be there most of the morning20:34
robbiewok20:36
SpamapShmm20:36
SpamapSisn't 'telinit 1' supposed to bring down the network?20:36
SpamapSDaviey: sorry yeah, I'd say both changes would be good. Though the start on change may need some more thought/testing than we can put in between beta1 and beta2. ;)20:43
Davieyheh20:44
SpamapSDaviey: we should add an event..   default-route-configured20:49
SpamapSDaviey: any time the default route changes that should be emitted. Lots of things would do well to start at that point rather than net-device-up IFACE!=lo20:50
* SpamapS puts it on the Oneiric idea pile20:50
hggdhDaviey: CLC/Walrus/CC/SC installed on cempedak, now installing the NCsa20:50
=== guntbert is now known as whoelse
=== skaet_afk is now known as skaet
hggdhDaviey: all installed, pristine beta1. I have to go out for 20 min21:13
hallynhggdh: so the problem yesterday was due to an upgrade issue?21:16
hallynDaviey: ^ ?21:16
SpamapSDOHHH21:17
SpamapSssh isn't restarted on runlevel 1->2 :(21:17
SpamapSor rather, sshd21:17
Daviey-otp21:21
hallynyeah we need a new one time pad.  let's just do plaintext for now21:22
hallynbbl21:23
uvirtbotNew bug: #747756 in openssh (main) "sshd is not started on transition from single to multi user" [Undecided,New] https://launchpad.net/bugs/74775621:36
genii-aroundProbably an upstart thing21:38
=== erichammond1 is now known as erichammond
hggdhhallyn: I do not know, I don't know what SpamapS and Daviey found21:57
SpamapSgenii-around: definitely an upstart thing :)21:57
hggdhDaviey: I am back, what do we need to do?21:57
SpamapSthe job was changed recently to have sshd stop on runlevel [!2345]21:57
SpamapSbut it only starts on 'filesystem'21:58
=== dendro-afk is now known as dendrobates
hggdhSpamapS: can you please summarise the changes to euca upstart -- I will then test the beast22:08
SpamapShggdh: add 'env IFACE=manual-start' to the file22:09
hggdhSpamapS: to the eucalyptus-netkwork.conf, correct?22:09
SpamapShggdh: right22:13
hggdhk, doing it. Will reboot after22:14
hggdhalright. I am just confused on *what* bug is this. I do not see it having any impact on the blocker we have22:20
kthomas_vh_howto install apache2-mpm-worker without forcing update of php to 5.3,  under 10.x?22:21
* kthomas_vh_ immediate googles22:21
kthomas_vh_*-ly22:21
=== evilmist is now known as mrmist
hggdhSpamapS: OK. Now, what exactly am I checking for here?22:32
hggdhall I see is that euca did not auto-start on a reboot22:32
SpamapShggdh: that you can upgrade the package22:32
SpamapSRoAkSoAx: ^^ can you help hggdh with a more clear test case?22:33
RoAkSoAxSpamapS: will have to do it a bit later as I'm kinda fixing something here :)22:36
hggdhhallyn: so, by the above, this has nothing to do with the issue we found yesterday22:36
RoAkSoAxhggdh: but basically, once you do a fresh install, try to upgrade with a later euxalyuptus version22:36
RoAkSoAxand you should be able to upgrade without any issues22:36
RoAkSoAxand not having eucalyptus failing to upgrade because of IFACE thing oin the upstart job22:36
hggdhRoAkSoAx: will do. But, worth noting, I made the change & rebooted -- euca did *not* came up22:37
hggdhmeanwhile, upgrading22:37
SpamapShggdh: you can probably even get it with --reinstall22:37
RoAkSoAxhggdh: yeah try that22:38
hallynhggdh: jjohansen: have you learned anything on bug 746751 ?22:42
uvirtbotLaunchpad bug 746751 in linux "kernel: [Firmware Bug]: the BIOS has corrupted hw-PMU resources (MSR 38d is 30)" [Critical,In progress] https://launchpad.net/bugs/74675122:42
jjohansenhallyn: sorry really just started looking as I was finishing up with another bug before switch context22:44
hallynjjohansen: np, was just wondering22:45
=== dendrobates is now known as dendro-afk
RoAkSoAxkirkland: http://me.roaksoax.com/cobbler.debdiff22:52
jjohansenhallyn: is there anyway to get access to the hardware in question or should I have hggdh run some test kernels22:53
hggdhjjohansen: all you need is access to tamarind, you should be able to ssh from there to cempedak/mabolo/marula/santol/sapodilla/soncoya22:55
hggdhjjohansen: the first is the CLC/CC/Walrus/SC, the others are the NCs (where KVM is run)22:55
jjohansenhggdh: I don't have access to tamarind22:56
hggdhjjohansen: then I can do it -- but I have a dinner to go in a few22:57
jjohansenhggdh: well thats okay I won't have a kernel for a while22:57
jjohansenhonestly not until some time on the weekend /me needs to look at it more first22:58
RoAkSoAxkirkland: #73161622:58
hallynjjohansen: what're you going to try?22:58
hallynhggdh: i got the access.  however, i don't really know my way around those systems...22:58
hggdhjjohansen: no prob. I will be fireflying the channels during the weekend22:58
hallynhggdh: i've looked over the wiki page,22:59
hallynis there a 'normal' way to start looking around?22:59
jjohansenhallyn: not sure yet, just wanted to know about testing for when I had smething22:59
hggdhhallyn: I usually start with ssh-copy-id to the systems23:00
hggdhhallyn: you might want to add some lines to your ~/.ssh/config, though23:01
hallynbut is any machine free/safe?23:02
hallynhggdh: i was planning to look around next week23:02
hallynwas hoping to figure out this vmbuilder ec2 port23:02
hggdhhallyn: all of them have natty Eucalyptus installed; I am running a dist-upgrade right now23:03
hggdhhallyn: they are free to use, I can always re-gen the beast23:03
hallyncool, thanks23:03
kirklandRoAkSoAx: SpamapS: http://paste.ubuntu.com/588420/23:04
kirklandRoAkSoAx: this includes your koan fixes23:04
kirklandSpamapS: and the debconf stuff23:04
kirklandSpamapS: eyeball that diff while i build and test it locall here23:04
jjohansenhggdh: this worked on maverick, tight?23:10
hggdhjjohansen: yes. But we were using CCISS then23:19
jjohansenhggdh: I am not convinced that is the reason, but it is worth looking at23:25
kirklandRoAkSoAx: http://paste.ubuntu.com/588426/23:34
kirklandRoAkSoAx: something's wrong in cobbler.postinst23:34
* RoAkSoAx looks23:34
kirklandRoAkSoAx: on dpkg -i, it's hanging23:34
kirklandRoAkSoAx: i have some debug code in postinst right now23:35
hggdhjjohansen: neither are we convinced. But it is worth noting the difference.23:41
jjohansenhggdh: right, do we know if any of the natty kernels worked?23:42
hggdhjjohansen: no, we do not -- this is the first time in Natty that we have been able to run Euca on that hardware23:43
jjohansenhggdh: okay, then I think the place to start is with a mid point bisect on the kernels23:43
hggdhjjohansen: perfect23:44
jjohansenhggdh: hrmm, I'm not sure whether I will do bisects on the mainline or just grab older natty kernels for the first couple of tests.  But either way I'll have a kernel to point you at later tonight23:45
hggdhjjohansen: OK. I am going out to a dinner, but will be monitoring the channel23:46
hggdhof course, when I get back :-)23:46
jjohansenhggdh: /me was also thinking it would be good to get a trace with the maverick kernel installed on natty.  ie.  do the strace on kvm with the maverick kernel, that would give us a better comparison point for the kind of output expected in the strace log23:47
=== dendro-afk is now known as dendrobates

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!