[00:00] Changed what needed to be changed in main.conf. Pulled all the /etc/postfix/mysql*.cf files. Restarted postfix. NO ERRORS :D [00:00] So, now I just have to test this out :D [00:04] would someone with rights mind sponsoring a natty apache upload to fix bug 791410? [00:04] Launchpad bug 791410 in apache2 "Extra Apache instances not started on boot" [Medium,Triaged] https://launchpad.net/bugs/791410 [00:04] (mind you the script could be stricter about only allowing ([SK][0-9][0-9])? [00:05] oh, doh. nm, need sru [00:05] silly me [00:11] Hello, If my server randomly disconnects from my router what logs can I check to find the cause? [00:14] in what sense disconnects? [00:17] anyway if you use dhcp, i'd check syslog for entries from your dhcp client. if it's lower level, ethernet disconnects, then kern.log and dmesg [00:17] luite, It is unreachable. doesn't respond to pings, router does not see it. [00:22] luite, thank you very much I believe I have found a bread crumb :-) === medberry is now known as med_out [01:02] Having one heck of a problem with netcat and UDP. If I start listening on a port and begin sending data to said port, the listening instance of netcat will receive it without a problem. However, once I kill the sending instance of netcat and run it again, none of the messages are received. [01:02] Since UDP is "connectionless" I have no idea how on earth that happens. [01:14] Now I'm getting the following error when trying to send data to the port I'm listening on: "read(net): Connection refused" === oljas_ is now known as oljas [01:32] New bug: #791625 in apache2 "/javascript/* URLs sidelined by conf.d settings" [Undecided,New] https://launchpad.net/bugs/791625 [01:48] hi folks! I'm having a problem with mysql server, I can not make it automatically start once the server is rebooted. I have the file in /etc/init.d but it does not work. any ideas? [01:52] wow is it dead in here [01:52] looks like :( [01:53] don't suppose you know anything about UDP [01:53] also, in my /etc/init.d, I have a symlink called "mysql" pointing to "/lib/init/upstart-job" [01:55] there isn't much to know about UDP [01:56] the protocol is fire-and-forget [01:56] awkisopen, I have that too: [01:56] [malev@~] ls -l /etc/init.d/mysql -> lrwxrwxrwx 1 root root 21 2011-05-12 02:17 /etc/init.d/mysql -> /lib/init/upstart-job [01:57] RoyK: so do you have any idea why I'm having the problem I just described? [01:57] as you can see I have the same, I can not understand why it's not working! [01:57] that's part of upstart [01:57] malev: mysql doesn't use udp [01:57] he's not the one with the UDP problem, I am [01:57] I guess you can make it, but it normally uses unix sockets or TCP [01:58] since it is "fire-and-forget," how am I getting a "connection refused" error? [01:59] * RoyK frowns - is tierd [01:59] awkisopen: udp will never give you that - that's a tcp answer [01:59] but I am getting that. from udp. right now. [01:59] netcat -u localhost [port] [01:59] an ICMP message in fact [01:59] read(net): Connection refused [01:59] to the mysql server? [01:59] no [02:00] my problem has nothing to do with mysql [02:00] it's merely that I can't get netcat -u to work properly [02:00] which port do you probe? [02:00] 9391 [02:00] rather, my MediaWiki installation is sending data to 9391 [02:00] so I'm running netcat -ulp 9391 [02:01] the first time it sends information to port 9391, I receive it [02:01] all subsequent sends are met with that error message, "connection refused" [02:01] I've been testing it out purely with netcat since then - one terminal running netcat -u localhost 9392, the other netcat -ulp 9392 [02:01] when I type messages into the first terminal, they appear in the second [02:02] however, if I stop running netcat in the first terminal, then start it again with the same command - netcat -u localhost 9392 - and send a message, I get the error "connection refused" === oljas_ is now known as oljas [02:03] why would mediawiki send data to 9391/tcp? [02:03] or udp [02:04] it sends Recent Changes edits to a UDP port you specify [02:04] so that you can keep track of edits on the wiki [02:04] and announce them to an IRC channel, for example [02:04] malev, that's because mysql is now an upstart job in ubuntu, not a sysvinit script [02:04] ok, haven't used it that way [02:04] awkisopen: but if so, you need a server to receive them [02:05] yes. I have that. [02:05] malev, service mysql start [02:05] but even completely ignoring mediawiki - netcat isn't working as expected. [02:05] awkisopen: if you're getting a connection refused, then the server isn't listening correctly [02:05] it's listening via the command netcat -ulp 9392 [02:05] qman__, that works fine, but I want it to auto start every time I restart the pc [02:05] awkisopen: or you may have a firewall rejecting those packages [02:05] qman__, any idea what to do? [02:06] and it receives the first edit without a problem [02:06] subsequent edits, however, it does not. [02:06] if it isn't starting, it's probably a bug [02:06] awkisopen: as I said, connection refused is an icmp message, mostly used for tcp, not udp [02:06] try starting, stopping, starting again, and then rebooting [02:06] I had to do that with squid [02:06] qman__, oka! [02:06] I'm gonna do that [02:06] fair enough, but everything being used here is UDP [02:07] and as I said, even purely using netcat commands, it's not working right. [02:08] netcat -ulp 9392 will only receive data for as long as the netcat -u localhost 9392 process is kept alive. once that process stops, it fails to listen properly, and any subsequent sends to port 9392 are met with "connection refused," which should not happen. [02:08] udp is nice for broadcasts, multicasts and immediate messages, by the millisecond, apart from that, I don't see any reason not to use tcp [02:08] that would require me to somehow modify MediaWiki, which i'm not prepared to do [02:08] I'd rather have what is supposed to be working, working. [02:08] awkisopen: this issue isn't really about ubuntu server :P [02:09] * RoyK gets to bed - nit [02:09] * RoyK gets to bed - nite [02:09] It's about connections on a server [02:09] Ubuntu server [02:09] How isn't it about Ubuntu server [02:09] I'm running these commands on my Ubuntu 10.04.2 server and they aren't coming out with the expected results [02:09] If that's not about Ubuntu server, I don't know what is [02:10] if I write a crack-pot-app and run it on an ubuntu server, and it doesn't work, well, it's not an ubuntu server problem, is it? [02:10] netcat is not a crack-pot-app [02:10] while it's an issue on an ubuntu server, it's not really an issue _about_ ubuntu server, specifically [02:10] so where would I go for support for a package in the Ubuntu repositories [02:10] it's an issue with either your app, or netcat, or current linux kernels and userspaces [02:11] * RoyK bets a tenner it's the app [02:11] I'm not even *using* the app at this point. [02:11] I'm *only* using netcat, which is a package available in the ubuntu repositories. [02:11] awkisopen: networking has been rather stable on linux for 10+ years [02:11] awkisopen: 15+ if you are slack on the bug report numbers [02:11] My point being, where do I go for support for netcat? [02:12] apt-get install wireshark [02:12] * RoyK is off to sleep - night, ladies :) [02:13] I can't install wireshark. I'm on a server. I have no GUI. [02:14] then tcpdump [02:15] It's flooding me with data about my SSH connection... [02:16] add "port != 22" to the end [02:16] syntax error [02:16] in quotes [02:16] oh, sorry [02:16] also a syntax error [02:17] hmm [02:17] oh, my bad [02:17] "port ! 22" [02:18] Well that definitely slowed it down.. [02:19] that will at least tell you what is really happening [02:19] and you can hopefully pinpoint the issue from there [02:20] I don't deal much with udp or netcat [02:20] hmm, I'm still getting an awful lot of data [02:20] I'm sure there's an argument to filter it down to udp only [02:20] * awkisopen tries grep UDP [02:20] and futher still to only those on the port you want [02:20] also, use the -n option to greatly speed up packet capture and display [02:21] does this also include information being sent within the server? [02:21] I mean, localhost [02:23] This is very confusing... [02:24] where does ubuntu store the default labels for the ubuntu selinux policy? [02:26] Is there anywhere I could go for support for packages in the official Ubuntu repository? [02:26] awkisopen: ubuntu.com/support ? [02:27] "Ask the Ubuntu Community directly using our Internet relay chat (IRC) channel." [02:27] Yet I was just told this isn't a matter for IRC... curious. [02:28] awkisopen: Whats the question? [02:29] it's not that that question is not suitable for this channel, it's just that it's a more general linux question and you may be able to get better help for it elsewhere [02:29] whereas this channel is more centered around ubuntu-specific problems and solutions [02:29] Pici: I'm having difficulties with netcat using a UDP connection. If I run netcat -u localhost 9392 in one terminal and netcat -ulp 9392 in another, anything I type in terminal A gets sent to terminal B, no problem. But if I kill the process in terminal A, later typing in the exact same command, I get the error "connection refused" which makes no sense in UDP. [02:30] In fairness I have no idea whether it's Ubuntu-specific or not... [02:30] awkisopen: Likely not, you may want to ask in ##networking, although I'm not sure how busy they are this time of day. (I'm not usually on IRC at this hour) [02:30] Pici: Thank you ^_^ [02:32] very doubtful, if anything it would affect all debian-based systems [02:32] but it's more likely just general linux networking [02:34] there's /etc/selinux/ubuntu/contexts/files/file_contexts, but that's a huge file, isn't it built from smaller source files? [02:55] As it turns out, RoyK and qman__, it *is* a Debian-specific issue: http://paste.pocoo.org/show/399215/ [02:56] Thanks to ##networking's sleuthing skills [02:57] So whoever bet a tenner it was the app is, in fact, dead wrong, and there's unfortunately not a thing that can be done to fix this === smoser` is now known as smoser [05:13] My new Ubuntu-server install automatically points dnsdyn domain to local host. I had to install ddclient on ubuntu-desktop to get it working. Is this the way ubuntu-server works? [05:42] hey i need help my ubuntu-desktop when i go to vi my keybord mess up how do i fix problem [05:43] donnie: define "dnsdyn" [05:44] it big problem i cant edit what im doing [05:44] twb I am sorry i mean DynDNS or Dynamic DNS www.dyndns.com [05:45] ammar: This isn't a support channel for Ubuntu Desktop. [05:45] donnie: by default Ubuntu will not update any dynamic DNS service. [05:45] i know i worrying if you would know the problem [05:47] twb ah i guess it will stop working as soon as my ip changes. [05:48] If you're going to "foo.example.net" and that resolves to 127.0.0.1 or 127.0.1.1, that's because it's in /etc/hosts as such. [05:48] If so, you should test resolution of foo.example.net on a third party, e.g. on sdf.org [05:51] twb What does DNS Server or/and BIND9 do that i installed with ubuntu-server installation? [05:52] By default? Probably nothing, [05:53] twb I will just install ddclient to update ip. Thanks for your help. [06:09] hey guys [06:09] say i'm cloning ubuntu server vm's [06:10] should i regenerate the snake-oil cert for each machine? [06:10] what other things should i regenerate so that the different users of the cloned vm's cannot spy on each other [06:10] ? [06:10] s/users/owners/g [06:11] oyiptong: you should not be using snake-oil certs anywhere [06:11] They are BY DEFINITION not safe [06:11] i mean... postgres uses it by default, so does apache on install. its for dev machines [06:12] those won't run in production [06:12] That is because it's not possible for the default configuration to have your valid SSL keypairs. [06:13] You emphatically should generate proper SSL keys in a proper SSL trust hierarchy, but if you are too lazy or stupid to do that, then regenerating the snakeoil certs is probably slightly better than not doing so. [06:13] are there any other certificates or keys that i should regenerate if the servers are cloned? [06:13] SSH host keys [06:13] SSL and SSH will be the first 90% [06:14] right! [06:14] There's probably another 90% that I can't think of [06:14] For SSH, just delete them then run "dpkg-reconfigure openssh-server" [06:14] (Unless you're running GNU SSH or something.) [06:15] thank you very much. i'm using the default openssh-server. so bsd [07:18] Will unattended-upgrades pull in new kernels? [07:18] In one case, I specifically don't want it to, because I'm using third-party ko's that need to be rebuilt by hand afterwards, so an unattended upgrade + unscheduled power outage = sad twb === gpc is now known as IdleOne [07:42] It looks like it does, because on another host that has u-a installed, and /boot mounted ro by default, apt reports it's in an inconsistent state -- looks like it tried to upgrade the kernel and failed because it couldn't write to /boot [08:27] twb: /etc/apt/apt.conf.d/50unattended-upgrades includes a list of packages not to unattendedly upgrade ... [08:27] Thanks. [08:27] You're welcome. [08:28] jmarsden: while you're there, do you know where the example dpkg pre/post hooks for mount -o remount,rw /usr went? [08:28] (I want them except for /boot instead of /usr) [08:29] No, I'm not sure where I'd look for those... [08:37] I thought they were in apt_preferences(5) :-( [08:43] DPkg::Pre-Invoke { "mount -oremount,rw /boot"; } [08:43] DPkg::Post-Invoke { "mount -oremount,ro /boot"; } [08:43] * twb tries [08:44] Works! [08:45] :) [08:51] twb: There seems to be an example in /etc/apt.conf.d/99tmpfs-noexec on my machine here... maybe that is what you were thinking of? [08:51] No, it was not actually on by default, but it was an example [08:52] That one is present by commented out... OK. [08:52] s/by/but/ [08:52] Oh [08:52] I don't have that file tho [08:53] Hmmm. That is on a 10.0.4.2 Ubuntu desktop... not sure where I got it from, if it didn't come by default. [08:53] lucid and sid servers here [08:53] dpkg -S might tell you [08:53] Ah, maybe Ubuntu adds it. dpkg -S says it can't find it... === rsaidan is now known as nerens === koolhead11|away is now known as koolhead11 [10:21] New bug: #791747 in openssh (main) "Cannot add keys from PKCS#11 provider" [Undecided,New] https://launchpad.net/bugs/791747 [10:39] wtf - I create /dev/md3 and after reboot ubuntu has /dev/md_d3, not md3. The create command was 'mdadm --create /dev/md3 --level=5 --raid-devices=2 /dev/sd[ab]' and aslo, after a reboot, the new device shows up without sdb, only one drive! [11:05] good morning [11:05] i was wandering if anyone could help me with a backup question [11:06] i am thinking of managing backups with rsnapshot, as it can do ssh and lvm and is quite easy to manage, but i cannot find any information on how to use ssh and lvm together [11:06] can anyone offer some experience on that topic? [11:08] hello any issues with ext3 and jdb2 ? [11:08] s/ext3/ext4 [11:17] what's jdb2? [11:55] Does anyone know who (if anyone) will be creating the LXC task for oneiric? [12:09] NCommander: eh? [12:11] friends please help me in downloading these image files from http://emagazine.pdgroup.in/pratiyogitadarpan/01052011/pages.xml [12:12] these files are in flash player here at this link http://emagazine.pdgroup.in/pratiyogitadarpan/01052011/Home.aspx [12:21] anyone had experience on how to backup ufw rules, and put it to freshly installed Ubuntu? [12:21] I cp -av /var/lib/ufw/user.rule, but in the new system it doesn't run [12:22] after sudo ufw enable, and sudo ufw status, none of the rules are running [12:31] k, it seems the /var/lib/ufw/user.rule is now actually function in /lib/ufw/user.rule!!! [12:47] zul: we need an LXC task in the server image for ARM as LXC + OpenStack is our cloud solution in favor of actual virtualization [12:52] cocoa117: the files to backup are /etc/ufw and /lib/ufw/ufw*rules [12:52] cocoa117: on recent systems. ufw used to keep files in /var/lib/ufw. if you have your files in /var/lib/ufw, then just put them in /lib/ufw on the new system [12:53] cocoa117: this sounds like you are doing some sort of a migration from say hardy to lucid (or later). if this is the case, do what I said and it should work [12:55] jdstrand, yes, thanx for clear that up. i just start to realise it now [13:02] RoyK: this one https://bugs.launchpad.net/ubuntu/+source/linux/+bug/607560 [13:02] Launchpad bug 607560 in linux "jbd2 writing block every 5 - 10 seconds, preventing disk spin-down and making noise" [Undecided,Confirmed] [13:03] it sounds like a kernel issue , since I switched to latest 2.6.38-9-generic [13:03] all my fs (ext4) are having issue writing every few seconds [13:05] in the bug description lots of disks are seagate , but mine is western digital [13:06] don't know if it is hardware related (i don't think so) , fs related [13:35] New bug: #788520 in tomcat6 (main) "crash in tomcat web service on file write" [Undecided,New] https://launchpad.net/bugs/788520 [13:35] NCommander: sure but tasksel is going away, the openstack lxc is going to be handled by orchestra though [13:38] zul: tasksel is going away? [13:38] With what? (and also, we still need a task for germinate to handle) [13:38] NCommander: in the iso yes, but openstack will be seeded when the MIRs are done [13:40] zul: as part of the virtualization host task, or a new one? [13:40] NCommander: undetermined [13:41] zul: I'd like to see it as a new one simply because the existing virtualization host task is slated to be unsupported on armel this cycle (we have no hardware which can support virtualization on ARM) [13:42] NCommander: ok i think we can do that [13:42] Great :-) [13:50] lynxman: is the mcollective-plugins in a bzr branch? [13:51] zul: nope, it's pending merging upstream [13:51] what about the debian packaging? [13:51] zul: ah I see where you're going now :) [13:51] zul: I can create the branch if you want [13:52] lynxman: yes please [13:52] zul: I'll create one for the provisioner too, you have the package available as well in the same ppa [13:54] zul: lp:~lynxman/+junk/mcollective-plugins [13:55] zul: also lp:~lynxman/+junk/mcollective-provisioner for the provisioner [13:56] cool [14:00] lynxman: Do you have a branch with longer history of mcollective-plugins ? [14:01] DA [14:01] er [14:01] Daviey: it's all in git unfortunately [14:01] lynxman: Is that Ubuntu enteries in git, or upstream git? [14:01] Daviey: upstream git, our development branch for our plugins was removed sometime ago [14:02] argh. [14:02] Daviey: if I just knew... :) [14:03] heh. Are you working on it atm? [14:03] (Some of the changelog enteries make it a little hard to work out what has been going on) [14:04] Daviey: nope, that's the changelog from our mcollective-plugins, what happened in this last version is that we merged in our own plugins (as patches for now) [14:04] lynxman: Okay, super - what are you doing on that package this week? [14:04] Daviey: so far in the ppa we had one mcollective-plugins and one mcollective-canonical-plugins packages [14:04] Daviey: nothing else, it's all good until we get merged upstream [14:05] lynxman: so the need for -plugins is being totally dropped? [14:05] and merged into upstream mcollective [14:05] ? [14:05] Daviey: nope, merged to the upstream mcollective-plugins package :) [14:05] Daviey: -plugins are still and will still be needed [14:06] hmm.. so mcollective-canonical-plugins is going into mcollective-plugins? [14:06] Daviey: yes [14:07] Daviey: need to meet with Volcane in a week or two to get it done [14:07] lynxman: i just had a look at the debian/patches the names of the patches are....umm....not good can you give them a bit more descriptive names please? [14:08] zul: I was afraid you would say that ;) on it [14:08] lynxman: am i right in saying that -plugins upstream is still puppet? [14:08] Daviey: yes [14:08] lynxman: zul doesn't miss a trick! :) [14:08] Daviey: :D [14:08] lynxman: Well adam_g is spending the afternoon with puppet, do you want anything asked of them? [14:09] Daviey: no need to, the plugins are maintained by Volcane who's in London, I just need to get my arse back [14:09] Daviey: we had a planned meeting last Friday but unfortunately he couldn't make it [14:10] hi, could someone direct me to some good documentation for setting up exim4 to use remote smtp? [14:10] lynxman: Maybe, i should come and visit at some point :) [14:10] smb, you have any clue on bug 784937 [14:10] Launchpad bug 784937 in cloud-init "/mnt not mounted, swap not used, disk is xvde" [Medium,Confirmed] https://launchpad.net/bugs/784937 [14:10] Daviey: I'll be around again from June 13th onwards, so please drop in anytime :) [14:12] lynxman: i'll do that! [14:12] Daviey: yay ^^ [14:21] zul: is this better? http://pastebin.ubuntu.com/616732/ [14:23] lynxman: the fact.ddl.patch fact.rb.patch is for the same plugin right? [14:23] zul: yes, two different files though [14:23] zul: same goes for mc-fact [14:24] lynxman: i would just combine them since its for the same plugin will make maintenance alot easier if the code hasnt gone upstream yet and we get a newer snapshot [14:24] zul: okidoki, doing that [14:27] morning all, weeee [14:28] zul: http://pastebin.ubuntu.com/616741/ [14:29] lynxman: cool now make the change in bzr :) [14:29] zul: yessir [14:31] zul: all done, pushing new package in the ppa [14:31] lynxman: no need [14:31] zul: heh okay :) [14:32] How can I see what IPs I handed out from my Ubuntu server? [14:46] Roasted: you have a dhcp server installed? [14:46] lynxman, I got it. It's under /var/lib/dhcpd/dhcpd.leases [14:47] thanks though [14:47] Roasted: np :) [14:53] Should sudo hostname newname be updating /etc/hostname and /etc/hosts ? Or do those have to manually be changed? [14:53] queso: as far as I understand it'll change /etc/hostname only [14:53] lynxman: unfortunately it didn't even do that [14:54] lynxman: cat /etc/hostname gives me the original name, but when I use the hostname command it displays the new one. [14:54] queso: hm... [14:56] lynxman: I guess as root doing echo newname > /etc/hostname accomplishes the same thing. [15:00] queso: it does, it's ugly though :) [15:00] lynxman: what's the right way? [15:01] queso: the one you were doing ;) [15:01] (I'm trying to do it in a script) [15:01] lynxman: ha, okay, but that one doesn't seem to work. [15:02] queso: that's the weird thing [15:03] Cheese. [15:05] jpds: good point ;) [15:06] After manually modifying /etc/hostname, is a reboot necessary, or restarting some network processes? [15:16] queso: a reboot after a hostname change is cleaner [15:16] lynxman: okay, thx [15:22] Where is the standard place to put a self-written script, intended to be run with root privs (sudo), but by other users (such that it will be in their path)? [15:23] lynxman: you havent updated your bzr branch [15:30] zul: hmm I pushed the code... [15:30] jamespage, SpamapS our friend udev is rearing head again. [15:30] bug 791868 [15:30] Launchpad bug 791868 in udev "udevd dies, loses events, network doesn't come up" [Undecided,New] https://launchpad.net/bugs/791868 [15:31] zul: it's there :) [15:33] yeah it is but you removed the files but didnt add them back [15:37] zul: err :) [15:38] zul: fixing! [15:38] zul: and done [15:49] jamespage: anything new i should know since http://ubuntuserver.wordpress.com/2011/03/02/natty-jenkins-for-ubuntu-call-for-testing/, or can i still follow those instructions? [15:51] hallyn: lemme take a look [15:51] yep - thats still good for natty [15:55] lynxman; for your *.postinst why are you using invoke-rc.d since mcollective is an upstart job? [15:57] jamespage: and for o? [15:57] zul: because you told me to use it instead of service :) [15:57] hallyn: not avaliable yet either in PPA or archive [15:57] working on that one now === Refael_ is now known as FernandoTertiary [15:58] jamespage: ok, thx. will test in natty, then hoping to use it with ensemble [15:58] zul: service would exitstate 1 if the service wasn't running and made the postinst fail, invoke-rc.d doesn't [15:58] (dunno if that needs oneiric or not) [15:59] should be OK on natty [15:59] lynxman: did i? well i was wrong you should be able to do stop mcollective 2>/dev/null || true ; start mcollective || true [15:59] are you going to write a formula? [15:59] yup [16:00] great - I had the same idea; if you want to work together on that more that happy to [16:00] excellent [16:00] but first i need to just use it :) get the feel fir it [16:00] thx, ttyl [16:03] zul: want me to fix it now? it should be quite fast [16:03] lynxman: sure [16:03] zul: okay on it === oyiptong_ is now known as oyiptong [16:10] zul: done [16:15] lynxman: cool === oyiptong_ is now known as oyiptong [17:08] SpamapS: around? [17:09] hi all [17:10] jamespage: indeed, hallo! [17:11] SpamapS: hey - any chance you could put your SRU hat on a look at bug 783836 [17:11] Launchpad bug 783836 in openldap "slapd syncrepl failing using SASL" [High,In progress] https://launchpad.net/bugs/783836 [17:11] there are a few challenges around reproducing this issue (i.e. we can't) [17:12] but the fix has good heritage [17:12] and confirmed resolution of the issue [17:13] (albeit elsewhere) [17:14] jamespage: right I remember that one. [17:15] jamespage: is it uploaded to -proposed already? [17:15] not yet - Daviey is on the case there [17:16] It should be fixed in Oneiric just by virtue of the newer upstream, yes? [17:16] yep - Oneiric does include this fix === med_out is now known as medberry [17:23] hey all - trying to get into better habits. i usually ssh as root into my ubuntu server and do everything that way. this time around i've made myself a user account and given myself sudo privileges. permissions are throwing me off a little bit. how should i set the permissions on /var/www so that i can edit stuff in there (well pull using git, but same thing) and also www-data (the nginx user) can have access? [17:24] mecode, I would use sudo to git pull [17:25] mecode, just make sure it is readable by the nginx user [17:25] by default it is [17:25] mecode, so... no problem, right? :-) [17:25] ok so just chown the /var/www for www-data and then use sudo to get around in there? seems like it'd work just fine [17:25] ok i'll go with that then, thanks [17:26] no [17:26] mecode, I would not give nginx write access [17:26] mecode, I would only chown the folders it NEEDS to write to [17:26] ok [17:26] then who has write access? [17:26] just my user then? [17:26] mecode, root [17:26] oh ok [17:27] or your user [17:28] mecode, the idea is that nginx should have as little power as possible. [17:28] that makes sense - in case it gets compromised i guess [17:28] mecode, so, if you have a bug, they can't change the code [17:46] hi guys i installll phpmyadmin on ubuntu server- but ti did not ask me to be used fro apache2, directly install now when i try to open http://ipaddress/phpmyadmin- its timeout [17:48] sudo service isc-dhcp-server start ___________ [17:48] * Starting ISC DHCP server dhcpd _____________* check syslog for diagnostics. [fail] [18:02] sudo service isc-dhcp-server start * Starting ISC DHCP server dhcpd * check syslog for diagnostics. ...fail! .. [18:03] m3asmi: check syslog for diagnostics [18:03] pmatulis: No subnet declaration for eth0 (10.42.44.1). [18:03] m3asmi: there you go [18:04] how [18:04] pmatulis: how can I configure it [18:05] http://www.google.com/search?client=ubuntu&channel=fs&q=No+subnet+declaration+for+eth0&ie=utf-8&oe=utf-8 [18:06] New bug: #791944 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/791944 [18:13] in arch, there's an array you fill out for daemons you want to load on startup. is there an equivalent in ubuntu? === robrt` is now known as robrt`` [18:27] frewsxcv: by default, if something is installed, it starts === robrt`` is now known as robrt` [18:33] hey SpamapS [18:35] well i don't always have the option of installing stuff from the repositories [18:47] smb, around ? [19:04] kirkland: around? [19:11] nigelb: he's on a trip I think [19:11] RoAkSoAx: ah, its fine then. I'll just reply on his MP :) [19:11] ;) === eerie_ is now known as eerie [19:26] New bug: #791984 in dovecot (main) "dovecot-postfix upgrade overwrites main.cf settings" [Undecided,New] https://launchpad.net/bugs/791984 [19:26] hggdh, can you approve me for ~ubuntu-server-iso-testing-dev [19:26] smoser, of course [19:28] smoser, welcome :-) [19:35] nigelb: howdy [19:35] nigelb: am now [19:36] kirkland: I wanted to ask you the license for the comments.png in the summit MP, but I got http://people.ubuntu.com/~mhall119/icons/icons_preview.html :) [19:36] nigelb: ah, yeah much better [19:36] I was fixing that up today :) [19:36] nigelb: fwiw, i got comments.png from famfamfam-silk, which is in the archive [19:36] :) [19:36] nigelb: but those from mhall are much nicer [19:37] kirkland: Yup :) [19:37] nigelb: sweet, can I test it somewhere? [19:38] kirkland: sadly, we don't have a test server, I'm only submitting MPs [19:38] I could give you a screenshot though once I'm done with this. (still working on it) [19:38] nigelb: heh [19:39] nigelb: you guys need ensemble + ec2 :-) [19:39] nigelb: sure [19:39] kirkland: no no, we want Canonical to pay for ec2 :P [19:40] mhall119 is working on getting us a server, so it should happen soonish === skrewler_ is now known as skrewler [19:47] kirkland: Loosk good? http://i.imgur.com/u9scA.png [19:48] *looks [19:49] smoser, are you generating oneiric ec2 images? [19:51] hggdh, well, yesh. [19:51] i just released some! [19:52] http://uec-images.ubuntu.com/releases/oneiric/alpha-1/ [19:52] smoser, ooooohh sooo cool [19:57] smoser: Are we getting fresh natty, too? [19:57] erichammond, do you have a reason for wanting newer natty? [19:57] i'm in the process of releasing updated lucid [19:58] smoser: Seems like there were some good bugs fixed recently, or perhaps I'm not paying attention closely enough. [20:01] erichammond, http://paste.ubuntu.com/616973/ [20:01] that is the collected changes between release and most recent natty [20:02] was there something that jumped out of that list as particularly noteworthy? [20:04] did you really need the "Egypt abandons DST in 2011" fix ? :) [20:21] smoser: Thanks, nothing jumps out from that list. Perhaps it was another Ubuntu version or a bug that is close to being fixed. It's hard to keep track with so many other things going on in life. [20:21] what could possibly be more important than tracking bug fixes to a operating system release? [20:24] nigelb: sure, thanks! [20:24] \o/ [20:43] <_Neytiri_> how do i set up VM's on my server? [20:46] !kvm | _Neytiri_ [20:46] _Neytiri_: kvm is the preferred virtualization approach in Ubuntu. For more information see https://help.ubuntu.com/community/KVM [20:52] <_Neytiri_> ok [20:56] <_Neytiri_> can i still use KVM if my cpu doesent support hardware virturalation? [20:57] you can use qemu [20:57] _Neytiri_: Well, I don't know about "use".. It functions, but it's really, really slow. [20:57] without acceleration [20:57] eh, iit can be acceptable depending on what you're doing :) [20:58] <_Neytiri_> i am just running a DNS server [21:02] <_Neytiri_> so how would i use qemu, i manage the server i want to run vm's on via ssh [21:03] when i installed apache like 'tasksel ^lamp' apache services cant work...without first being connected to the net,.any solutions? [21:05] thanx 4 your help :( [21:05] irong33k: as I said - I've never seen that: please have a look into /var/log/apache2/error.log - there you should see *why* it doesn't start [21:08] kirkland: o/!! Were u able to test the second stage? [21:09] RoAkSoAx: negative, not yet [21:09] kirkland: alrighty! no worries! [21:15] anybody got vmware's esxi vmtools to install on ubuntu? [21:24] RoAkSoAx: is Oneiric desktop working for you in Testdrive? [21:27] RoAkSoAx: its not working at all for me [21:30] I am trying to configure postfix to send outgoing mail to my exchange server on the LAN, can anyone help with that? Server 11.04 [21:31] joshua u need a smarthost setting, it probably goes in main.cf but im not a postfix guy [21:31] where is that located at? [21:33] um /etc/postfix/ [21:34] let me go look on rhel6.1 is should be the same thing [21:37] RoAkSoAx: also, I'm testing Cobbler on Oneiric [21:37] RoAkSoAx: and I'm following https://help.ubuntu.com/community/Cobbler === skrewler_ is now known as skrewler [21:37] looks like its the relayhost parameter [21:37] RoAkSoAx: looks like there's a step missing between your "Importing" and "Deployment" stages [21:37] RoAkSoAx: the part about adding the machine to Cobbler [21:37] so relayhost=mail.domain.com [21:37] and restart postfix [21:37] and test [21:38] :q! [21:38] oops [21:38] doh [21:41] * RoAkSoAx checks [21:41] kirkland: you mean adding a "system" [21:42] RoAkSoAx: you have to add the machine to cobbler [21:42] RoAkSoAx: if you want to be able to install it by cobbler [21:43] kirkland: hold on, let me check [21:43] RoAkSoAx: i'm testing powernap now [21:44] kirkland: you mean this? : https://fedorahosted.org/cobbler/wiki/DeployFeature [21:45] RoAkSoAx: right [21:45] kirkland: haven't yet tested that but will do now [21:47] kirkland: the "deploy" command does not exist [21:49] RoAkSoAx: okay, powernap worked for me [21:49] RoAkSoAx: looked at the diff, looks reasonable, good work! [21:49] RoAkSoAx: shall i release and upload? [21:49] kirkland: please! [21:49] RoAkSoAx: wilco [21:50] kirkland: so anyways, I could add the documentation to add systems but the "cobbler deploy" command does not yet exists [21:54] jamespage: do i need to install a jenkins git plugin separately, or should that be there? [21:55] RoAkSoAx: uploaded, thanks! [21:55] kirkland: thank you! [21:55] zul: are you in the mood to sponsor a trivial apache upload for me? :) [21:55] RoAkSoAx: re: my cobbler questions .... [21:55] hallyn: can do it tonight [21:55] hallyn: i can, if zul isn't around [21:56] RoAkSoAx: so i have a cobbler server running [21:56] RoAkSoAx: in virt-manager [21:56] kirkland: ok [21:56] RoAkSoAx: and i created a new virtual machine, also in virt-manager [21:56] RoAkSoAx: both on the bridge interface [21:57] RoAkSoAx: so i boot the new vm [21:57] kirkland: ok [21:57] RoAkSoAx: tell it to boot from the network [21:57] RoAkSoAx: it doesn't get the pxe information, though [21:57] zul: thanks, it's the trivial debdiff attached to bug 787013 [21:57] Launchpad bug 787013 in apache2 "Please merge apache2 2.2.19-1 (main) from debian unstable (main)" [Wishlist,Fix released] https://launchpad.net/bugs/787013 [21:57] kirkland: thanks for the offer. this is far from urgent :) [21:57] RoAkSoAx: i presume because the cobbler server doesn't know about the new vm's mac addr [21:57] hallyn: np [21:58] hallyn: any luck with oneiric in kvm? [21:58] kirkland: uhmmm no I don't think so [21:58] kirkland: hm, i just got the failure on 'try ubuntu' [21:58] kirkland: so when you tell it to boot from the network, it will try to search for a PXE server in the network [21:58] kirkland: looks liek we need spice :) [21:58] hallyn: you should get (back) on that :-) [21:59] kirkland: the ball is in Daviey's court actually [21:59] kirkland: so the DHCP server does not know of any PXE's so the idea is to tell the DHCP server that the VM is the cobbler server [22:00] hm, and -vga vmware locked up over vnc [22:01] well, that sure looks bug-worthy [22:01] kirkland: have you filed one, or should I? [22:02] kirkland: so for example, in my DD-WRT router i tell this to DNSmasq: dhcp-boot=pxelinux.0,,192.168.230.1 [22:02] hallyn: i haven't sorry; please do [22:02] k [22:02] kirkland: so whenever I fire up a VM that uses the bridge, then the router dhcp's server tells that the IP is the boot server and it obtains the list of available profiles from there [22:02] negronjl_: ping [22:02] RoAkSoAx: ah, right [22:03] RoAkSoAx: so how should I do this over virt-manager? [22:03] RoAkSoAx: hi === negronjl_ is now known as negronjl [22:03] negronjl_: did you ever do PXE of a VM using a cobbler server that was a VM using the same bridge? [22:03] kirkland: I'd use koan :) [22:04] I did but, without koan kirkland, RoAkSoAx [22:04] negronjl: how were you able to tell that the cobbler server in the VM was the PXE? did you modify the router or did you do something in the host? [22:04] I suspect that it would be a lot easier with koan [22:05] negronjl: yeah, how did you do it :-) [22:05] Let me get the steps together and put them on pastebin [22:05] negronjl: share the pastebin love, I would like to know as well :) [22:05] zul: lynxman said that you sponsored his mcollective-plugins into oneiric? [22:06] sure thing lynxman [22:06] kirkland: if you wanna use koan, please use the virtinst from ppa:ubuntu-virt/ppa [22:06] RoAkSoAx: okay....why's that? [22:09] kirkland, RoAkSoAx, lynxman: I started by creating a bridge interface on the host system. Here is the one I made on my laptop: https://pastebin.canonical.com/48138/ [22:09] kirkland: cause when using koan, it hands of the url of the HTTP directory to virtinst, which examines it to determine the distro and stuff, and the one in PPA has more logic that I discovered later, it was missing from the one I patched in Natty [22:09] kirkland: will be uploading to Oneiric soon [22:10] RoAkSoAx: perfect, that's what I was checking ;-) [22:11] kirkland, RoAkSoAx, lynxman: I started by creating a bridge interface on the host system. Here is the one I made on my laptop: http://pastebin.ubuntu.com/617064/ [22:11] jamespage: (btw, nm, found my answer, thx :) [22:13] kirkland, RoAkSoAx, lynxman: In virt-manager, create a machine and bind it to that interface ( in my case, br0 ). [22:13] kirkland, RoAkSoAx, lynxman: Craate n-number of machines, all of them bound to that interface [22:13] kirkland, RoAkSoAx, lynxman: That creates your network. [22:14] kirkland, RoAkSoAx, lynxman: For DHCP and access via the host to the internet, I have the following on my machine: [22:14] kirkland, RoAkSoAx, lynxman: sudo /usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/br0.pid --conf-file= --except-interface lo --listen-address 10.1.1.1 --dhcp-range 10.1.1.100,10.1.1.200 --dhcp-lease-max=253 --dhcp-no-override [22:15] kirkland, RoAkSoAx, lynxman: On one of the machines, install ubuntu-orchestra-server. [22:15] kirkland, RoAkSoAx, lynxman: PXE boot any of the other machines....it should work. [22:16] negronjl: cool!! [22:16] kirkland: yeah that there should do the work, so dnsmasq in the host itself is given addresses to the VM's. If it doesn't work out of the box, then, you'd just need to also especify that the PXE is the VM running cobbler [22:17] s/given/giving [22:17] kirkland, RoAkSoAx, lynxman: In my setup, I have the orchestra-server running on static IP and the rest of the clients running off of dhcp. [22:18] negronjl: rock! [22:18] RoAkSoAx: perhaps you could add a wiki page under the Cobbler documentation with this magic from negronjl ;-) [22:18] kirkland: will do!!! [22:18] RoAkSoAx: cheers [22:18] kirkland, RoAkSoAx, lynxman: If all else fails, I can always just dump my configuration and images somewhere for you to take ( chinstrap comes to mind) [22:19] RoAkSoAx: do you mind if I make cman a recommends of cobbler (promote from a suggests)? [22:19] nice [22:19] RoAkSoAx: that will help with one of the cobbler check messages [22:19] kirkland: If you want, but I'm uploading fence-agents either by the end of the week or next week [22:19] RoAkSoAx: is that better? [22:19] RoAkSoAx: looks like cman is in main ... [22:20] kirkland: yeah cman pull useless cluster stack stuff and contains the fence-agents that have been separated into its own source package [22:20] kirkland: i'm uploading fence-agents and filling a MIR [22:20] kirkland: we could put that in a PPA if you like until that happens [22:20] RoAkSoAx: okey doke; make sure you remove cman as a suggests, and add it as a recommends [22:21] kirkland: will do [22:21] RoAkSoAx: cool [22:22] RoAkSoAx: oh, powernap feature/request for you ... [22:22] kirkland: I have fence-agents 3.1.4 here: https://launchpad.net/~andreserl/+archive/ha/+packages and it includes one fence-agent for eaton device sadded by arnaud recently [22:22] kirkland: shoot :) [22:22] RoAkSoAx: could you make powernap touch/remove a file in /var/run when a system is powernapping/not-powernapping? [22:23] RoAkSoAx: I'd like to add an indicator in byobu .zZ that shows when a system is powernapping [22:23] RoAkSoAx: or is there an easy way? [22:24] kirkland: uhmmmmmmmmm let me think [22:25] RoAkSoAx: nevermind, i'm hacking it myself now [22:25] kirkland: i was thinking that maybe pm-powersave had something we could use [22:25] kirkland: but there isn't really [22:25] kirkland: so yeah I could add that === skrewler_ is now known as skrewler [22:30] RoAkSoAx: something like this: [22:30] RoAkSoAx: http://paste.ubuntu.com/617078/ [22:32] kirkland: yeah we could do that, or whithin the daemon itself to create the file after executing pm-powersave and removing the state file when recover action was taken [22:32] kirkland: cause, it will only be useful when in powersave [22:33] RoAkSoAx: hmm [22:33] RoAkSoAx: i'm testing this now [22:33] kirkland: ok ;) [22:37] kirkland: oh btw... have a patch for bikeshed. This should not break the release-build script cause of the source format: http://paste.ubuntu.com/617085/ [22:38] RoAkSoAx: seems to be working well for me [22:38] RoAkSoAx: i'm going to commit [22:38] RoAkSoAx: feel free to enhance/rework [22:38] RoAkSoAx: ah [22:38] RoAkSoAx: nice fix [22:39] kirkland: hehe It had me scratching my head for a while :) [22:40] RoAkSoAx: heh [22:41] I am having a lot of jbd2 write on my ext4 fs , I rolled back to 2.6.35 but it is the same [22:41] kirkland: I was also thinking on adding WARN methods, so that we could nose notify-send or something instead of only wall messages [22:42] RoAkSoAx: intersting ... [22:42] RoAkSoAx: i like it [22:42] do you have any idea how to figure out why all these writes ? I looked at log files without any evidence [22:42] kirkland: or even send emails to the administrator [22:45] RoAkSoAx: release-build patch worked *perfectly* [22:46] kirkland: heheh I must admit that without barry's help would have found the solutiuon lol! [22:48] RoAkSoAx: i recently added a release-test script too [22:48] kirkland: what does it do? [22:48] kirkland: btw.. I'm getting the UPS on monday [22:49] RoAkSoAx: same as release-build, but it doesn't change the changelog entry [22:49] RoAkSoAx: so that you don't have to revert that [22:49] kirkland: cool! [22:55] I'm having trouble installing a software Raid5 11.04 server - anyone have experience with this? I think my problem has to do with Grub2 [22:56] I've created my RAID and mounted it using LiveCD, but getting Grub2 installed and working is what is causing my problems. [22:57] Oldschool: you don't need a live cd to install a server [22:57] I can't boot without one. The install usually will leave me with a GRUB> prompt. [22:58] jamespage: well, the jenkins git plugin appears to die a horrid death trying to git-clone git://www.linux-cr.org/pub/git/linux-cr.git [22:58] on that failure, i leave this for another day [22:59] Oldschool: i cannot see how an install can leave you at a grub prompt. do you mean after first boot? [23:00] Yes - I create the RAID during the install, and depending on the options I use with the partitioner, either GRUB will not install, or it will install onto a /boot partition, but when I reboot, it ends up giving me a grub recovery> prompt [23:00] Oldschool: then use the live cd to get the installer logs (syslog) to see what happened. or install again and get to the menu and choose to see the logs [23:00] where are those logs? [23:05] hi [23:05] sorry for my english [23:06] any can try to resolve me a question? [23:06] Mostoles: you need to ask the question, :) [23:06] yes [23:07] i like to stop the harddisk to save energy [23:07] my s.O [23:07] No entries under /var/log/boot [23:07] my S.O is ubuntu server [23:08] i have one disk for S.O, and 3 for data [23:08] i like to stop the data disk [23:09] im try to use hdparm, but dont know the flag [23:10] Mostoles: sudo hdparm -S 120 /dev/sda ? [23:11] if I reboot, this is persistent? [23:12] no [23:12] hello [23:13] Mostoles: you could add it to your /etc/rc.local [23:13] (above exit 0) [23:13] what limit in limits.conf can block memory (RAM) per user? [23:14] and maybe who know program who use eq. 200MB from ram [23:14] i wan tto test this limits ;) [23:15] i try to put in /etc/hdparm.conf [23:15] but dont do any [23:16] this /dev/sdc {spindown_time = 120} === RoAkSoAx is now known as andreserl === andreserl is now known as RoAkSoAx === roaksoax__ is now known as andreserl [23:26] Hey all ! [23:47] thanks for all [23:47] bye