[00:10] Can anyone help me get my usb wifi up and running? Everything I've found uses the iwconfig or iwlist commands, which don't come installed. I can't install them because I can't get connected to the internet. Thanks. [00:14] econ: why do you have an usb wifi in your server? [00:16] its just a pc that i'm trying to set up as a samba file server for my house. pretty much I want to learn how to do some server type stuff but don't have a server. [00:20] econ: you'll need wpasupplicant, which from what I remember is pain to configure without the fancy GUI stuff. [00:20] Says the guy whoi is entirely GUI-capped. [00:23] Ok, I'll check it out. Thanks [00:24] IIRC, there's some CLI client, but that's quite.. shit. [00:24] /sbin/wpa_cli === jjohansen is now known as jj-afk [00:46] New bug: #769191 in krb5 (main) "Incorrect configuration at installation" [Undecided,New] https://launchpad.net/bugs/769191 === david5345 is now known as dlublink === cole is now known as Guest90229 [01:41] right, I seem to be having more trouble doing this than I should... and I was wondering if any of you guys could help me out a little bit [01:42] I'm trying to run a minecraft server on my ubuntu server [01:42] now since its java, I have to run this inside of a screen to get this to work [01:43] I've got a user pointed straight towards doing just this job, and I've locked out the password [01:43] Or you could.. use upstart, which will take care of restarting it when it dies! [01:43] now my problem is, that user can't issue a screen, esp since I can only really use him as "sudo su - user" [01:44] jMCg: ah, not worried about that... its mainly me that uses it, but however I would like it to do a gmap render and also some backups [01:45] while announcing to the user such tasks [01:45] IIRC, in order to launch screen, it must be run by a user who has a password [01:45] you can work around this problem by launching screen as another user [01:46] and run sudo -u username $command [01:46] inside of that screen [01:47] not having a password means no interactive logon [01:47] yeah [01:48] see the reason I did this was because I just wanted it to be self contained [01:48] but not being able to start this as service is a pain [01:49] well, like I said, you could just launch screen as a different user and then run the command inside it [01:49] so, instead of 'sudo -u username screen $command', 'screen sudo -u username $command' [01:50] you could even run that screen as root if you're so inclined [01:50] the server is still running as the other user [01:51] running minecraft as root doesn't sound like a good plan though lol [01:51] you're not [01:51] you're running screen as root [01:51] you're still running minecraft as your limited user [01:53] right [01:53] don't know what it is with game server programmers, but they just refuse to write them as daemons for some reason [01:53] srcds and unreal are the same way, interactive consoles [01:54] sudo su -c command interactiveuser [01:54] heh [01:54] versus screen [01:54] or sudo -u [01:54] shrug [01:55] that doesn't work [01:55] writeawrapperscript(tm) [01:55] the server doesn't run if it doesn't have an interactive console [01:55] it just hangs or quits [01:55] hence screen [01:55] this whole thing has melted my mind [01:55] OH [01:55] been trying to get this sorted since this afternoon >_< [01:55] OIC [01:56] okay so smp requires interactive console [01:56] yeah, it's pretty stupid on the programmer's part, but nothing we can do about that [01:56] I ran it inside a screen window in the past and never thought anything of it [01:56] hm [01:56] I did this exact thing with srds [01:56] srcds* [01:57] I'm sure it could be tricked otherwise, but there's nothing wrong with wrapping it inside screen or other form of multiplexer [01:57] just a script that runs a screen as me, and the server inside the screen as the dedicated user [01:57] it's not that hard [01:57] how would I script this to fit on the cron job for rendering then? [01:57] that, I couldn't tell you [01:58] I don't know how to interact with screens in an automated manner [01:58] it's probably documented if it's possible [01:58] you want to periodically type text on console? [01:58] e.g. pipe commands via cronjob? [01:59] ah see I've got the code, the problem is though I need it to run... actually wait, if I have one for minecraft and one for the map render, and then just sudo -u those, it should work... technically [01:59] however isn't this just bad practice doing it this way? [01:59] it's the best way as things stand [01:59] the problem is bad programming [01:59] I've never set up a renderer beyond that livemap deal before bukkit became main [01:59] it's the best workaround I've found [02:00] security wise it's not too bad, no worse than just running it normally [02:00] and it's contained [02:00] the mess never leaves screen [02:01] well yeah, but surely if they got into that screen, and say they closed the server and typed "exit" they'll be brought back to my user... [02:01] no [02:01] screen -dmS sessionname command [02:01] screen will exit and they will be kicked off [02:01] btw [02:01] because if you do it right, screen is not launched from an interactive shell [02:01] would be a way to manipulate that from scripts [02:01] it's launched as an upstart job or rc.local or whathaveyou [02:01] or cron [02:02] but here's the key [02:02] if you run screen as root, e.g. from rc.local, they have to break root to get into your screen in the first place [02:02] which basically means they'd own you either way [02:03] right [02:04] if you launch the server directly from screen, and screen directly from a shell script, and not an interactive shell, there is no exiting to an interactive shell [02:04] it just dies off [02:04] so, erm... not to feel any more stupid than I already do, if I did go down the rc.local / whatever route, I'd have to issue root to do the cron then? [02:04] yes [02:04] unless you double sudo [02:04] root runs screen as a third user [02:05] then screen runs the command as your minecraft user === ng_ is now known as NG_ [02:05] said third user needs a password though [02:05] well, the way things are set up by default anyway [02:06] root has some magic going on, he's allowed to log in interactively without a password [02:06] nobody else is [02:07] right, would you mind helping me through this? [02:08] I can give you the scripts I made for srcds [02:08] because I think that's 3 methods you've mentioned, and I'm not sure which is best really (even though all are workarounds anyway) [02:08] I did a sysvinit script and a second script [02:08] sure [02:10] eh, looks like I made a real hash of it [02:11] http://pastebin.com/uP1zxNpp [02:12] but really, you should be able to just 'screen sudo -u username $command' inside a start script [02:13] seriously though, I was in exactly your position when I made this [02:13] the stupid thing refused to run [02:14] this does work, though, all else failing [02:16] right well here's what I did for my cron: http://paste.ubuntu.com/597660/ [02:16] I don't think that would work in this sense though would it :( [02:17] only just finally merged my windows box to a ubuntu-server box, and didn't realise how much hassle this could be lol [02:19] heh [02:19] could be worse, some game servers require X [02:19] and there was one person asking how to start up one in wine headless [02:20] that's a whole mess I want none of ;) [02:20] heh same! [02:20] I thought java was bad enough! [02:21] so erm, hang on who would I be using to do the crontab with? [02:21] I was running a minecraft server for a while until that hardware crapped out [02:21] I use /etc/cron.d and friends [02:21] and it would probably be the same user that screen is run by [02:22] I was just running mine manually though [02:22] ah so /etc/init.d/ and /etc/cron.d/ would be essentially the two I'm using [02:23] makes you appreciate a properly written daemon [02:23] /etc/init.d for sysvinit scripts, if you're using that [02:23] it's technically deprecated in ubuntu but they still work [02:23] and I don't see it going away any time soon [02:23] lots of stuff needs to be converted to upstart first [02:24] I wrote that before upstart existed [02:25] see I've done nothing as far as upstart is concerned [02:25] I'm not a fan [02:25] in fact I've done nothing with sysvinit either, other than using them [02:25] too much work and it's still not all that great [02:25] so this is all new (and news) to me [02:26] sounds like unity :/ [02:26] but that's a rant for a totally different channel lol [02:26] I'd either stick with sysv or go all-in with systemd [02:26] upstart is kind of in the middle [02:26] but yeah, just my opinino [02:26] Sc [02:30] right, lets see if I can do an /etc/init.d/ script :P [02:36] hmm just found this: http://www.minecraftwiki.net/wiki/Server_startup_script [02:36] how I'd make a cron for that, is beyond me though [02:40] the only bit I don't get really is the "Default-Start" and "Default-Stop" stuff === asac_ is now known as asac [03:11] automatic backups ... how do i do it? [03:23] goddard, cron + tar [03:39] I really need to change my bios settings on my server T_T [03:39] reboot takes forever due to all the bios check crud [03:40] in fact I think most of it is netboot and cdrom stuff [03:40] qman__ know of any scripts? [03:41] automatic backups of what? [03:42] too vague [03:42] of what would you like automatic backup of with your server? [03:42] i want to backup everything that would be important for a web server [03:43] apache configuration php mysql web data [03:43] sounds like atleast 3 things then [03:43] mysql, /etc and /var/www [03:44] yep [03:44] wait not etc...well maybe [03:44] if you want to save your apache/php/... settings [03:44] so many admins have issues and wipe out stuff in etc by accident [03:45] each version of ubuntu uses the same version of those software in the repositories so as long as i can get that version of ubuntu i shouldnt have to save the binaries [03:45] ? [03:45] basically saving /etc does that also, cause it saves apt settings for package sources [03:45] isnt that pretty large? [03:46] for like if you some ppa's or something [03:46] sure, mine is like 20megs or so [03:46] 20megs thats nothing :D [03:46] back it up offsite each night [03:46] yeah thats what i wanna setup [03:48] I'm actually doing mysqldumps and backing up etc [03:48] then backing up those backups [03:48] so mysqldump and etc both are 22megs combined for me [03:48] pretty lite [03:48] I'm also backing up /usr/local, cause I put my custom stuff there [03:48] 210megs [03:49] well, I don't run any mysql websites on that :) so it's small [03:49] the mysql website I do handle has 8gigs of data [03:49] but in mysqldump | gz is about 1gig [03:50] /etc is not binaries [03:50] it is configuration files only [03:50] binaries go in /bin, /sbin, /usr/bin, /usr/sbin, etc [03:50] qman, yep, and apt config helps get all the extra binaries :) [03:50] etc as in etc... not /etc [03:50] :D [03:50] thanks for clearing that up [03:50] my /etc compresses to 1.4megs [03:51] yep [03:51] mostly text, compresses well [03:51] same with mysql if you dump it [03:53] there are complete backup systems, but unless you have some infrastructure going on, it's not really worth it [03:53] a three to five line bash script will do [03:53] drop it in cron.d [03:54] alriht good to know just add that to the list of 30 thngs i gotta do :D [03:55] don't worry [03:55] after your first big dataloss [03:55] you will make a good backup solution [03:56] heh [03:56] my solution at home is to just keep a copy of everything important on several computers [03:56] can't really afford a backup system [03:56] but yeah [03:56] my home is generally my backup :) [03:56] nightly rsync to home [03:56] production servers, gotta have it [03:57] then backup system does incrementals of that rsync [03:57] qman__: oh btw, thanks for your help earlier :) [03:57] ironically, my file server, where I store most backups, has been the least reliable system [03:57] i actually had a horrible setup using Dreamweaver and a production and test server [03:58] single disk budget systems outlasting my raid 5 [03:58] backup drive consists of 8 1tb re4 drives, raid6 of 6 drives, and 2 spare [03:58] running raid 6 with hot spare now [03:58] didnt have a backup and had to some how fix it [03:58] it was amazing i was able to fix it [03:58] extremely lucky [03:58] I lost three disks in one day on my last array [03:59] ouch [03:59] ya, I had a raid50, 6 drives, with spare [03:59] lose 4 drives [03:59] it's only paranoid until it happens to you [03:59] spare was probably lost before it was needed [04:01] hmm, something isn't right here [04:01] oh :) wasn't comparing the correct paths :) [04:02] was wondering why mail on one was 700megs and the other was 8gigs [04:03] they don't make hard drives like they used to [04:04] the system drive on that file server is a 4GB Quantum Fireball, still running strong [04:04] na, they are using ecc correction for more than failsafe [04:04] they depend on it [04:04] and it'll probably outlast the second array [04:04] why I'm alittle paranoid about these 4k sector drives [04:05] besides the fact mine have only lasted 2 months before needing replacement [04:05] score! [04:06] managed to get the cron to work :D [04:06] and now I have a cool script to go with my minecraft server too [04:06] haha minecraft :D [04:07] this is done a lot better than I was originally going to do before I asked for help [04:07] again much thanks :) [04:07] glad it's working out [04:08] can't seem to get wget to log onto a site with the whole --save-cookie and --post-data scheme... any ideas? [04:10] darkmarble, if it's a ms .net thing, you have to save and pass the forms cookie stuff, it's lots of fun :) [04:11] tried using --load-cookie on the 2nd wget run, no dice :( [04:12] even went through the --save-session-cookies bit, tried a lot of approaches so now I'm just at a loss as to what to do [04:13] Is there a best practice or common way of handling CVE compliance with Ubuntu Server? [04:14] I'm looking more or less for some documentation that I can reference. [04:14] qman__: managed to get it to run as a screen by minecraft (user), which means that I could just put the cron as that user too and execute other things that minecraft (user) owns. [04:15] darkmarble, ya, cookies are cookies, but did you save and resubmit all the form variables? [04:15] nice [04:15] qman__: considering pigmap (the thing I use to render maps) is owned by minecraft, it means it can run this flawlessly and I don't need to change my apache permissions or do other fancy tricks to get that working [04:16] just-works™ [04:17] patdk-nb: well considering it's a short form, i just used --post-data='username=user&password=pass' not the right approach? [04:17] also means if I want to do more work inside that screen, I can [04:17] hi, any tips on CLI lm-sensors config, I have it working but can it be more selective? [04:21] Something's gone wrong with my install of Landscape...I've got three copies of its output in /etc/motd, and it seems each time it's automatically running, if the result differs from the previous time it just prepends to /etc/motd rather than replacing it. [04:46] Or at the very least, there's an old copy of the text that's still there and won't go away. [06:32] New bug: #769354 in elinks (universe) "elinks accepts self-signed ssl certificates without warning" [Undecided,New] https://launchpad.net/bugs/769354 [07:31] mysql server wont start after moron installed module in drupal [07:32] Urgent matter [07:33] #drupal-consultants :) ? [07:33] ill clear that data base if i have to [07:33] it just has to start [07:34] i have several other databases [07:34] you'd probably do better to check your logs for the error [07:34] hmm [07:34] installing a drupal module does not normally stop mysql from starting up :P [07:35] thats what i thought but from what it sounded like was thats when it happened [07:35] where is the log for mysql [07:36] my list doesnt show that one [07:36] google? [07:41] ok found the log but it looks empty [07:41] /var/log/mysql.err and /mysql.log [07:42] so maybe change your logging level, and/or read up on logging options? [07:44] is there a way to start it with only selective databases [07:44] mysqld_safe --skip-grant-tables [07:44] like that [07:44] try it and see? [07:44] it starts but none of the sites connect [07:50] because you don't have any table grants, no doubt :) [07:52] how do i know what libraries i can use if my project isn't open source? im not lawyer [08:01] wth steven [08:06] how do i get one of those [08:08] goddard you can use open source libraries and put them in a closed source prodject [08:09] wont it be illegal? [08:15] look up GNU license [08:53] hmm actually goddard pehden: you cannot link to gpl library (put them in a ...), but to pretty much any other license you can, usually reading the license faq is enough [08:53] you cannot link to gpl [library] from closed source application, that would be a violation of the license ... [09:25] Hi. How do I add another daemon to be automatically started upon booting? [09:54] I am on 10.04, but my kernel is still 2.6.18. How can I upgrade my kernel? [09:58] hmm fixed issue [09:59] some how the log folder filled the hardrive to max removed all that then reinstalled mysql no purge and it worked [11:01] i need mono-1 but it is not available :( === NG_ is now known as ng_ === ng_ is now known as NG_ [13:45] Does anyone know of a guide to help me understand how to block websites if I'm running a linux machine as a gateway? [13:47] hi there, my motd keeps showing 43 packages can be updated. [13:47] 22 updates are security updates. [13:47] but i have already done sudo apt-get update, sudo apt-get upgrade and sudo apt-get dist-upgrade and then restarted my instance [13:47] please advise abt my motd thank you [13:49] nfs4 server, how do i, create a partition and export a partition on my disk? === joyce_ is now known as joyce [13:55] hello everyone, I have a server with ubuntu 9.04. The problem I have is that I can log in via ssh, but not from TTY1. I have tried changing console, but it does not work. I have looked into /etc/securetty and the consoles are allowed to be logged in from. Also I have had a look to /etc/pam.d/login file, but I don't understand it very well. I have been looking for an answer on the internet, but no lock so far. Anybody has [14:00] it says 267 people in this room, but I can't see a single line, why? [14:01] cerneula: it's quiet, people are just idling [14:01] thanks [14:01] I have a server with ubuntu 9.04. The problem I have is that I can log in via ssh, but not from TTY1. I have tried changing console, but it does not work. I have looked into /etc/securetty and the consoles are allowed to be logged in from. Also I have had a look to /etc/pam.d/login file, but I don't understand it very well. I have been looking for an answer on the internet, but no lock so far. Anybody has any idea? Many [14:04] cerneula: anything useful in /var/log/auth.log? === joyce_ is now known as joyce [14:50] Hi, i get a 403 error for my localhost page. How do i fix this? [14:50] ArisVer, chmod o+r /path/to/website [14:51] +x too [14:53] I get a, no such file or directory. [14:53] wait [14:55] Nothing happened , still get 403. [14:56] I get a, no such file or directory. (this is okay now, it was typing mistake). [14:59] chmod did nothing. I had permission access from before. === NG_ is now known as ng_ [15:03] When i click the html file it shows on my browser. But trying to 127.0.0.1 gives me a 403 Forbidden, you don't have permission to access / on this server. === ng_ is now known as NG_ === NG_ is now known as ng_ [15:30] hello everyone! I have a server with ubuntu 9.04. The problem I have is that I can log in via ssh, but not from TTY1. I have tried changing console, but it does not work. I have looked into /etc/securetty and the consoles are allowed to be logged in from. Also I have had a look to /etc/pam.d/login file, but I don't understand it very well. I have been looking for an answer on the internet, but no luck so far. Anybody ha [15:32] sorry, it had expired, here is the new link [15:32] http://pastebin.com/ytH6nqw2 [15:36] New bug: #769514 in postfix (main) "Mail not sent unless relayhost has a port number" [Undecided,New] https://launchpad.net/bugs/769514 === ng_ is now known as NG_ [15:48] ArisVer, apparmor, perhaps? [15:49] or perhaps the server is not listening on localhost? [15:50] wait no it isn't that [16:08] kellnola , what is apparmor? [16:13] kellnola, i found out, my knowledge is very limited for that. [16:30] hi there, [16:30] ever since i updated my ubuntu server instance and restarted it, my apache is no longer working [16:30] please advise. [16:31] ArisVer, better get used to it :). It has tripped me up a few times. If you get mystifying permissions problems, I'd look there. It logs to syslog or audit.log depending on your config, you can turn it off with /etc/init.d/apparmor teardown [16:32] Zeu5, look in your apache logs [16:32] Zeu5, try to start it manually [16:32] kellnola: which folder is that? [16:32] Zeu5, /var/log/apache [16:32] kellnola: i tried sudo sudo /etc/init.d/apache2 start but still get same rror message [16:33] Zeu5, try sudo /usr/sbin/apache2 -X [16:33] kellnola: okie i am in as root [16:33] i can view a lot of files in side /var/log/apache2 [16:34] Zeu5, error.log is the one your're looking for [16:34] Zeu5, try the command I printed there [16:34] Zeu5, and see what it says [16:35] the command gave me this [16:35] apache2: bad user name ${APACHE_RUN_USER} [16:36] Zeu5, sorry, sudo su www-data -c /usr/sbin/apache2 -X [16:36] kellnola: i did a sudo -i [16:37] so i am now root [16:37] shd i still use the command in full that u gave me? [16:37] yes [16:37] doesn't matter [16:37] i think we need to find what's binding to port 80 already, Zeu5. [16:37] *reads the info from #httpd* [16:37] guys, i accidentally rm my error.log [16:37] Zeu5: you're in trouble then [16:37] Zeu5, just run the command and apache will log to STDOUT [16:38] in any case, i iforget the command(s) to list what's listening on what ports [16:38] the command did not work [16:38] i could use that myself [16:38] :p [16:38] su: invalid option -- 'X' [16:38] Usage: su [options] [LOGIN] [16:38] kellnola: any idea what command you can use to show what's listening on what port(s)? [16:38] kellnola, i edit the file and saw 'to really tear down all profiles run the init script with the teardown option'. Is this a command line? [16:38] TheEvilPhoenix, sudo lsof -i | grep LISTEN [16:39] ArisVer, yes, that's how you turn it off. (for troubleshooting) [16:39] TheEvilPhoenix: kellnola this is mine http://bin.cakephp.org/view/1367000440 [16:39] Zeu5, the -X is an argument to apache2, not su [16:39] no port 80 as far as i can see [16:40] strange, I can't find port 80 being bound to on mine either :P [16:40] Zeu5, and no "*:www" [16:40] ? [16:40] well that's odd... [16:40] kellnola: i dun understand [16:40] it's something else then [16:40] kellnola: nothing's bound to port 80 [16:40] can you give me the command that you want me to run again? [16:40] kellnola: might be a new bug in Ubuntu systems [16:42] guys? [16:42] kellnola: Zeu5 and I are in the same boat, something's blocking binding to port 80 [16:42] hold on Im tripped up by the ubuntu way here ... let me look at it a minute [16:42] not sure what [16:42] TheEvilPhoenix, where do you see that? in the error log? [16:43] kellnola: in the output from `s service apache2 start` [16:43] where that first "s" is an alias for sudo [16:43] ok try sudo lsof -i [16:43] sec [16:44] pipe to egrep "(www|80)" [16:44] oop [16:44] wait a sec [16:44] * TheEvilPhoenix thinks there was some random glitch in his system [16:44] kellnola: what command would you like me to try? [16:44] might be something established and not listening [16:44] ended up having to drop into a root prompt [16:44] Zeu5, hold on [16:44] kellnola: thanks [16:45] kellnola: i ended up dropping myself into a root prompt where I had to do 'service apache2 stop; service apache2 start' [16:45] it loaded correctly [16:45] lemme test this again [16:46] Zeu5: you wouldn't happen to not be prepending "sudo" to the /etc/init.d/apache2 start command would ya? [16:46] i am now root [16:46] sudo -i [16:46] Zeu5: run this, with the semicolon: service apache2 stop; service apache2 start [16:47] /etc/init.d/apache2 start i get the could not bind to address error [16:47] did you stop it first? [16:47] yesi stopped it [16:47] then in your system, your system must have something else binding to it [16:48] TheEvilPhoenix: okie so what do i do next? [16:48]