/srv/irclogs.ubuntu.com/2011/04/18/#ubuntu-server.txt

=== System is now known as Guest9939
uvirtbotNew bug: #764094 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/76409401:02
uvirtbotNew bug: #764096 in postfix (main) "DNS hostname lookups fail in chroot after natty upgrade" [Undecided,New] https://launchpad.net/bugs/76409601:02
=== dendro-afk is now known as dendrobates
=== dendrobates is now known as dendro-afk
van7huhello, I've just finished installing LAMP in my server03:31
van7huwhat I need to do next?03:32
twbvan7hu: that rather depends what you want to achieve.03:34
van7hutwb:I just want to develop a  local website to test03:35
van7hutwb: How could I do that03:35
van7hutwb: if I want to test whether my website is working, localhost?03:36
twbI imagine so.03:36
twbOr if your server and desktop are separate systems (as we recommend), it would be http://<hostname of server>03:36
van7hutwb: I am in a LAN network03:37
twbI don't see how that matters.03:38
van7huhow to I install LAMP in a command?04:08
twbsudo tasksel?04:08
van7huah yeah04:10
van7huthanks04:10
van7hutwb: sorry04:15
van7hubut what I need to do04:15
van7huit shows me an select, but how could I select, what button to use?04:16
twbThere should be a LAMP option there04:16
van7huyes04:16
twbSo pick it04:16
van7hubut I could not select it04:16
van7hubump, what button should I use to choose it04:20
twbspace?04:20
twbDunno, I don't use that stuff04:20
van7huah, thanks04:20
van7huI check all keyboard, except it04:20
The_Kernelhi, does anyone know how to clear the mailqueue on courier04:21
The_Kernel?04:21
twbThe_Kernel: is there a mailq or postqueue command or similar?04:24
The_KernelI found it04:25
twbThe_Kernel: maybe dpkg -L courier-thingy | grep sbin -OK04:25
The_Kerneljsut had to figure out how to ask google properly04:25
rnigamI want to update qemu-kvm package from default version 0.12.5 to the latest 0.14.0 without breaking any other dependencies on ubuntu-server maverick. I see that Natty has 0.14 version. Can someone here tell me how can i do it in maverick. Thanks04:30
twbKVM version appears to be 1:84+dfsg-0ubuntu16+0.12.5+noroms+0ubuntu7.204:32
twbDo you mean the 0.12.5 part of that ?04:32
twbAh, I guess you mean the qemu-kvm source package.04:33
rnigamyes twb04:33
twbqemu-kvm | 0.12.5+noroms-0ubuntu7 |      maverick | source, amd64, i38604:33
twbqemu-kvm | 0.14.0+noroms-0ubuntu4 |         natty | source, amd64, i38604:33
twbUnless there's already a reliable backport, you will want to roll your own.  This is not something inexperienced packagers should do.04:34
rnigam:(04:34
twbThat, or upgrade your system to natty.  IIRC that hasn't been released, so that wouldn't be a good idea either.04:35
rnigamcant i do manual install of the new package with all the dependencies ? and then use the absolute path to run kvm?04:36
twbIf you're happy to make your system less reliable, maintainable, and secure -- sure.04:37
rnigam:(04:38
twbWhy do you want the newer qemu-kvm?04:38
rnigamso the newer kvm supports a feature called vhost which improves network throughput between kvm guests !04:41
qman__well, natty IS about to release, so if you can wait a week or two, do that04:42
qman__otherwise, I agree, rolling your own package is the best option04:43
qman__everything else is too messy04:43
twbUnless you're burning for that feature, I advise you to wait04:44
twbIMO backporting like that is only worth it to get show-stopper bugfixes/features/security patches.04:44
twbe.g. I do it for openldap because otherwise I can't use sudo-ldap and users can't reset their own passwords.04:45
twbThat and eatmydata, because lucid's dpkg is particularly silly wrt I/O04:46
rnigamok I am very desperate to test this out ! today or tomorrow.04:57
rnigamI think I will go for Natty.. Can I download beta yet?04:58
rnigamare there any issues that I should be worried about while swithcing to the beta?04:59
twbI don't know.  I only run LTS releases05:18
twbIMO non-LTS releases are ALL flaky05:18
Datzno trying out unity for you?05:42
twbI don't use GUIs05:42
Datzhardcore05:43
twbNot my fault if normals are weak05:43
DatzI couldn't do that. I need some GUI for web browsing05:43
Datzwhat do you use? lynx, links?05:43
twbI do launch X on demand for web banking ("xinit /usr/bin/opera http://bank.example.net/")05:44
twbFor normal browser I use emacs-w3m and w3m05:44
twbThey support inline images, which is about the only "GUI-y" feature I really need for browsing05:44
Datzhumm, haven't tried emacs-w3m05:44
Datzhumm05:44
twbemacs-w3m is more-or-less just w3m inside emacs05:44
twbIt's not actually *implemented* that way, but that's what the users see05:45
Datzhumm05:45
DatzI know not of this05:45
Datzlooks interesting though05:45
twbThe real kicker is to use intelfb to get native resolution on the framebuffer, and kbd+console-setup to get nice small terminus 12x6 font05:46
twbOh, and setterm to get nice colours05:46
Datzyea, doesn't sound like a hassel or anything :P05:46
twbShrug05:46
Datzhehe05:46
twbIt's no harder than xf86.conf used to be05:47
Datzah, haven't really had to deal with that sutff05:47
twbTHese days xorg.conf isn't needed, it's all auto-detected05:47
twbten years ago, not so much05:48
Datzbut I'm sure it's great once it's all configured05:48
Datzum hum05:48
Datzyou use emacs for irc as well then?05:48
twbFor me, fbcon looks pretty much identical to X+ratpoison+xterm05:48
twbDatz: yes05:48
Datzah05:48
Datzcools05:48
twbTry "emacs -f irc"05:48
Datzhaven't tried that out, pretty used to irssi05:48
Datzhey look it autoconnects to freenode05:49
Datzis that the -f ?05:49
twbNo -f is like M-x05:49
Datzhumm05:49
Datzso.. I don't know how to use it anyway :)05:50
twbWithout configuration, M-x irc should connect you to #emacs on freenode automatically05:50
twbOr maybe #rcirc, I forget.05:50
Datzoh.. I see it's just working05:50
twbThat's only one of the IRC clients, though05:50
datz`test05:50
datz`heh05:50
twbEmacs also ships with M-x erc, and there are a handful of others to install05:50
Datzah05:50
twb"darcs get http://cyber.com.au/~twb" for my dotfiles, if you feel like looking around them05:51
Datzmaybe I'll have to look into emacs irc a bit more05:51
Datzthanks, I'll have a look05:52
twbDamn, permissions are broken on that05:52
Datzah05:52
twbYou can hit individual files in there, but autoindexing is disabled05:53
twbSo e.g. http://cyber.com.au/~twb/.profile05:53
Datzhumm05:54
twbOK, *now* "darcs get" should work.06:00
=== TheKernel is now known as Guest83425
=== dendro-afk is now known as dendrobates
adacIs someone familiar here with tomcat clustering?09:56
jamespageadac: I've done a bit in the past; might be a bit rusty - whats your question?10:13
adacjamespage, I was wondering how seesion replication works with simple: "<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>" flag?10:14
adacdo you know whcih port is used for to exange the sessions?10:14
twbWow, already I'm glad I don't know10:14
jamespageadac: http://tomcat.apache.org/tomcat-6.0-doc/cluster-howto.html - should have all the information you need10:15
adacjamespage, I know that page already ;)10:16
jamespageadac: "The TCP port listening for replication messages is the first available server socket in rangeĀ 4000-4100"10:17
jamespageadac: I think that multicast is just used for control across the cluster - the TCP port is used for replication10:18
adacjamespage, oh i see10:18
jamespageadac: so more that likely it will be port 4000 - but it might not be :-)10:18
adacjamespage, hehe10:19
adaclets try it out10:19
adacthere are only a hundred possibilities right? =)10:20
adacno but maybe I can fix his port somehow10:20
adacset it  by default10:20
jamespageadac: org.apache.catalina.tribes.transport.nio.NioReceiver is the configuration element that will probably do this for you10:23
adacjamespage, yes you right this looks like the place to set this port10:23
jamespageadac: http://tomcat.apache.org/tomcat-6.0-doc/config/cluster-receiver.html - more info10:26
jamespageadac: autoBind="0" might do the job - worth testing though.10:28
adacjamespage, still no luck... with 4000, lets try with autobind="0"10:29
uvirtbotNew bug: #764391 in cobbler (universe) "cobbler fails to manage bind9 " [Undecided,New] https://launchpad.net/bugs/76439110:31
adacjamespage, still does not work even with autobind=0. This is wath i have on both tomcat servers now (two own server): http://pastie.org/180644110:35
jamespageadac: what behaviour are you actually seeing?10:38
adacbalancing is fine, it switches when one tomcat goes down. but the session is lost, jamespage10:38
adacso when one tc goes down, and i reload the page a new session appears10:38
jamespageadac: have you set the <distributable/> flag in the web application web.xml?10:40
adacjamespage, yes i did10:40
jamespageadac: anything that might indicate that its not working in the tomcat logs?10:41
adacwait a second jamespage I will check that10:43
adacjamespage, hmm on starting up tomcat 2 says: Apr 18, 2011 11:46:43 AM org.apache.coyote.AbstractProtocolHandler init10:50
adacINFO: Initializing ProtocolHandler ["http-bio-8080"]10:50
adacApr 18, 2011 11:46:43 AM org.apache.coyote.AbstractProtocolHandler init10:50
adacINFO: Initializing ProtocolHandler ["ajp-bio-8009"]10:50
adacApr 18, 2011 11:46:43 AM org.apache.catalina.startup.Catalina load10:50
adacINFO: Initialization processed in 2983 ms10:50
adacApr 18, 2011 11:46:43 AM org.apache.catalina.core.StandardService startInternal10:50
adacINFO: Starting service Catalina10:50
adacApr 18, 2011 11:46:43 AM org.apache.catalina.core.StandardEngine startInternal10:50
adacINFO: Starting Servlet Engine: Apache Tomcat/7.0.1110:50
adacApr 18, 2011 11:46:43 AM org.apache.catalina.ha.tcp.SimpleTcpCluster startInternal10:50
adacINFO: Cluster is about to start10:50
adacApr 18, 2011 11:46:44 AM org.apache.catalina.tribes.transport.ReceiverBase bind10:50
adacINFO: Receiver Server Socket bound to:/188.40.170.187:400010:50
adacApr 18, 2011 11:46:44 AM org.apache.catalina.tribes.membership.McastServiceImpl setupSocket10:50
adacINFO: Setting cluster mcast soTimeout to 50010:50
adacApr 18, 2011 11:46:44 AM org.apache.catalina.tribes.membership.McastServiceImpl waitForMembers10:50
adacINFO: Sleeping for 1000 milliseconds to establish cluster membership, start level:410:50
adacApr 18, 2011 11:46:45 AM org.apache.catalina.tribes.membership.McastServiceImpl waitForMembers10:50
adacINFO: Done sleeping, membership established, start level:410:50
adacApr 18, 2011 11:46:45 AM org.apache.catalina.tribes.membership.McastServiceImpl waitForMembers10:50
adacINFO: Sleeping for 1000 milliseconds to establish cluster membership, start level:810:50
adacApr 18, 2011 11:46:46 AM org.apache.catalina.tribes.membership.McastServiceImpl waitForMembers10:50
adacINFO: Done sleeping, membership established, start level:810:50
adacouch sorry10:50
adacApr 18, 2011 11:49:38 AM org.apache.catalina.ha.session.DeltaManager startInternal10:51
adacINFO: Starting clustering manager at localhost#/cluster10:51
adacjamespage, ^^ this one10:51
adacApr 18, 2011 11:49:38 AM org.apache.catalina.ha.session.DeltaManager getAllClusterSessions10:51
adacINFO: Manager [localhost#/cluster]: skipping state transfer. No members active in cluster group.10:51
jamespageadac: it looks like the cluster manager is binding to localhost rather than the real IP of the server10:52
adacjamespage, ok I will ahve anotehr look on the config10:54
jamespageadac: once your tomcat instances are started take a look and see where they are binding to10:54
jamespageif you see port 4000 on localhost you might need to use the 'address' parameter in the configuration10:55
jamespagei.e. auto might not be working quite as expected!10:55
adacjamespage, http://pastie.org/1806506 thist is the startup10:58
adacmessage10:58
jamespageadac: just spotted you are using Tomcat 710:59
* jamespage goes to see if anything is differnt10:59
adacjamespage, shoudn't be that different11:00
adac:)11:00
jamespageadac: it would appear so11:00
adacbu maybe there is a tiny tiny little thing11:00
adaclike ession replication11:00
adacthat is different hehe11:00
RoyK!pastebin11:01
ubottuFor posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.11:01
jamespageadac: well it could be - it would appear that the two nodes are not forming a cluster - this is done over the multcast address11:02
jamespageadac: assume that is consistent between the two nodes?11:02
adacjamespage, taht was exactyl the nextquestion I wanted to ask you11:02
adacthsi mulitcast thing11:02
adacis this soemthing tomcat internal11:03
adacor is this a real network adress?11:03
adacip adress11:03
jamespageadac: its not tomcat internal - http://en.wikipedia.org/wiki/Multicast11:04
jamespageadac: its a nice efficient way of getting information to a large number of nodes without sending it to each individually.11:04
jamespageadac: the two nodes in your cluster need to use the same multicast IP address AND port number.11:05
adacI see so this is a network setup11:05
jamespageadac: you should not need todo anything else to your systems network configuration11:05
adacno?11:06
adaconly give this ip that the tomcat docs suggest?11:06
adacwithin the server.xml11:06
adac^^jamespage11:08
uvirtbotadac: Error: "^jamespage" is not a valid command.11:08
adachehe11:08
jamespageadac: you should only need to specify this in the server.xml11:09
jamespageadac: if you execute 'ifconfig -a' you should see that 'MULTICAST' is mentioned in the output for your network adapters.11:10
adacjamespage, http://pastie.org/1806558 this is what ifconfig -a gives me11:12
adacso it seems that multicast is missing...11:13
adacright?11:13
jamespageadac: yes - no multicast no cluster comms :-(11:14
jamespageadac: are you running this in a container?11:14
adacthis is a openvz container, yes jamespage11:14
adachehe11:14
jamespageadac: thought so11:14
adacbut all fine now I finall know what is wring11:15
adacwrong11:15
jamespageadac: great - glad I could help :-)11:15
adacthank you a lot jamespage!!11:15
jamespageadac: np11:15
jamespageDaviey: as I'm fixing up the bind9 integration for cobbler do you think bind9 should be added to suggests?11:25
Davieyjamespage, suggests sounds safe.12:16
Davieyjamespage, suggests doesn't add much value... but is logical.12:16
jamespageDaviey: ack12:21
adaccommand: "brctl addbr vzbr0" error: "add bridge failed: Package not installed" Do you guys have an idea? The package is installed12:51
adacdoes the kernel not know how to handle it maybe?12:52
apersonI've tried a few times and failed.  How would I write a .htaccess file to redirect my /map/ to my map subdomain?12:57
m|kaelhello, i would like to add a site in apache2 for wildcard subdomains. kinda like *.dev.domain > /var/www-dev/* can anyone help me with it please, i use the lamp package which comes with ubuntu server13:06
andriijasis it possible to restrict access to a certain account over ssh for 1 ip?13:16
andriijasor does adding ip limitation apply to all accounts?13:17
JanCm|kael: you'll need something like this: http://httpd.apache.org/docs/2.2/rewrite/vhosts.html13:19
m|kaelJanC: thank you, ill check it out13:20
m|kaelJanC: so its not possible to add a site in /etc/apache2/sites-available ?13:21
JanCeh, you *have* to13:22
m|kaelJanC: kk13:23
zulmorning13:28
Davieyjamespage, is your cobbler branch good to go?13:34
jamespageDaviey: just testing now13:34
Davieycool13:34
Error404NotFoundanybody here used varnish? I have installed varnish on http://www.bitesource.com/ and enabled detailed headers according to http://www.varnish-cache.org/trac/wiki/VCLExampleHitMissHeader. Problem? Its a MISS for everything and X-Cacheable is always NotCacheable for some reason13:39
jamespageDaviey: cobbler branch now GTG if you would like to sponsor :-)13:44
Davieyjamespage, you rockstar13:44
Davieyjamespage, Maybe next cycle the bind binary could be a config option, and we could submit that upstream13:46
jamespageDaviey: that would be a good idea; more time than we have ATM but def next cycle13:46
Davieyjamespage, agreed13:47
ttxkirkland: ping14:02
jfb_h20anyone up for a challenge? http://ubuntuforums.org/showthread.php?t=172595714:03
jfb_h20Or so it seems by the lack of response...14:03
patdk-wkjfb_h20, this is ubuntu server, not ubuntu or ubuntu laptop help14:07
jfb_h20patdk-wk: thanks. I know, seems though that folks here are a little more focused... a lot of noise on #ubuntu, but i'll give it a ping over there if you think it's better.14:08
jfb_h20patdk-wk: I guess though, given it's a GPU issue, 'server' might not be the best place ;)14:09
=== mjeanson_ is now known as mjeanson
adacjamespage, I just wnated to let you now there is a new mechanism with memcached for the session replication: http://code.google.com/p/memcached-session-manager/wiki/SetupAndConfiguration14:54
RoAkSoAxmorning all14:55
jamespageadac: thanks for the pointer - looks interesting14:58
jamespageadac: considering looking at packaging tomcat7 next cycle and this might make a nice supplement.14:58
adacjamespage, I knew you would like it14:58
adac:)14:58
MTecknologywhat was that software that was around the kernel level for keeping file systems in sync across disks?15:06
patdk-wkmdadm?15:07
MTecknologyer.... across different systems..15:07
patdk-wkheh, nothing stopd mdadm from doing radi1 between systems :)15:08
patdk-wkdrbd?15:08
MTecknologyTHAT!15:08
MTecknologyThanks :D15:08
patdk-wkhmm, raid1 two iscsi mounts :)15:09
MTecknologywhich would also work great; not for me - someone on cheap hardware that thinks they're going to do a high availability setup; sounds like that's what they're looking for15:10
RoyKpatdk-wk: what sort of iscsi target?15:46
patdk-wkany, I was just saying it is easy to setup mdadm to use disks across different physical systems15:46
smoserDaviey, i un-milestoned bug 74593015:59
uvirtbotLaunchpad bug 745930 in cloud-init "cloud-init timeout waiting for metadata service on EC2" [Low,New] https://launchpad.net/bugs/74593015:59
Davieysmoser, why?16:00
smoserbecause its not a bug. its hardware failure.16:00
smoserhardware, or platform, or *something* failure.16:01
smoseri can't fix amazon's platform bug.16:01
=== rpinson_ is now known as raphink
Davieysmoser, you should.16:21
uvirtbotNew bug: #745008 in samba (main) "Files left behind on upgrade from Maverick" [Undecided,New] https://launchpad.net/bugs/74500816:27
ppetrakipatdk-wk, have you ever actually deployed that setup, without corrupting your data?16:30
patdk-wknever said it was very sane :)16:32
patdk-wkand drbd defently doesn't protect you from data corruption16:32
* SpamapS stretches16:32
SpamapSmorning people16:32
SpamapSdrbd is an availability solution, not a backup solution. :)16:32
patdk-wkbusy studing xkcd today16:32
ppetrakidrbd, in mode C, with a battery backed cache is extremely reliable16:33
SpamapSyes, as an availability solution. :)16:34
ppetrakisure16:34
SpamapSyour DB could still mangle all the data due to a bit error16:34
ppetrakiif it does, then it's a bug in drbd16:34
SpamapSsnapshots, transaction logs, offsites ... backups will never go out of style. :)16:34
patdk-wkor the drive is bad16:34
ppetrakithat's why it's recommended to use a smart raid in such a deployment16:35
SpamapSwhat is "smart raid" ?16:35
* SpamapS guesses its the kind where the pirates don't get drunk before they land16:36
patdk-wkno idea, cause I have had raid cards freak out, and cause the drive array to go nuts16:36
ppetrakisomething that checks your disk's integrity on a regular schedule16:36
ppetrakithough DRBD has a verify feature too16:36
ppetrakihaving said all of that, I'd much rather prefer a good SAN16:37
cloakableWhat would you use as a SAN head?16:38
cloakable:P16:38
ppetrakian FT machine like a Stratus box16:38
SpamapSppetraki: how does it know what the integrity of MySQL tables is?16:39
SpamapSa SAN is not an availability solution. :)16:39
ppetrakiSpamapS, it doesn't, but in mode C, it can't complete the IO unless it receives verification from the other side16:39
SpamapSppetraki: I'm well aware of how drbd works, having been a user since 2000. :)16:39
ppetrakiSpamapS, :)16:40
SpamapSppetraki: I still copied everything to tapes once a day. :)16:40
ppetrakiSpamapS, never said it was a backup replacement16:40
SpamapSRight, somebody asked if drbd protects you from data corruption.16:41
SpamapSemphatically, *no*16:41
ppetrakiSpamapS, I simply wanted to emphasis that DRBD is better suited for "raid 1 over the network" than iSCSI/MDADM16:41
RoAkSoAxppetraki: But, with 3-way replaction with DRBD (as disaster recovery) might be cofused as backups16:41
patdk-wkactually the question was what replicates filesystems across disks16:42
ppetrakiRoAkSoAx, well, the 3 way sometimes makes good sense if the third node is the backup server16:42
patdk-wkit wasn't till later the question was modified to across servers16:42
RoAkSoAxSpamapS: indeed, but that's why we use fencing, but even drbd has its own preventing methods, but of course, those are not a complete solution16:42
RoAkSoAxppetraki: indeed, but the idea of the 3-way replication was specifically use it as a backup server16:43
ppetrakiSpamapS, nothing perfect, but with battery backed storage controllers, UPS, and proper fencing you can get close16:43
RoAkSoAxppetraki: however, it is now used as site replacation16:43
RoAkSoAxppetraki: and some sense of a 4 node cluster16:43
RoAkSoAxor 4 way replication16:44
RoAkSoAxs/way/node16:44
SpamapSthere's also some FS's now that replicate across network instead of using block level replication16:45
SpamapSglusterfs is pretty cool.. ceph will follow btrfs into the mainstream and should be pretty awesome16:46
ppetrakiDRBD is neat, but the supporting community is too small to get real free help16:46
ppetrakiI can remember several instances where I've gotten responses that basically said "if you only had a support contract"16:47
RoAkSoAxppetraki: those are the sales guys lol16:47
RoAkSoAxppetraki: but anyways, they do have good documentation16:47
ppetrakiRoAkSoAx, nope, it was the head devs16:47
RoAkSoAxppetraki: fghaas, lge?16:48
ppetrakiRoAkSoAx, I used to maintain a branch of DRBD internally for a time. Miserable work16:48
RoAkSoAxppetraki: hehe well from my point of view they have to make money out of something, otherwise there wouldn't even be a DRBD16:48
SpamapSWith something like DRBD .. you really should be ready to pay a little.16:49
RoAkSoAxindeed16:49
RoAkSoAxSpamapS: so how's it going today man?16:49
ppetrakiI tell people, think of DRBD like a "virtual SAN", and budget accordingly16:49
SpamapSI learned that w/ MySQL .. paying percona for 8 hours of consulting did fantastic things for the response time of our queries. :)16:50
SpamapSRoAkSoAx: I am sore in almost every muscle and bone of my body.. but good. :)16:50
RoAkSoAxSpamapS: hehe too much alcohol or too much working out?16:50
SpamapSRoAkSoAx: 3 hour karate test16:52
SpamapS3 hours of kicking, punching, spinning, sparring, "HIIIYYAAAHHH"'ing, and pushups.. soo.. many.. pushups16:53
RoAkSoAxSpamapS: oh wow! that definitely hurts... I run yesterday after more than 1 year with absolutely no excercise (post surgery) and I'm sore, but feel better than ever16:53
SpamapSRoAkSoAx: I'm drinking green tea and eating flax seed oatmeal.. hopefully the omega 3's and anti-oxidants will do their pseudo-science-certified dance and make me feel better soon16:59
macnohi, in 10.10  there's a /etc/default/rsyslog but it's not read by the upstart script. The argument now is written directly in /etc/init/rsyslog.conf is it correct?17:02
DelemasAnyone know how to determine what is currently set as the admin password or admin email of an Ubuntu enterprise cloud?17:13
SpamapSDelemas: not sure, but you can probably reset it via dpkg-reconfigure eucalyptus-cc17:17
Delemashmm no luck there...17:19
SpamapSbummer17:22
SpamapSkirkland: ping, Delemas is trying to figure out how to reset his admin account on UEC.. any ideas?17:23
SpamapSDaviey: ^^17:23
kirklandSpamapS: if he set his email address when he first logged in, just reset password17:24
kirklandSpamapS: if not, i have no idea17:24
DelemasI tried the recover password route but no email was sent out... I obviously tried all the accounts I thought that should work but the web interface is accepting nothing and emailing nothing...17:24
SpamapSkirkland: btw I just tried out the nested byobu fix. Much smoother. :)17:25
SpamapSkirkland: next step is to just have it open as a new window inside your existing byobu.17:25
DelemasNevermind, after a restart it let me login. Not sure what that was about... Thanks anyways...17:26
=== dendrobates is now known as dendro-afk
smoserSpamapS, you want to read bug 740390 for me ?17:50
uvirtbotLaunchpad bug 740390 in dbus "libdbus-1-3 upgrade does not respawn init, resulting in unclean shutdown" [Undecided,New] https://launchpad.net/bugs/74039017:50
smoseri'm asking you because the bug-opener mentions  bug 67217717:51
uvirtbotLaunchpad bug 672177 in sysvinit "libc6 upgrade causes umount to fail on shutdown because init cannot be restarted" [Critical,Fix committed] https://launchpad.net/bugs/67217717:51
SpamapSsmoser: reading17:59
SpamapSsmoser: you missed his point, on reboot it probably would actually have to fsck /18:01
SpamapSoh wait18:01
SpamapSno you didn't18:01
SpamapShaha I should read the whole thing18:01
SpamapSsmoser: yes touching /var/run/init.upgraded is actually probably something we should do on all libs that init dynamically links18:02
smoseri did almost miss the point SpamapS18:03
SpamapSsmoser: let me try this on an up to date natty system.. the key is whether or not you get orphaned inodes in the dmesg on reboot18:04
* SpamapS is always shocked when he sees how many updates accumulate for a bare bones VM in one week of release freeze18:05
smoserSpamapS, there were 42 in the 36 hours prior to me coming in this morning18:05
SpamapSwe almost need to create a trigger for upstart on /lib18:09
=== dendro-afk is now known as dendrobates
SpamapSsmoser: ok I marked that one Triaged and High. The next upgrade to dbus really should handle the init.upgraded thing unless we've put the trigger in place for upstart.18:14
SpamapSThough there is some hope that upstart will be able to re-exec itself without losing state when upstart 2 comes out18:14
=== schmidtm_ is now known as schmidtm
zulhallyn: ping18:22
hallynzul: hey18:23
user5vhello, how do disable internet/network access for some linux users, are there special groups?18:31
SpamapSuser5v: you can disable access for local users yes..18:34
* SpamapS isn't sure how to do it w/ ufw tho18:34
user5vSpamapS: whats the keyword to google?18:34
jdstranddon't bother looking, ufw doesn't have that via the cli. any iptables-style stuff can be added to /etc/ufw/*rules of course18:35
SpamapSjdstrand: ahh thats how. :)18:35
SpamapSuser5v: man iptables, search for 'owner'18:36
user5vSpamapS: does NX or VNC work for this user after disabling internet access?18:38
SpamapSuser5v: depends on how you "disabled" the access18:43
SpamapSuser5v: if you say iptables -A OUTPUT -m owner --uid-owner baduser -j DROP  .. then they will have no ability to do any kind of network communication.18:44
user5vSpamapS: the user should be able to log in with NX but shoudn't download anything inside of the nx session a. e. wget18:46
SpamapSuser5v: so then allow the NX port first, but drop everything else.18:47
user5vSpamapS: i have done this:18:54
user5vSpamapS: iptables -A OUTPUT -m owner --uid-owner test -p tcp --dport 22 -j ACCEPT18:55
user5vSpamapS: iptables -A OUTPUT -m owner --uid-owner test -j DROP18:55
user5vnow nx doesn't work18:55
user5vssh works18:56
SpamapSbecause.. you used port 2218:57
SpamapSyou're allowing 22 *out* there btw18:57
SpamapSi suspect you want something different18:57
user5vSpamapS: should I allow 22 IN, too?18:59
SpamapSuser5v: you can't control incoming ports per user18:59
user5vSpamapS: what's the problem with 2219:00
=== tschundeee_ is now known as tschundeee
SpamapSuser5v: I'm sorry.. this is a *really* advanced topic, and I don't think IRC is an appropriate way to try and learn this.19:00
user5vSpamapS: thank you, but how to delete the two rules?19:01
MetaJakeusing ubuntu-server on VMWare locally, is there any way to use "real world" URL's to visit sites on the local server? or do you know if I'm stuck with just using my network's IP address as the URL as i develop locally? (--- recommend any google search phrases for reading on this topic?)19:02
SpamapSuser5v: just do '-D' instead of '-A'19:04
pethkaqenihi all19:05
SpamapSuser5v: your next best way to learn this is to read up on iptables as a whole system, so you can understand how INPUT/OUTPUT work together19:05
pethkaqenisomeone may help me plz19:05
pethkaqeniim new to ubuntu server and im so dammed confused with this one19:05
pethkaqenii have a attansic technology co device 1062 (rev c0) driver problem19:05
SpamapSMetaJake: you could put the "real world" hostnames in /etc/hosts19:05
SpamapSMetaJake: if you're on windows.. thats not the right file.. its like.. C:\windows\lmhosts or something like that19:06
* SpamapS hasn't had to do that in a long... long time19:06
SpamapSpethkaqeni: whats a "co device" ?19:06
MetaJakeSpamapS, I see. heh.19:06
MetaJakethanks i'll toy with that.19:07
SpamapSMetaJake: there are also some firefox plugins that let you spoof the Host: header.. that helps if thats the thing you need to fix.19:07
MetaJakealrighty.19:08
RoAkSoAxSpamapS: ping19:11
adacHi guys, my backup servers inodes are full, even though I still have 43 gigs free disk space19:12
SpamapSRoAkSoAx: rama lama ping pong19:12
adacany ideas how to resolve that?19:12
SpamapSadac: heh, too many tiny files.19:13
SpamapSadac: IIRC, ext4 can't expand the inode pool without creating a new FS19:13
RoAkSoAxSpamapS: if you free, could you take a look to cluster-agents which I just uploaded to maverick-proposed :)?19:13
RoAkSoAxit's an SRU19:13
SpamapSRoAkSoAx: sure, I'm planning a run through the -proposed queue in a bit19:13
adacSpamapS, arrg....19:13
RoAkSoAxSpamapS: cool, thanks!19:13
=== bsd123123 is now known as alanr
adacRoAkSoAx, what is cluster-agents?19:14
RoAkSoAxadac: the package that contains the resource agents for cluster environments19:14
RoAkSoAxadac: resource agents as in scripts that help manage services in terms of HA Clustering (pacemaker/heartbeat/corosync/etc)19:14
adacRoAkSoAx, and for which clustering?19:15
adacmean wich software to cluster19:15
RoAkSoAxadac: HA Clustering -> pacemaker based19:15
adaclet me google that19:15
RoAkSoAxeither pacemaker/corosync stack or pacemaker/heartbeat stack19:15
RoAkSoAxadac: RHCS resource agtents should be pacemaker compatible in newer versions (post natty)19:15
RoAkSoAxadac: http://www.linux-ha.org/wiki/Resource_Agents19:17
adacRoAkSoAx, sounds interesting19:18
adacI will mkae ma note and read through once I have solved my indodes problem ;)19:18
adac*indes19:18
adacinodes19:18
RoAkSoAxhehe cool19:18
adacSpamapS, what ths standard indode number?19:20
hallynzul: YUCK.  can't run debootstrap inside a lxc container bc it wants to read /dev/kcore and such19:20
SpamapSadac: there's no standard. When you create filesystems, you need to have some idea of how many files/inodes you will consume19:20
SpamapSadac: I'm guessing you're using something that creates a lot of hard links to files when they haven't changed, right?19:21
SpamapShallyn: kcore?!19:21
adacSpamapS, well this host is a backup host19:22
adacI have backuppc running on it19:22
adacand it couls be that there are a loot files19:22
adac*lot19:22
SpamapSadac: you might be able to shrink your current filesystem, and create a new one with a lot more inode space19:24
SpamapSadac: thats tough if you just have "one big /"19:24
adacSpamapS, yes that is my plan, but I might install it from scratch19:24
adacagain19:24
adacsince backup is relatively new19:24
SpamapSadac: I'm not entirely sure if the installer lets you tweak these things easily. I hope it does19:25
adacLets hope19:25
zulhallyn: why would you want to do that?19:25
SpamapSadac: you may want to just create a minimal system partition and put all the backups in a specialized /var/lib/backuppc that you create after the fact.19:25
adacotherwise I do it manually, aye exactly19:25
adacreiserfs shhould be good dealing with lots of small files19:25
adacjust read it in the intenets19:26
hallynSpamapS: /dev/core19:26
hallynzul: it only does it if you do --arch=19:26
hallynzul: presumably trying to verify19:26
SpamapSadac: you'll want to read 'man mkfs.ext4' when doing it manually.. -i in particular is what you want.19:27
adacSpamapS, kk, thank you for the hints!19:27
hallynDaviey: i suppose someone is going tohave to do the maverick fix for open-vm-tools20:09
Davieyhallyn, I don't think it needs to be a priority atm, it only affects -backport repository, right?20:12
Davieyif it is easy enough to backport the natty package, then shoot for it i guess.20:13
hallynDaviey: that's what i did, but i don't know for sure that it'll work.  Guess we'll see what the guy says20:16
hallynmaybe i wasn't clear enough that he shoudl try those packages20:16
Davieyhallyn, rocking20:16
Davieyhallyn, we'll see - btw, are you familiar with https://help.ubuntu.com/community/UbuntuBackports#Technical%20Information%20for%20Ubuntu%20Developers ?20:17
hallynDaviey: no20:22
RoAkSoAxzul: ping20:41
zulRoAkSoAx: what up?20:42
RoAkSoAxzul: are server ISO's the only ones that can be used with cobbler. Or Desktop ISO's can also netinstall (or can we netboot in this case)20:42
zulRoAkSoAx: desktop or server afaik20:43
RoAkSoAxzul: ok thanks. I guess I'll have to give it a try20:43
patdk-nbI netinstall server and desktop20:43
patdk-nbnever used cobbler though20:43
RoAkSoAxpatdk-nb: thanks for the info20:45
RoAkSoAxpatdk-nb: by any chance you have a Debian source/mount/iso/CD or anything?20:48
patdk-nbheh?20:50
patdk-nbI just copy the netboot code into my pxe tftp folder and add it to my pxe boot menu20:50
RoAkSoAxpatdk-nb: oh ok. Never mind then :)20:52
hallynDaviey: so, if the natty open-vm-tools package works fine for maverick...  i don't suppose there still would be any chance of sru'ing that to maverick?  :)21:08
robbiewSpamapS: ping21:09
Davieyhallyn, if open-vm-tools works with the natty-updates kernel, there is really no desire to SRU it IMO.21:14
Davieyhallyn, AIUI, the kernel in -backports doesn't work with open-vm-tools, so open-vm-tools should go into -backports pocket.21:14
hallynDaviey: (sorry i didn't see you'd replied) not sure what you were saying.  But maverick package is broken too (at last there are duped bugs for it)21:34
SpamapSrobbiew: pong, sup?21:35
hallynDaviey: so i'm saying that the newest open-vm-tools package appears to work fine with maverick's kernel.  It's a huge delta though21:36
hallynkirkland: i  know you had some experience with likewise-open - just wondering, have you looked at, or were you planning to look at bug 655533?21:45
uvirtbotLaunchpad bug 655533 in likewise-open "[master] package likewise-open 5.4.0.42111-2ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [High,Confirmed] https://launchpad.net/bugs/65553321:45
hallynoh, nm21:46
hallyni see, that thinks it has beenf ixed21:47
ap0canyone had any problems running ddr3 with ubuntu 10.10 LTS ?22:02
ap0cmy box seems to freeze after a couple days of operation22:02
T3CHKOMMIEhello everyone im having problems getting my x11 to work with putty on a windows machine. can anyone help me figure out why the tutorials arent getting me where i wanna go?22:12
guntbertT3CHKOMMIE: what sort of problems?22:13
T3CHKOMMIEguntbert im trying to configure my mythtv backend via ssh.... when i enable x11 forwarding it tells me it cannot open the display its a GTK+ error22:15
guntbertT3CHKOMMIE: you have to run an X server on the windows machine22:15
guntbertT3CHKOMMIE: have a look at MobaXTerm22:16
T3CHKOMMIEim running cygwin.22:17
guntbertT3CHKOMMIE: just as well (cygwin/X I suppose), did you tell putty to forward X?22:17
T3CHKOMMIEyes22:18
T3CHKOMMIEso i have x server running. should i ssh from that window?22:18
T3CHKOMMIEor just use putty in windows like usual?22:18
guntbertboth ways normally work, at first start something simple - like xeyes22:20
T3CHKOMMIEok so xserver is running on win machien i used ptty with xll forward and ssh to target box.22:20
T3CHKOMMIEi ran "startx" and it gave me a fatal sever error.22:20
T3CHKOMMIE"server is already active for display 022:21
guntbertT3CHKOMMIE: NOOOO, startx is wrong, you start single applications22:21
T3CHKOMMIEoh22:21
guntberttry with xeyes - its a little fun22:22
T3CHKOMMIEah /user/bin/mythtv-setup22:22
T3CHKOMMIEthats working.22:22
T3CHKOMMIEsuuuuuuuuppper slow.22:22
T3CHKOMMIEis that normal?22:22
guntbertT3CHKOMMIE: depends on the machines and on the network, you can enable compression though22:23
T3CHKOMMIEguntbert, it looks like it is working. very slowly. i clicked on a yes/no box and its taking about 2 minutes and nothing else has popped up. does that sound about right?22:24
guntbertT3CHKOMMIE: as I said, it can happen, but try to enable compression22:25
T3CHKOMMIEcan i enable compression on the fly or should i kill the command and start the seesion over again=?22:25
T3CHKOMMIEguntbert, i would give you some gold stars if i could. thanks for helping me figure that out. it has taking me months to finally get it working! thanks!22:29
guntbertT3CHKOMMIE: glad to help - have fun :-)22:30
T3CHKOMMIEguntbert compression helped out aLOT!!!22:33
hallynDaviey: so the poster rolled their own for bug 746152.  Don't know how that should be classified.  (not 'fix released')22:52
uvirtbotLaunchpad bug 746152 in open-vm-tools "open-vm-dkms fails to build with officially backported kernel" [Low,Confirmed] https://launchpad.net/bugs/74615222:52
=== dendrobates is now known as dendro-afk
hallynkim0: thanks for drafting the trusted cloud blueprint - great info in the whiteboard, too.22:55
kim0hallyn: cool :)22:55
uvirtbotNew bug: #765224 in cobbler (universe) "import from mini.iso fails" [Undecided,New] https://launchpad.net/bugs/76522422:56
=== dendro-afk is now known as dendrobates
jMCgHey folks, I've got a host with a number of KVMs running on it, and I'd like to use the Hosts firewall to protect all the guests. That firewall is currently ufw, and works perfectly in that it doesn't allow access to the guests.23:13
jMCgRather than none, I'd like to have controlled/restricted access.23:13
patdk-nbyou need to put the kvm's on a bridge interface23:16
patdk-nband control routing from the host interface to the bridge23:16
patdk-nbdone this many times, but I normally use shorewall to do it, instead of ufw and manual23:16
uvirtbotNew bug: #765249 in samba (main) "tarmode exclude no longer working" [Undecided,New] https://launchpad.net/bugs/76524923:16
patdk-nblots of examples on the shorewall website23:16
hallynRoAkSoAx: i can't reproduce your results on bug 76028823:17
uvirtbotLaunchpad bug 760288 in ubuntu "JeOS is oversized" [Low,Confirmed] https://launchpad.net/bugs/76028823:17
RoAkSoAxhallyn: yeah... we discovered that when installing with TestDrive the installation ends up with 533M, and when using virt-manager is less than 50023:17
hallyni was just using kvm23:18
jMCghallyn: not a big fan of shorewall.23:18
RoAkSoAxhallyn: that's weird then... jamespage also found the same as me. Installing with TestDrive results oversized23:18
hallynRoAkSoAx: i've not tried testdrive23:18
patdk-nbyou don't have to be a fan, to get ideas on how to get it setup from the examples :)23:18
hallynRoAkSoAx: should we refile it as a bug against testdrive then?23:18
patdk-nbinstalling jeos in vmware was 532megs for me also23:19
RoAkSoAxhallyn: ^^23:19
* hallyn frowns23:19
RoAkSoAxhallyn: i don't really think is TestDrive but rather something else...23:19
hallynwhat is the size of your /lib/modules?23:19
RoAkSoAxhallyn: could it be something with the type of disk image?23:19
hallynit could...23:20
RoAkSoAxhallyn: let me check23:20
hallynyou are giving the result of 'df -h' right?23:20
RoAkSoAxhallyn: yes23:20
hallynRoAkSoAx: we could just compare results of 'du -sh /*' and walk down the tree to find the disrepancies, if you have a few minutes?23:21
hallynpatdk-nb: or you23:21
patdk-nbmine was df -h23:21
patdk-nbI can't access it from here at the moment :(23:21
patdk-nbI know the /lib/modules was small, like 26megs I think23:21
hallynpatdk-nb: thanks  (mine was 22M)23:22
patdk-nbhallyn, going off memory :)23:22
patdk-nbso don't quote me :)23:22
patdk-nbbut it was in the 2x range23:23
hallynclose enough on tax day23:23
RoAkSoAxhallyn: http://me.roaksoax.com/results.png -> du -sh /* results23:24
hallynRoAkSoAx: same as mine.  makes no sense.  (add those up :)23:27
hallynRoAkSoAx: oh, df -h /boot?23:27
hallynand, i guess, cat /proc/swaps?23:27
hallynnm on swaps23:28
hallynRoAkSoAx: ext4fs, and you chose non-lvm?23:29
RoAkSoAxhallyn: http://me.roaksoax.com/results2.png23:30
patdk-nbmine, I do 8gig drive, guided partition, no lvm23:30
hallynwell, i did a 2G raw partition.  RoAkSoAx is doing 5.5G.  I wonder if its' all metadata23:31
hallynRoAkSoAx: can you try to reproduce with a 2G root?  I'll try with a 6G23:31
patdk-nbmight be23:31
RoAkSoAxhallyn: ok will do with a 2g23:31
patdk-nbI only do 8gig cause that is vmware default :)23:32
hallynmind you i'm running a server iso grabbed today, so it's possible it's just that the bug has been fixed ;)23:32
hallynbut let's try this for kicks23:32
RoAkSoAxok, downloading ISO now23:32
RoAkSoAxhallyn: might indeed be the disk size as the one that I'm installing with virt-manager is with a 2G disk, while TestDrive is a 6G disk23:34
hallynRoAkSoAx: CONFIRMED23:45
hallyn(sorry, little blakes7 zen moment)23:46
RoAkSoAxhallyn: so it is metadata then23:46
hallynif i knew a lick about ext4 (other than to avoid it) i'd know how to double-check23:47
RoAkSoAxheheh23:47
hallynRoAkSoAx: 'du -shx /' gives me 394M23:47
hallynRoAkSoAx: maybe that is how we should have people check, rather than using df -h23:48
RoAkSoAxhallyn: yeah I think that the test case should probably be updated then23:48
RoAkSoAxhggdh: ^^23:48
hggdhhallyn: and what does 'df -h' return?23:50
RoAkSoAxhggdh: in my case 533M23:50
hggdhRoAkSoAx: and 'du -shx'?23:50
hggdhthe point is I would like to have both values from the same install23:50
RoAkSoAxhggdh: 'du -shx /' returns  39423:51
hallynRoAkSoAx: tune2fs -l /dev/sda1...23:51
hggdhyeah23:51
hggdhRoAkSoAx: yes, we will update the test to request 'du -shx'23:51
uvirtbotNew bug: #765275 in eucalyptus (main) "metadata server cannot be contacted when deploying new instances on EUC" [Undecided,New] https://launchpad.net/bugs/76527523:52
hallyn<shrug> 4 times as many inodes,23:53
hallynRoAkSoAx: hggdh : ok so the bug should be marked invalid?23:53
hggdhhallyn: yes, please mark it invalid. 'df -h' does have a large, er, error23:54
hallynmore than 10x as many blocks23:54
hallynhggdh: (or we could mark it against e2fsutils :)23:54
hallynRoAkSoAx: you have that (updating the test case) under control?23:56
hggdhhallyn: I will check23:57
RoAkSoAxhallyn: yeah I'm on it23:57
hallynRoAkSoAx: awesome, thanks23:58
hallynall right i think i'm stopping for the day.  see ya'll tomorrow23:58
RoAkSoAxhallyn: see ya23:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!