[00:09] hi everyone....what's the best way to guarantie that a service runs no matter what? like if it dies, something to run it again, get notification for that, etc [01:16] I'm trying to install libactiverecord-ruby1.8 on ubuntu 10.04 server, but apt says it doesn't exist... [01:16] it's supposed to be in the universe repo, but doesn't seem to be [01:16] !info libactiverecord-ruby [01:16] libactiverecord-ruby (source: rails): ORM database interface for ruby. In component universe, is optional. Version 2.3.5-1.2ubuntu1 (natty), package size 4 kB, installed size 36 kB [01:17] Hm [01:26] is it just missing? it definitely seems like it should be there [02:46] I just upgraded my remote server that I have no console access to, i.e. ssh only. At the end of the upgrade it said "Upgrade complete but some errors occurred." This is 8.04 -> 10.04. I do not have the ability to scroll back and see the errors. What now? [02:48] jeremy_c: /var/log/apt, /var/log/dpkg [02:48] I don't follow the official upgrade procedure, so there may be other fancy-pants d-r-u logs that I don't know about. [02:49] twb: thanks. [02:50] twb: it doesn't seem to include anything about the do-release-upgrade. Last log entry is from early this morning when I did an apt-get install links [02:51] jeremy_c: no dpkg/term.log ? [02:51] dru may bypass apt :-/ [02:52] there is /var/log/dpkg.log which shows install of packages from the dru but no error information. [02:52] no /var/log/dpkg dir though. [02:54] * jeremy_c is afraid to reboot :-) [03:00] I would check /boot/grub/menu.lst and make sure it's set to boot a kernel that's installed (and for Lucid) [03:01] Wait, doesn't d-r-u manually run its own screen session now? [03:01] So he should be able to ^A[ to get to scrollback [03:01] Not that I noticed. [03:01] Certainly not in Lucid it didn't. [03:01] ok [03:01] I thought it did [03:02] twb: not in lucid, but in maverick it does. === med_out is now known as med [03:02] I'd also make sure sources.list points a lucid, apt-get update and then apt-get dist-upgrade. === med is now known as medberry [03:03] That'll make sure all the package upgrades are done. [03:03] If you've got all the packages upgraded and grub is set to boot the correct kernel, odds of it coming up post-boot are reasonably good. [03:10] Is there a way to detect the architecture of DHCP clients from ISC DHCPD ? [03:11] I don't see anything in the man pages, but I figure there must be a way. I'm trying to send different 'filename' options to PXE clients, so they get the right PXELinux boot code. [03:21] menu.lst shows kernel 2.6.24-26 w/date/time about the time dru was run. [03:22] ScottK: in regards to Lucid, how do I tell? The titles still say "Ubuntu 8.04.4 LTS" ... I did a apt-get update && apt-get upgrade this morning in prep for this dist-upgrade tonight. The kernel versions didn't actually change from this morning. [03:23] 2.6.24 is a hardy kernel. [03:23] Does your sources.list say lucid? [03:23] sources.list show lucid [03:23] all hardy references are commented out in sources.list [03:24] jeremy_c: as root, run "apt-get dist-upgrade --dry-run" and pastebin the output. [03:24] jeremy_c: that should tell us what (if any) outstanding upgrades exist [03:24] not by me, seems that they were ones that existed and were commented out prior to upgrade, i.e. hardy partner, hardy main restricted. [03:26] http://pastie.org/2030377 ... apt-get dist-upgrade --dry-run [03:26] Do you have a kernel metapackage (e.g. linux-image, linux-image-generic, linux-generic-pae) installed? [03:27] If the kernel metapackage got removed from some reason that would explain having the old kernel still [03:27] http://pastie.org/2030381 ... dpkg -l | grep linux [03:29] http://pastie.org/2030387 ... ls /boot -l [03:30] ScottK: so spamassassin is preventing him installing a newer perl (I think), but everything else is OK? [03:31] as far as apt is concerned, I mean [03:31] Wrong kernel [03:32] should I do a apt-get -f install ? [03:32] Dunno [03:32] Yes. [03:32] Best case it fixes stuff, it won't break things worse. [03:33] If it was me, I would do it, but I can handle whatever it throws at me [03:33] Read what it says it's going to do before you say yes [03:33] +1 [03:33] seems pretty benign [03:34] Can you pastebin it? [03:34] hm, already started it. [03:34] OK. [03:39] apt-get --dry-run dist-upgrade now shows: 524 upgraded, 165 newly installed, 6 to remove and 0 not upgraded. linux-image-2.6.32-32-server being one of them. [03:39] zoiks [03:39] So it sounds like something perl-y broke down, and now it is fixed you can carry on [03:39] so dru or apt-get dist-upgrade? [03:39] Not sure [03:40] I don't trust dru to do the right thing, but I get yelled at if I tell newbies that it's junk [03:40] At this point apt-get dist-upgrade [03:40] twb: :-D [03:40] ScottK: OK. [03:40] dru works fine but it's not designed to start from the middle. [03:41] only has to download 1.2mb out of 622mb, so dru must have gotten most things. [03:41] What are the 6 to remove? [03:42] forget, but they were things I don't use, realized they were of no concern and just went on. [03:43] I can tell you in a sec, I have it in a log, but it's unpacking/installing right now. [03:43] libcupsys2 libdatrie0 libgems-ruby1.8 librpm4.4 python-psycopg texlive-base-bin [03:46] Agreed. [03:46] Should all be fine. === ujjain is now known as ujjain|afk [03:55] I did a rm /var/log/mail.* [03:56] and now the mail logs aren't recreated whenever something happens. [03:56] I can recreate them, but user/group/permissions should they have? [03:59] even after chmod 777'ing it, nothing is written [04:00] -rw-r----- 1 syslog adm 1456 2011-06-06 13:58 /var/log/mail.log [04:01] thanks [04:01] I had tried that once already [04:01] I'll reboot--the fixall for the novice! [04:01] and now it works, and the permissions for those files ar eset === medberry is now known as med_out [04:06] I am down to this error installing procps: http://pastie.org/2030485 [04:12] ScottK: twb any ideas about http://pastie.org/2030485 ? [04:13] That's weird [04:13] Knee-jerk reaction is to blame LSM (e.g. apparmor) [04:14] Any ideas on fixing it? [04:15] You didn't run out of space did you? [04:15] If not, I'd check and see if the backup symlink already exists. [04:15] nope. [04:16] 62% use is the highest use disk mounted. [04:20] I think I am done. forcing it made it pass. [04:22] ScottK: twb: 2.6.32-32-server sound OK for the kernel? They are in menu.lst as Ubuntu 10.04.2 LTS [04:23] linux | 2.6.32.32.38 | lucid-updates | amd64, i386 [04:23] Yes. [04:24] Hey ScottK, ltns! [04:27] ScottK: twb: Thanks! The server reboot just fine. Now reports 10.04 [04:27] jeremy_c: Congratulations. [04:30] now I guess we should continue to 11.04 :-/ I hate dist upgrades :-/ [04:31] Bah [04:31] non-LTS can FOAD IMO [04:32] FOAD? [04:32] "go away" [04:32] hm, 11.04 isn't LTS? [04:32] It is not [04:33] I guess I am a bit confused, is LTS software that is outdated but continuting to be supported? [04:34] LTS releases are supported longer than normal ones [04:34] normal releases are on a 6 month cycle, which is too fast for most production environments [04:34] LTS releases are on a two year cycle [04:35] Canonical nominally provides support to its customers for releases. Certain packages in LTS releases get substantially longer support than they otherwise would. [04:35] Even if you aren't paying for Canonical support, some of that benefit rubs off because they issue e.g. security updates to everyone [04:36] So in short: yes, except instead of "outdated" we say "stable" [04:40] so, in a production env I should stick w/10.04 then is what you are saying? [04:44] it's up to 10.04.2 [04:56] Yes === cypha`` is now known as cypha === RefaelAlats is now known as FernandoTertius === FernandoTertius is now known as FernandoTertiary === RefaelAlats is now known as FernandoTertius === FernandoTertius is now known as FernandoTertiary === cerber0s is now known as cerberos === smb` is now known as smb === fenris is now known as Guest8457 [09:46] lynxman, Hah! I had no idea you had created a meta data service for orchestra. Nice one :) [09:46] Daviey: yeah it's just a very limited easy one [09:46] well yeah, but it's *something* :) [09:47] Daviey: definitely =) [09:58] newbie ec2 question: How does one make the instance of ubuntu ec2 images persistent? i.e. If I install some apps, then terminate my instance I want to be able to restart the instance and find the apps installed. [09:59] amitk: you have a couple of ways for that, you can use EBS as your root fs (there's AMIs that implement that) or you can just make an AMI once you're happy with how the server looks and be able to spawn new instances [09:59] amitk: both have different usage scenarios so make sure the one you choose fits what you need [10:04] lynxman: I've already downloaded the ubuntu 10.04 EBS image to use with the free AWS offer. Can I customize that and make it peristent? [10:05] amitk: that is already persistent, if you terminate the instance your disk remains as an EBS volume, you just need to start a new instance pointing at that ebs vol [10:05] lynxman: hmm, how do I point to the ebs volume? [10:07] amitk: a quick Google showed up this http://serverfault.com/questions/234061/re-gaining-root-access-to-an-ec2-ebs-boot-image [10:08] lynxman: aah thanks. I've been googling for an hour with no result. I was missing the right language (keywords) to google. [10:09] amitk: no worries =) [10:11] and how does 'snapshots' figure into this? I thought I had to snapshot the instance to be able to persist [10:11] amitk: a snapshot is your base image for the AMI [10:12] amitk: so an AMI will always use a snapshot to spawn an EBS volume to boot from [10:15] When i initiate an apt-get upgrade, and it upgrades apache, it _changes_ the permissions on the already available /var/www folder. It shouldn't, and it's a bad practice of doing so. Even though Ubuntu developers apparently can't be trusted with creating proper packages, what other ways are there to prevent permission changes on folder /var/www? [10:17] laen: as far as I know it's bad practice to change the permissions of a directory created by a package :) [10:17] I'm looking for a generic solution, not a per-server btw. [10:17] Cause apt-get is always right, right? [10:18] I didn't make up the permissions, we're talking about a professional environment i have to suppoirt, and didn't create. [10:18] laen: What exactly changed? [10:19] (Although I do wonder why you're asking advice from people you don't trust) [10:19] Ow apparently, i head now, it was the permissions on /var/log/httpd [10:19] Cause i have to support Ubuntu, even though i don't want to. [10:19] /var/log/httpd ? [10:19] We don't use /var/log/httpd [10:19] soren: I think he means /var/log/apache2 [10:19] Then he should say that instead. [10:20] laen: Which is it? httpd or apache2? [10:20] Right, something like that. It was indeed log files beeing stored in /var/log/apache2 by the customer.. (and that is bad practice as well, i know, not my idea, and don't agree).. once the permissions change the customer apache instance can't store apache2 log files anymore. [10:21] Well, the generic, not per-server solution is to fix the problem, not the symptoms. [10:22] Hence, I'd like to know exactly what changed so that I can try to work out why it happened. [10:23] Looking at apache's postinst, it should only be setting ownership on initial installs, never on upgrades. [10:26] Or not. [10:26] *shrug* [10:30] I recently changed the IP of one of my servers and whenever I log in it displays two versions of the "welcome" screen. The second version has the old IP on it. How do I remove it? [10:30] the second one also says "System information as of Fri May 13 15:32:01 BST 2011" [10:31] TheAshMan: possibly /etc/motd.tail [10:32] do I just empty the file? [10:33] apparently so [10:33] Thanks :) === jibel_ is now known as jibel [11:32] is this the right way to mount an EBS volume as the root device? ec2-run-instances ami-2ec83147 --instance-type t1.micro --region us-east-1 --key amit -b '/dev/sda=snap-foobar' [11:33] it mounts /dev/sda and creates another /dev/sda1 EBS for me [11:34] I'm trying to figure out the simplest way to have my Ubuntu 10.04 64-bit instance kept up to date (persistent) [11:35] lynxman: ^ [11:35] amitk: I believe you need to use a special EBS root AMI that you can stop rather than terminate if not needed [11:36] amitk: the EBS space will cost some money, but the instance can be stopped and started at will [11:36] amitk: TeTeT is right, you need to start the instance from an EBS AMI, then stop, detach the created image and attach yours, I know its not the most elegant but... that's the only way I know [11:37] TeTeT: aah, so I shouldn't be terminating. Only starting and stopping? [11:37] amitk: try this one, not sure if it's lucid, but should be ebs backed: ami-9d4ba5f4 [11:37] amitk: yes, regular instances can only be started and terminated and rebooted, ebs root instances can also be stopped [11:38] EBS space is free (10Gb) with the AWS free tier [11:38] didn't know that [11:39] all documentation points to terminate [11:39] TeTeT: I believe that ami-2ec83147 is an official Ubuntu 10.04 64-bit EBS-backed AMI [11:40] hello [11:40] ;]]] [11:41] so I'm only trying to get my changes to be persistent [12:07] soren: sorry was in a meeting, but i'll find a solution, thanks though [12:52] I have added "manual" to a service in /etc/init, but after this, upstart wont recognize the service at all. Does anyone have any examples of how to use a manual service? [13:14] morning all === ujjain|afk is now known as ujjain [14:05] lynxman: this one? mcollective-server-provisioner [14:07] zul: yessir [14:12] lynxman: ok first it should be in a bzr branch again [14:12] zul: there's one :) [14:12] lynxman: can you use quilt for the patch [14:13] zul: hm? [14:13] lynxman: you modified the source can we have a clean source and then you apply the patch again [14:13] zul: that'll be fairly difficult :/ [14:13] zul: the changes are enormous [14:13] lynxman: why? [14:13] zul: and they'll be merged upstream next week [14:14] lynxman: k [14:14] zul: would it be possible to get this one rolling and then I'll generate a new version as soon as the changes are in? [14:14] lynxman: yeah [14:14] zul: thanks ^^ [14:14] lynxman: also the plugins dont work with out the mcollectiver-server-provisioner do they? [14:15] zul: they do, there's a plugin for the provisioner in the package [14:15] zul: but all the rest are operationally independent [14:15] lynxman: ok just making sure [14:16] zul: each agent should be able to stand on its own, and each have its own Requires [14:16] lynxman: for the postinst you probably want service mcollective restart || true [14:16] lynxman: get rid of the watch file [14:17] zul: cool, same as always :) doing those changes nao [14:17] lynxman: in the upstart put the start on, stop on repsawn before the pre-start block [14:21] hey guys can someone assist me to convert mysql from latin1 to utf8? [14:21] and very wierd one of my ubuntu servers is actually reading the database good [14:21] the other one is messed up [14:21] anyone can help me? [14:22] kickar: #mysql might be a better place to ask if you anre't getting help here. also, try to be patient, you just ask your question. [14:23] it is weird [14:23] maybe it is a apache setting? [14:23] cause my one machine is OK, but theother one not [14:40] zul: changes in repo, new package building [14:41] k [14:57] hello I am trying to create a raid1 from a single disk. after $ sfdisk -d /dev/sda | sfdisk /dev/sdb /dev/sdb2 has only one block so I can't format it. thanks. [14:58] am I doing the right thing to create a raid1? [15:00] teaforthecat: raid1 on one disk is questionable [15:00] teaforthecat: hm, ok, you mean 2-disk array based on a single non-raided disk [15:00] yes [15:01] I understand I create a degraded array first, copy the data over, then add the original disk to the array [15:02] where phpmyadmin keep its logs? [15:04] Ddorda: Open /etc/php.ini file and find error_log [15:14] I created a gist that shows the confounding error at the bottom: https://gist.github.com/1012330 [15:16] New bug: #792713 in samba (main) "package winbind 2:3.5.8~dfsg-1ubuntu2.1 failed to install/upgrade: subprocess dpkg-deb --fsys-tarfile returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/792713 === cerber0s is now known as cerberos [16:18] I need something to start services if they go down, and get notification when that happens....what do you guys suggest? [16:20] m_tadeu, check monit [16:32] what updates the following files ? [16:32] /var/lib/apt/update_success /var/lib/apt/periodic/update-stamp /var/lib/apt/lists/lock [16:33] and I have this script http://pastebin.com/q81uZk7X that alerts if they are newer than 7 days.. trying to find out what is the significance of that [16:33] s/that alerts if they are newer than 7 days/that alerts if they are older than 7 days/ === koolhead11 is now known as koolhead11|afk [16:52] zul: ping? [16:52] RoAkSoAx: whats up? [16:52] zul: so wanted to discuss some cobbler stuff with you, free? [16:53] RoAkSoAx: sure [16:53] zul: 1st: When we import the mini.iso it will create a Repo for main/universe, and another one for security [16:54] RoAkSoAx: okies [16:54] zul: the repos by default are disabled so if we run cobbler reposyng it will not sync the archives [16:54] zul: so anyways, I'm guessing that the behaviour is desired, correct? [16:54] i believe so [16:55] zul: ok, so now, the thing is how can I automatically determine the country and stuff to set the repo [16:55] zul: if we are in the us, use us.archive if we are in Italy, us it.archive [16:55] etc etc [16:55] any ideas? [16:56] RoAkSoAx: iirc there is a way to determine which mirror you can use with apt, check with mvo [16:56] zul: cool [16:57] zul: 2nd: TYo be able to use the repo and stuff, we need to tweak the preseed... should we just document that or should we make that happen automatically? [16:57] document it for now [16:57] zul: ok thanks ;) [16:58] zul: ahh I think we cannot use apt to determine which archive repo to use in case we submit it upstream, otherwise it wouldn't work on non-debian machines [16:59] RoAkSoAx: assuming that they have /etc/apt/sources.list setup properly on the cobbler server why not gleeem it from there [16:59] hi guys, is jaunty 9.04 no longer supported? my apt-get update gives me all 404's [16:59] tdelam: its not [16:59] zul: Hm, what could the reason for those 404's be? [17:00] /win/j #ubuntu-meeting [17:00] tdelam: its not supported [17:00] oh [17:00] how can I upgrade now that apt is dead? [17:00] zul: ok [17:01] tdelam: http://old-releases.ubuntu.com/releases/ [17:02] ah :/ [17:03] tdelam: I would recommend using: 'sudo do-release-upgrade' and upgrade to 9.10. then do it again to get to 10.04. both 9.04 and 9.10 are not supported (but 10.04 is because it is an LTS) [17:03] no easy way to do this I guess. Server is 4000 miles from me serving about 200 web sites. [17:03] oh [17:03] tdelam: 9.10 hasn't been moved to old-releases yet. you should be able to upgrade in the manner I described [17:04] An upgrade from 'jaunty' to 'lucid' is not supported with this tool. [17:04] tdelam: no. LTS to LTS is supported or release to the next release. jaunty wa not LTS, so you must go through 9.10 (karmic) [17:05] jdstrand: Oh I see, can I specify that with this command? [17:06] tdelam: it can detect it. 'sudo do-release-upgrade' is all you need to do. you'll do that (it is cli) and it will upgrade, then reboot. then you'll do it again [17:06] tdelam: it should be stated that doing this has an element of risk [17:07] jdstrand: Yea, that's what i did and got back that error message. [17:07] tdelam: with you being 4000 miles away, if something goes wrong or the system is unbootable, then you are in trouble [17:07] tdelam: you got the 404 message? [17:07] jdstrand: http://pastie.org/2033024 [17:08] hmm [17:08] it didn't like that karmic is eol too [17:08] tdelam: you have to do jaunty -> karmic the hard way [17:09] jdstrand: can you direct me to how to it the hard way without apt? [17:09] tdelam: update /etc/apt/sources.list to substitute all occurences of 'jaunty' with 'karmic'. then do 'sudo apt-get update && sudo apt-get dist-upgrade' [17:09] oh [17:09] thats not so hard :) [17:10] tdelam: please note, this method of upgrading is not at all as well tested and that 'do-release-upgrade' has special logic to make sure that things go smoothely [17:10] ok [17:11] tdelam: there is more risk with this method. you may want to start sshd manually to listen on a different port, then login via that port and do 'sudo -i' before the upgrade so you have a root prompt [17:11] tdelam: in case anything goes wrong [17:11] tdelam: once you upgrade to karmic, reboot, then you can use do-release-upgrade [17:11] ok [17:11] tdelam: good luck (and make backups if possible) [17:12] Di have automated ones, for years now [17:12] in /mnt/disk2 :) [17:13] tdelam: you know [17:13] tdelam: you should probably do the 'sudo apt-get update && sudo apt-get dist-upgrade [17:13] ' in the speciall sshd [17:13] alright [17:13] i am getting that going now [17:13] in cause the one that is upgraded goes down [17:14] s/cause/case/ [17:14] tdelam: good luck :) [17:14] thanks :D [17:14] note to self -- stay on top of upgrades === Corey__ is now known as Corey [17:38] jdstrand: on karmic now do-release-upgrade started. [17:38] \o/ [17:38] so far so good. I don't want to jinx myself though [17:38] all webservices are running smoothly too. [17:38] minus the mini downtime for rebooting :) [17:39] had to be done though [17:39] koolhead11|afk: thanx a lot [17:50] sommer: i should have a test build of the server docs in that new layout available within the next few days. [17:51] j1mc: sweet that'd be awesome === NG_ is now known as ng_ [17:51] i'll let you know when it's ready. :) [17:51] j1mc: sounds good, thanks for your help! [17:52] you are very welcome! : ) [17:52] sommer: we have a docs team meeting set for this sunday at 20:00 UTC. just an FYI in case it is convenient for you. [17:52] it's 3:00pm central time [17:53] j1mc: ya, I'll try to be there, but I'm not sure what I have going this weekend. [17:53] no worries [17:53] :) [18:20] i'm trying to enable TLS secured replication in openldap, following the ubuntu 10.04 server guide. when i try to modify the ldap config to add the certificates on the slave, i get the following error: ldap_modify: Inappropriate matching (18) additional info: modify/add: olcTLSCACertificateFile: no equality matching rule [18:20] i'm getting the error on step 6 here: https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html#openldap-tls-replication [18:23] maccam94: what command are you entering? [18:25] it's on step 6 in the section of the page i linked, it's a slapd command followed by adding stuff to the tree [18:25] sommer: i can paste what i'm running to pastebin, but it looks almost exactly the same as what's on page [18:25] i just changed the hostname for the keys [18:25] maccam94: so you have the olcTLSCACertificateFile setup? [18:26] i have the files in /etc/ssl/certs and /etc/ssl/private, yes [18:26] it doesn't look like it's even trying to load them though [18:26] maybe try adding the CA entry by itself, then try adding the entries for the server's cert and key === JGJones is now known as Nintendo [18:27] i had a problem with permissions on the master initially, where slapd wouldn't start because it didn't have permissions to read them, but this error occurs right when i commit the change, it won't accept it [18:27] sommer: and it fails when i enter just that first section [18:27] maccam94: strange, I've never seen that particular error... on sec [18:28] i feel like i must be missing something in my tree === Nintendo is now known as JGjones === JGjones is now known as JGJones [18:29] maccam94: can you do replication without TLS? [18:29] sommer: yes, it is currently replicating [18:29] maccam94: that's good :-) [18:29] though i'm not sure it was configured following the same methods as in the server guide [18:30] are you using natty or maverick? [18:30] lucid [18:30] should work for both... oh one sec [18:30] the guide page is for lucid as well [18:31] right, should work for lucid too, heh [18:32] maccam94: maybe try adding "TLS_REQCERT allow" to your /etc/ldap/ldap.conf file (no quotes) [18:32] then do the modify command [18:34] sommer: i did it and restarted slapd and now it works [18:34] thanks! [18:34] no prob... it's an issue with self-signed certs I guess [18:35] ah [18:35] might need to make a note of that in the docs :-) [18:40] :-) [18:53] smoser: re bug #765843 .. you said you pulled it into your upstream branch.. are you planning to upload that to oneiric soon? [18:53] Launchpad bug 765843 in cloud-initramfs-tools "Intermittent mount failure after growroot" [Undecided,Confirmed] https://launchpad.net/bugs/765843 [18:54] how can i confirm that my two ldap servers are indeed communicating via TLS/SSL? [18:54] maccam94: I use wireshark to snoop ldap traffic then do a change on the master [18:56] :-( that's not really feasible for me... [18:57] sommer: should they be communicating on port 636? [18:57] maccam94: nope 636 is for SSL, using TLS uses 389... at least that's my understanding [18:58] ok [18:58] maccam94: you could also use tcpdump to capture traffic [18:59] actually i guess i don't need promiscuous mode for that... [18:59] (it's a vm) [19:02] SpamapS: a bunch of server related videos are just now hitting the youtube channel if you wanna tweet some of that action [19:04] smoser: hardy current amd64 ran fine [19:05] smoser: I think we are good to go [19:21] now that i have starttls enabled, will my ldap servers allow non-TLS/SSL connections? [19:22] maccam94: yeppers, you can connect both ways [19:23] hm, i probably want to restrict it to SSL/TLS only. will all of the clients need keys/certs to be able to connect securely? [19:25] I think you can do that via ACLs, but I've never implemented it myself. Don't think the clients will need certs, but they may have to adjust the TLS settings to allow a self-signed one from the server [19:35] k [19:35] thanks for the help, sommer [19:35] maccam94: you're welcome :-) [19:43] Anyone able to help me out with some preseeding i'm trying to do? Not having any luck recreating an iso for use in virtualbox with a preseed.cfg. [19:44] Specifically for the 11.04 server install. [19:55] !ask | codi [19:55] codi: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [20:05] zul: I guess I'll do some python-apt stuff to get the mirror automatically, if not, just hardcode one [20:07] RoAkSoAx: cool...i have a half assed gpxe thing going on [20:08] zul: hehe good luck w/that [20:10] hello, [20:10] does somebody know how to start into runlevel 3, not into runlevel 5? [20:13] is this possible ? there is no inittab at /etc ? [20:15] !upstart | earthworm [20:15] earthworm: Upstart is meant to replace the old Sys V Init system with an event-driven init model. For more information please see: http://upstart.ubuntu.com/ [20:16] @pici so upstart is the parent of all processses... interesting... [20:18] @pici do you mean i should remove S from init.d/ [20:19] @pici or would this be the wrong way... [20:19] earthworm: I believe that upstart will still fire scripts in /etc/init.d/ [20:19] okay [20:19] @pici okay [20:21] @pici i found a script called : rc-sysinit.conf [20:21] @pici i'm on the right way... ? [20:21] earthworm: Indeed. [20:22] @pici you're a fine tutor ... aren't you ;) thx [20:24] gonna reboot and see ... [20:24] thx [20:30] Ok, my question is. I have the server iso downloaded from ubuntu.com and a preseed.cfg. Should that preseed.cfg just go in the root of the disc image? === ng_ is now known as NG_ [20:40] @pici ;) [20:40] there is an entry with runlevel = 2 [20:40] i tried to change this to 3 but nothing happens, everything is as before === lullabud is now known as warzauwynn [20:47] eagles0513875: standard runlevel is 2 [20:47] why would you change that? [20:48] RoyK: Yes gone. [20:48] er, Hes. [20:50] oh [20:50] yes [20:50] * RoyK wants native zfs on linux [21:06]