selynda | ok, so assuming that the specs are good, is there anything special I need to do to be able to connect remotely via my other ubuntu computers? | 00:01 |
---|---|---|
cloakable | nope :) | 00:08 |
selynda | cool, so how would I go about doing that? | 00:09 |
selynda | so if I use the connect to server option in ubuntu, where it says server I would just enter the IP address? | 00:15 |
cloakable | Or hostname | 00:15 |
cloakable | Not sure how the ubuntu connect to server option works; I use Kubuntu | 00:16 |
selynda | ok cool, but I would have to set up an FTP or SSH right? | 00:16 |
qman__ | selynda, no, samba alone would allow access | 00:17 |
qman__ | however, ubuntu to ubuntu, I'd suggest using sftp since it's easier to configure | 00:17 |
cloakable | Plus SSH is simple to setup | 00:17 |
qman__ | as in, there is no configuration, just install | 00:17 |
cloakable | ssh is even easier iirc | 00:17 |
selynda | ok, cool but when I connect to server it asks for service type... | 00:18 |
qman__ | also, bare minimum specs if you use ubuntu server are somewhere around a 386 CPU and 64MB RAM | 00:18 |
qman__ | though I'd suggest at least 256MB for reasonable performance | 00:18 |
selynda | qman: cool thanks | 00:18 |
qman__ | and an i686+ CPU so you don't have to manually install a different kernel | 00:18 |
qman__ | so, K6-II or pentium II | 00:19 |
qman__ | maybe some pentium 1s | 00:19 |
cloakable | Or an Atom :) | 00:19 |
selynda | hehe | 00:20 |
qman__ | an atom is Pentium III based | 00:20 |
* cloakable runs Ubuntu Server on an Atom | 00:20 | |
qman__ | the progression was Tualatin P3, Pentium III-M, Pentium M, one other intel mobile chip, then the atom | 00:21 |
cloakable | ahh | 00:21 |
cloakable | Then the various atoms | 00:21 |
qman__ | for that particular architecture | 00:21 |
qman__ | yeah | 00:21 |
=== erichammond1 is now known as erichammond | ||
RoAkSoAx | kirkland: ping | 00:57 |
kirkland | RoAkSoAx: pong | 00:57 |
* Daviey waits for the return volley of the table tennis game that is ping-pong between RoAkSoAx and kirkland. | 00:59 | |
uvirtbot | New bug: #797462 in samba (main) "package samba-common-bin 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/797462 | 01:22 |
selynda | ok so I downloaded and burnt the server ISO, but it won't boot....my ubuntu desktop ISO boots fine though | 03:12 |
rewt | which version? | 03:16 |
rewt | selynda, compare your iso's md5 with the one listed on here: https://help.ubuntu.com/community/UbuntuHashes | 03:18 |
selynda | 11.04, I re downloaded and burned it and it works now, I think it was the burning software I was using | 03:21 |
qman__ | selynda, you can also check the md5 of a burned disc by running 'sudo md5sum /dev/scd0' (replacing that with your cdrom device) and it should match up with the md5sum on the ubuntu mirror | 03:34 |
Anime-girl1 | ok when I am setting up my server, I am asked to partition the disk, I want to use the entire disk, but dont know if I should do it with LVM or not | 03:36 |
Anime-girl1 | ? | 03:40 |
Anime-girl1 | what is LVM? | 03:40 |
=== Adri2000 is now known as Guest22931 | ||
rewt | logical volume management | 03:41 |
rewt | http://en.wikipedia.org/wiki/Logical_Volume_Manager_%28Linux%29 | 03:42 |
Anime-girl | ok so I got my server set up, so why can't I log into it? | 04:24 |
twb | Define "log in". SSH? | 04:27 |
Anime-girl | yes | 04:28 |
twb | Is openssh-server installed? | 04:29 |
Anime-girl | it says connection refused by server | 04:29 |
Anime-girl | i dont know, just installed ubuntu server from the disc, and was under the impression there wasnt anything I had to do to set up ssh | 04:30 |
twb | You were wrong. | 04:30 |
Anime-girl | hmmm they lied!!! | 04:31 |
Anime-girl | ;) | 04:31 |
twb | Unless you perform the initial install over SSH, or choose the "SSH server" task in tasksel, you will need to manually install openssh-server after installation. | 04:32 |
twb | Ideally, you will also lock down the sshd_config, e.g. turning off single-factor authentication, restricting access to a whitelist of "real" users/groups, etc. | 04:32 |
ScottK | so 'almost nothing'. | 04:33 |
twb | http://paste.debian.net/119877/ <-- example | 04:33 |
Anime-girl | ok, got it | 04:34 |
Anime-girl | now what about joining the server with the host name? how do I set that up? | 04:35 |
twb | Anime-girl: I don't know what that means | 04:35 |
Anime-girl | twb: like when I go to connect to server via ubuntu, it pops up a window and asks for the service type (ssh) and then the server | 04:37 |
Anime-girl | I can enter in the IP address and connect that way, but would like to use the host name that I think I set up when installing the server | 04:38 |
twb | Anime-girl: so you need the hostname to resolve to the IP address | 04:44 |
Anime-girl | yes! | 04:45 |
twb | You're probably running DNS | 04:51 |
twb | Go tell your DNS server about that mapping, then | 04:51 |
=== hikeonpast___ is now known as hikeonpast | ||
Anime-girl | twb: huh? | 05:02 |
twb | Anime-girl: how do you know where, say, "google.com" is? | 05:02 |
Anime-girl | I know, but I got confused for a second | 05:03 |
littlebearz | twb: look at the DNS server, i use 8.8.8.8 | 05:04 |
twb | littlebearz: I was helping Anime-girl, not the other way around | 05:34 |
uvirtbot | New bug: #797305 in dahdi-linux (universe) "package dahdi-dkms 1:2.3.0.1 dfsg-2ubuntu2 failed to install/upgrade: dahdi kernel module failed to build" [Undecided,New] https://launchpad.net/bugs/797305 | 06:07 |
uvirtbot | New bug: #797161 in amavisd-new (main) "package amavisd-new-postfix (not installed) failed to install/upgrade: underproces installerede post-installation-script returnerede afslutningsstatus 1" [Undecided,New] https://launchpad.net/bugs/797161 | 08:07 |
=== jmarsden_ is now known as jmarsden | ||
eagles0513875|2 | hey guys is anyone having issues with apache2 on 10.04 | 09:05 |
eagles0513875|2 | i have a really annoying issue that it is not able to write to log files granted permissions are the same as on another server and apache is failing to start | 09:05 |
a_ok2 | logrotate runs every day but I get rather weird rotation with each sunday | 09:37 |
a_ok2 | How can I just have a straght line 7 days of logs | 09:38 |
hggdh | Daviey: the machine vector is yours, right? | 10:37 |
hggdh | (as far as Jenkins is concerned) | 10:37 |
Daviey | hggdh: yah | 10:38 |
hggdh | Daviey: you might want to clean up some space, if you do not mind ;-) | 10:40 |
Daviey | oh, is it full? | 10:40 |
hggdh | rather so | 10:41 |
Daviey | hggdh: done now.. /var is a huge parition, am i able to make better use of that space? | 10:42 |
Daviey | hggdh: What do i need to symlink? :) | 10:43 |
jibel | Daviey, could you also upgrade ubuntu-server-iso-testing to 1.0-1~ppa16 ? | 10:44 |
hggdh | Daviey: super-James will answer :-) | 10:44 |
Daviey | on it | 10:45 |
jibel | Daviey, thanks, it will prevent to fill the disk with isos on next run. | 10:50 |
Daviey | super | 10:51 |
Daviey | Any news on Jenkins reporting btw? | 10:51 |
Daviey | ie, emails on failure? | 10:51 |
hggdh | Daviey: working on them :-) | 10:52 |
Daviey | hggdh: super! | 10:52 |
jamespage | Daviey: please can you make a couple of directories somewhere in /var that have write permissions for the usit user | 10:56 |
jamespage | We can then point the ISO and test storage to different locations for the node specification in Jenkins | 10:57 |
* jamespage thinks we can at least | 10:57 | |
* hggdh relies on jamespage | 10:58 | |
Daviey | jamespage: if it's easier, i can just symlink where the data is currently being stored? | 10:59 |
jamespage | nah - its really easy todo this in Jenkins with the testing frameowkr | 10:59 |
Daviey | jibel: (i'm o ~17) | 10:59 |
Daviey | jamespage: ok | 11:00 |
jamespage | hmm well almost - please can you symlink one called ${HOME}/isos | 11:00 |
jamespage | the other one I can configure | 11:00 |
* jamespage adds a feature request to iso-testing | 11:00 | |
=== Guest22931 is now known as Adri2000 | ||
wild_oscar | hi. has anyone here got experience with mdadm? more specifically, I was reading in the wiki "No handling of raid degradation during boot for non-root filesystems (i.e. /home) at all. (Boot simply stops at a recovery console.) " does this mean if I create a raid for /mnt/somemountPoint and a disk fails, it'll be stuck at boot? | 12:25 |
dob_ | Hi, is it correct, that php5 isn't compiled with mysqlnd by default? | 12:57 |
ikonia | dob_: it's broke down into modules, you install the modules you want | 12:59 |
dob_ | yes, but i think it's compiled without the native driver | 13:05 |
dob_ | the mysql extension seems to use the old mysql libraries... | 13:05 |
dob_ | i downloaded the sources and there wasn't a --with-mysqli=mysqlnd, instead it seems to point to the mysql libs | 13:07 |
ikonia | dob_: yes, it uses the mysql libs so that version changes match up | 13:07 |
ikonia | I thought there was a module for the internal php driver, but I could be wrong | 13:08 |
dob_ | no, there isn't a module in the default repositories | 13:10 |
dob_ | so the default "ubuntu" php driver's are not the ones with the best performance | 13:11 |
patdk-wk | performance is realative | 13:11 |
dob_ | ah yes ;-9 | 13:16 |
dob_ | ;-) | 13:16 |
plm | people, I would like to create a LATIN1 encoding one new postgresql database.. but ubuntu not how LATIN1 enconding in locale -a. How I addh latin1 locale? http://dpaste.com/554532/ | 13:18 |
plm | anyone? | 13:33 |
ikonia | plm: is there a LATIN1 package in the repos ? | 13:46 |
sommer | morning all | 14:00 |
jamespage | hey sommer | 14:06 |
sommer | today is going to be an awesome day... I can tell already :-) | 14:08 |
soren | sommer: It'll pass. | 14:11 |
Daviey | soren: bah, your negativity made sommer /quit :) | 14:19 |
Daviey | positive mental attitude all! | 14:19 |
Daviey | sommer: *awesome* | 14:20 |
sommer | :-) | 14:20 |
uvirtbot | New bug: #797705 in bind9 (main) "package bind9 1:9.7.3.dfsg-1ubuntu2.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/797705 | 14:32 |
RoAkSoAx | morning all | 14:32 |
wild_oscar | has anyone here got experience with mdadm? more specifically, I was reading in the wiki "No handling of raid degradation during boot for non-root filesystems (i.e. /home) at all. (Boot simply stops at a recovery console.) " does this mean if I create a raid for /mnt/somemountPoint and a disk fails, it'll be stuck at boot? | 14:35 |
hggdh | Daviey: life sucks, then you die (keeping on, and improving on soren's comment) :-) | 14:50 |
Daviey | :P | 14:51 |
uvirtbot | New bug: #797716 in libapache2-mod-perl2 (main) "libapache2-mod-perl2 FTBFS on Oneiric" [Undecided,New] https://launchpad.net/bugs/797716 | 14:56 |
cemc | where is the motd file updated exactly on 10.04 ? | 14:57 |
cemc | the motd says that system needs to be restarted, but I restarted it twice, it still says that | 14:58 |
cemc | and the 'welcome to ubuntu... documentation url...' text appears twice | 14:59 |
RoAkSoAx | smoser: ping | 15:02 |
smoser | RoAkSoAx, here | 15:03 |
RoAkSoAx | smoser: did you propose for merging this branch: ? https://code.launchpad.net/~smoser/ubuntu/oneiric/cheetah/merge-debian-2.4.4-2/+merge/64250 | 15:03 |
RoAkSoAx | smoser: or was it left unmerged or created automatically for some reason | 15:04 |
RoAkSoAx | smoser: since the branch seems to be only the removal of the .pc directory | 15:04 |
smoser | RoAkSoAx, i have to look. | 15:07 |
RoAkSoAx | smoser: maybe this was created when uploading the branch and dpkg-source -x extracts applying patches | 15:10 |
RoAkSoAx | smoser: and the comparison failed | 15:10 |
RoAkSoAx | so that branch was left as a conflict maybe | 15:10 |
RoAkSoAx | something similar happened to me the other day | 15:11 |
RoAkSoAx | smoser: can you fix the permissions of http://people.canonical.com/~smoser/bugs/797395/ as I can't dget please :)? | 15:16 |
WinstonSmith | cemc: what does ls /etc/mot* say? | 15:41 |
cemc | WinstonSmith: http://pastebin.ubuntu.com/627377/ | 15:43 |
WinstonSmith | cemc: rm /etc/motd.tail | 15:43 |
kevinash | Hi. I have used 'apt-get install unattended-upgrades' and configured to run everyday. Problem is, that the job runs at the time that I installed the actual package. Where/how can I configure the time that I want the unattended upgrade to run? Ubuntu Server 10.04. | 15:44 |
cemc | WinstonSmith: it worked. any explanation? | 15:46 |
WinstonSmith | its a bug thats been around for some time now. something goes wrong during update resulting in 2 motd. | 15:47 |
cemc | WinstonSmith: I see. thanks! | 15:48 |
WinstonSmith | cemc: your welcome | 15:48 |
Jcook_5xData | quick ? I create a raid 1 on install how can I check that it set up and running well | 15:59 |
cemc | Jcook_5xData: cat /proc/mdstat | 16:02 |
Jcook_5xData | thank I will check it out | 16:03 |
cemc | Jcook_5xData: you should see your mdX device there, with the two (or more) members (like sdaX, sdbX) and look for [UU] | 16:04 |
Jcook_5xData | cemc, is there a dialog like app that say something raid OK or is disgraded or some thing like that? | 16:05 |
=== jjohansen is now known as jj-afk | ||
Jcook_5xData | I just wonder because if start to fails. how will i know | 16:07 |
RoAkSoAx | smoser: ping | 16:10 |
Jcook_5xData | cemc, I dont think this look right http://pastebin.com/8pmM1CU7 | 16:13 |
cemc | Jcook_5xData: indeed, it doesn't look good. sda1 seems to be missing | 16:14 |
cemc | Jcook_5xData: check the logs /var/log/syslog | 16:14 |
smoser | RoAkSoAx, here | 16:14 |
smoser | you got what you needed right? | 16:14 |
smoser | that diff was strange in the link you sent. | 16:14 |
RoAkSoAx | smoser: yeah | 16:14 |
RoAkSoAx | smoser: now I need to correct the permission for http://people.canonical.com/~smoser/bugs/797395/ | 16:14 |
RoAkSoAx | smoser: I can't dget :( | 16:15 |
RoAkSoAx | s/need to/need you to/ | 16:15 |
Jcook_5xData | what am I looking for | 16:15 |
smoser | ah. | 16:17 |
smoser | thanks. | 16:17 |
Jcook_5xData | cemc, my guess is I set it up wrong. Is there a way I can fix it on running system or do I need to reinstall it? | 16:17 |
smoser | RoAkSoAx, try again | 16:19 |
smoser | RoAkSoAx, the rdscli would be nice too.... :) | 16:19 |
zul | NCommand1r: hey libvirt currently ftbfs on arm ill upload a fixed patch tonight | 16:19 |
=== stdin is now known as Guest80131 | ||
=== Guest80131 is now known as ts2 | ||
RoAkSoAx | smoser: yeah will take care of it too :) | 16:26 |
ttx | smoser: around ? | 16:37 |
smoser | here | 16:37 |
ttx | smoser: _0x44 is working on https://blueprints.launchpad.net/nova/+spec/configuration-drive, which is slightly parallel to what you proposed in instance-transport | 16:37 |
ttx | Could be good to ping him to make sure you get what you need out of it ? | 16:38 |
ttx | My understanding is that his method is only boot-time and static | 16:38 |
smoser | i can ... i really think that adding more boot-time and static is just delaying the need to solve it correctly. | 16:39 |
smoser | but i've done nothing on what i was proposing.... so... | 16:39 |
smoser | is 0x44 on irc? | 16:40 |
ttx | smoser: I guess his thing could be evolved in the future, but static block device is better than nothing. | 16:41 |
ttx | yes, "_0x44" | 16:41 |
SpamapS | gah! my font just went to plaid | 16:48 |
* SpamapS wonders which update caused this | 16:49 | |
ttx | smoser: I'll remove instance-transport from the diablo map, at least until someone commits to doing it. I guess we can live with configuration-drive in the mean time | 16:51 |
wild_oscar | has anyone here got experience with mdadm? more specifically, I was reading in the wiki "No handling of raid degradation during boot for non-root filesystems (i.e. /home) at all. (Boot simply stops at a recovery console.) ". does this mean if I create a raid for /mnt/somemountPoint and a disk fails, it'll be stuck at boot? | 16:52 |
smoser | ttx, yeah... talking with _0x44 now. i think thats probably the right idea. but the currently proposed implementation is not what i would favor. | 16:56 |
ttx | smoser: try to trick him into doing what you want :) | 16:56 |
ttx | let's see if you would make a good release manager. | 16:57 |
uvirtbot | New bug: #797798 in clamav (main) "package clamav-freshclam 0.95.3 dfsg-1ubuntu0.09.10.4 failed to install/upgrade: problemas de dependencias - se deja sin configurar" [Undecided,New] https://launchpad.net/bugs/797798 | 17:07 |
RoAkSoAx | smoser: ping | 17:23 |
smoser | here | 17:25 |
smoser | ro | 17:25 |
smoser | RoAkSoAx, | 17:25 |
RoAkSoAx | smoser: http://paste.ubuntu.com/627445/ -> did you do any manual modifications to that file? | 17:25 |
RoAkSoAx | that rdscli | 17:26 |
smoser | probably not. how did you get that diff ? | 17:26 |
smoser | i suspect that is bzr failure | 17:27 |
smoser | oh wait. | 17:27 |
smoser | where was that ? | 17:27 |
smoser | shoot. | 17:27 |
RoAkSoAx | smoser: maybe. those diff's are created when for example (on a quilt 3.0 package format) you make a modification to a file directly, and then you debuild -S | 17:27 |
RoAkSoAx | smoser: it separates the changes made to a file into a patch under debian/patches | 17:28 |
smoser | right. they are. | 17:28 |
smoser | hold on | 17:28 |
=== jj-afk is now known as jjohansen | ||
RoAkSoAx | smoser: so if that happens and you don't notice it, every time you unpack a *.dsc then, those patches will be there | 17:29 |
smoser | yeah, i know. | 17:30 |
smoser | let me see why it was there. | 17:30 |
smoser | RoAkSoAx, ok. i'll fix and put a new file on people.canonical | 17:38 |
RoAkSoAx | smoser: no worries | 17:38 |
smoser | there was a space inserted in the local file | 17:38 |
RoAkSoAx | smoser: i just dropped that patch | 17:38 |
smoser | so... i think we had this conversation before | 17:38 |
smoser | is there a way to tell debuild -S | 17:39 |
smoser | to *fail* if there are changes not accounted for ? | 17:39 |
RoAkSoAx | smoser: not that I know of | 17:39 |
RoAkSoAx | :S | 17:39 |
smoser | i really hate that automagic diff | 17:39 |
RoAkSoAx | smoser: hehehe yeah sometimes is a PITA | 17:39 |
smoser | it has caused 3 problems by 3 different ubuntu server developers in the past week | 17:39 |
RoAkSoAx | smoser: but yes, no worries, I'll drop that patch myself and make sure is no longer created | 17:39 |
RoAkSoAx | smoser: indeed, I think we need to raise this in a ML, as well as the creation of the .pc directories with patches applied | 17:40 |
wild_oscar | in a raid, what is meant by "disk fail"? is having bad blocks a disk fail? | 17:41 |
smoser | RoAkSoAx, ok. that is now avaailble on people.canonical | 17:43 |
smoser | in the same directory, just overwritten | 17:43 |
RoAkSoAx | smoser: cool, thanks | 17:44 |
smoser | RoAkSoAx, do you think you could push the bzr tree ? | 17:44 |
smoser | if difficult or likely to cause problems, i'd say FORGET IT | 17:44 |
smoser | but if we can save that history, then i wouldn't mind having it. | 17:44 |
smoser | given my recent experience with breaking the importer, i think maybe just best to let it do its job, and i'll re-set my ppa trees though. | 17:45 |
RoAkSoAx | smoser: yeah I think we could wait till the packages get's accepted by an archive admin | 17:46 |
RoAkSoAx | smoser: cause it has to pass through there once I upload it | 17:46 |
RoAkSoAx | since it is a new package | 17:46 |
smoser | right. | 17:47 |
adam_g | kirkland: ping | 17:53 |
kirkland | adam_g: yo! | 17:53 |
adam_g | kirkland: hey man, what cobbler package were you speakin of in reply to my msg about mysql + debconf? | 17:54 |
kirkland | adam_g: one sec... | 17:54 |
Daviey | smoser: talking of auto diff... | 17:54 |
Daviey | $ cat ~/.devscripts | 17:55 |
Daviey | DEBUILD_DPKG_BUILDPACKAGE_OPTS="--source-option=--abort-on-upstream-changes" | 17:55 |
Daviey | enjoy. | 17:55 |
kirkland | adam_g: wow, sorry, i was completely off ... it's orchestra itself | 17:56 |
kirkland | adam_g: ./debian/ubuntu-orchestra-management-server.postinst: mysql --defaults-extra-file=/etc/mysql/debian.cnf --execute="create database if not exists ${MYSQL_PUPPET_DATABASE}" | 17:56 |
kirkland | adam_g: the password is stored in /etc/mysql/debian.cnf | 17:56 |
kirkland | adam_g: that file is perm'd 600 | 17:56 |
kirkland | adam_g: as far as i'm aware, that's our distro best practice for automating mysql commands as root, where mysql passwords are needed | 17:57 |
adam_g | kirkland: ya, i had found that just now. its assumed that every new mysql-server has the debian.cnf with the valid root passwd? | 17:57 |
smoser | whoot! danke, Daviey | 17:57 |
kirkland | adam_g: correctamundo | 17:57 |
smoser | Daviey, i also like how you used '~' to hide the fact that '~' for you is /root | 17:57 |
adam_g | kirkland: okay, that help a lot for our use case. thanks! | 17:58 |
kirkland | adam_g: the goal, i think, is to a) keep it out of debconf's db, and b) keep it from appearing in ps output from passing it in clear on the command line | 17:58 |
Daviey | smoser: I had to dig through the dpkg code to find that... I was gonna write support for it myself :) | 17:58 |
kirkland | adam_g: and the above method solves both of those | 17:58 |
Daviey | smoser: lol | 17:58 |
kirkland | adam_g: you still have a cleartext password on disk | 17:58 |
kirkland | adam_g: so if somone has physical access to the box, obviously they can boot a live cd and steal that pw | 17:58 |
kirkland | adam_g: but if someone has physical access to your server, you better trust them already | 17:59 |
adam_g | kirkland: right | 17:59 |
Daviey | adam_g / kirkland: is this for installing, or ongoing? | 17:59 |
adam_g | kirk: do you know if setting the root mysql passwd to something other than whats stored in debian.cnf will break upgrades? | 17:59 |
Daviey | as in, you need the password to bootstrap, or for the lifetime? | 17:59 |
kirkland | Daviey: probably lifetime? | 18:00 |
kirkland | Daviey: certainly for upgrades | 18:00 |
patdk-wk | adam_g that isn't the root password, that is debian-sys-maint user password | 18:00 |
kirkland | adam_g: yeah, will break upgrades | 18:00 |
kirkland | adam_g: you'd need to update it in debian.cnf, if you change it | 18:00 |
adam_g | 10-4 | 18:01 |
NCommand1r | zul: persia was working on a fix for that | 18:18 |
zul | NCommand1r: cool i have a fix for it as well :) | 18:18 |
uvirtbot | New bug: #797832 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.41-3ubuntu12.10 failed to install/upgrade: subprocess new pre-installation script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/797832 | 18:32 |
ahasenack | hi guys, are you aware of an ssl problem that may be affecting lucid on the server side? | 18:55 |
ahasenack | right now, for example, this errors: gnutls-cli admin.landscape.canonical.com | 18:55 |
ahasenack | same for chromium and firefox when accessing that site | 18:55 |
ahasenack | it was working just a few moments ago, and will eventually resume working later in the day, or when apache is restarted | 18:56 |
ahasenack | we see this accross several servers every few days/weeks | 18:56 |
slyboots | well.. I doubt anyone here has any control over that | 18:56 |
ahasenack | slyboots: I'm not thinking about sysadmins, but about the ssl packages in ubuntu now | 18:56 |
zul | mdeslaur: ^^^ | 18:57 |
ahasenack | slyboots: just wondering if somebody else saw something similar | 18:57 |
mdeslaur | ahasenack: nope, I haven't seen that...but it may be related to having your intermediate certs out of order | 18:58 |
ahasenack | mdeslaur: a restart would fix that? | 18:59 |
mdeslaur | ahasenack: ah, no | 18:59 |
ahasenack | openssl's s_client is also failing, with a padding check failure | 19:00 |
mdeslaur | ahasenack: if you downgrade openssl and/or apache on the server, does it go away? can you pinpoint when it started doing that? | 19:00 |
ahasenack | mdeslaur: not precisely, just "months ago" | 19:00 |
mdeslaur | ahasenack: also, try changing <VirtualHost *> to <VirtualHost *:80> | 19:02 |
ahasenack | mdeslaur: I can't downgrade it, also because it would take days/weeks to happen again and we can't leave the server running without updates for that long | 19:02 |
mdeslaur | ahasenack: apparently some versions of apache get confused and send unencrypted stuff to 443 by mistake | 19:02 |
ahasenack | mdeslaur: all our VirtualHost directives have a port number, and some also have ip:port | 19:04 |
patdk-wk | are you missing ssl enable stuff on your :443 vhosts? | 19:04 |
ahasenack | no, and a restart wouldn't fix the problem if that were the case | 19:05 |
patdk-wk | oh, didn't know that fixed it | 19:05 |
ahasenack | actually, a graceful restart, not a full restart | 19:05 |
ahasenack | np | 19:05 |
mdeslaur | ahasenack: are there any proxies between that server and the net? is it happening on the lan right in front of the web server? | 19:06 |
ahasenack | if I try to access http on port 443, it complains about a bad request as expected | 19:06 |
ahasenack | mdeslaur: let me try localhost | 19:06 |
ahasenack | mdeslaur: happens on the same machine, using its fqdn, which points to the IP on its eth0 | 19:07 |
mdeslaur | ok, hmm | 19:07 |
ahasenack | that machine has a few vhosts for ssl, the others are working (or most of them, I didn't try one by one) | 19:08 |
ahasenack | they all point to the same ip | 19:08 |
ahasenack | so it's using that ssl/tls extension about the server name | 19:08 |
mdeslaur | ahasenack: this is bug #795355? | 19:09 |
uvirtbot | Launchpad bug 795355 in openssl "Intermittent SSL connection faults" [Undecided,New] https://launchpad.net/bugs/795355 | 19:09 |
ahasenack | mdeslaur: maybe, let me check | 19:09 |
roberthend | Hello, i'm going to setup a FTP server and a SSH server on one machine, but the machine got enough power to do more then only this. Does somebody have a good idea to do with the rest of the power that the machine offers ? | 19:10 |
ahasenack | mdeslaur: looks exactly like it | 19:10 |
ahasenack | mdeslaur: same error message from openssl, same "fix" (reload), intermittent behavior | 19:10 |
ahasenack | mdeslaur: hmm, the other common thing is that a wildcard cert is being used | 19:11 |
mdeslaur | curiously, the only bug that's been reported is also on a canonical server | 19:11 |
ahasenack | yeah, that's probably our IS guy, I see some people complained to IS and they said they would open a bug | 19:12 |
roberthend | BTW, is there a guide to set up a safe server ? | 19:13 |
ahasenack | it's a different cert, but most likely a wildcard one too | 19:13 |
mdeslaur | ahasenack: maybe try a backported openssl from natty | 19:13 |
mdeslaur | since he already tried a backported apache | 19:14 |
ahasenack | mdeslaur: I think he did that, he mentions a backport | 19:14 |
mdeslaur | ahasenack: he mentions apache, but not openssl | 19:15 |
slyboots | I think my brain is going to melt, trying to get email working haha.. | 19:16 |
ahasenack | mdeslaur: that bug link is about mod_ssl actually | 19:18 |
ahasenack | anyway | 19:18 |
mdeslaur | ahasenack: uhm, yeah...you're not using apache2's mod_ssl for your https? | 19:20 |
mdeslaur | and mod_ssl uses openssl | 19:20 |
ahasenack | it's hard to make it happen, and even harder because once it happens, and you want to try something, the restart that you need to do "cures" it | 19:20 |
ahasenack | mdeslaur: yeah, it's openssl | 19:21 |
ahasenack | mdeslaur: got your point, ok | 19:21 |
ahasenack | mdeslaur: I'll reload it now, need it working again. If somebody gets a report like this from a non canonical.com site, that would be most interesting | 19:23 |
ahasenack | mdeslaur: thanks for the discussion | 19:23 |
mdeslaur | ahasenack: I do see mention of similar failures on a few websites | 19:24 |
mdeslaur | ahasenack: this thread has someone updating openssl to 0.9.8n: http://code.google.com/p/cherokee/issues/detail?id=594 | 19:24 |
mdeslaur | ahasenack: I think an openssl backport from natty to lucid would be worthwhile as the next test | 19:24 |
ahasenack | mdeslaur: that won't need a rebuild? What version is in natty? | 19:25 |
mdeslaur | ahasenack: also, subscribe yourself to bug 795355, and let's follow the discussion there | 19:25 |
uvirtbot | Launchpad bug 795355 in openssl "Intermittent SSL connection faults" [Undecided,New] https://launchpad.net/bugs/795355 | 19:25 |
ahasenack | admin.landscape.canonical.com was just graceful'ed, ssl is working now | 19:26 |
ChmEarl | does 11.10 still have a symlink from /usr/lib64 -> /usr/lib/ ? | 19:41 |
ChmEarl | in amd64 | 19:42 |
soren | smoser: While you're in there, could you remove me from the Maintainer field of ec2-ami-tools? | 20:16 |
smoser | too late | 20:17 |
smoser | but i will do that. | 20:17 |
smoser | soren, should that be me ? | 20:18 |
smoser | or should it be ubuntu-devel | 20:18 |
smoser | it seems (https://wiki.ubuntu.com/PackagingGuide/Complete) that it should be ubuntu-devel-discuss. i only wondered because of multiverse | 20:21 |
soren | smoser: It can be you, if you want. | 20:24 |
smoser | i | 20:24 |
smoser | i'd rather it not | 20:24 |
soren | you | 20:25 |
soren | I know the feeling :) | 20:25 |
soren | No worries, ubuntu-devel-discuss is fine. | 20:25 |
smoser | so i'll just leave it as soren | 20:25 |
smoser | :) | 20:25 |
soren | bah | 20:25 |
soren | smoser: Who the update, though? Why not just remove it? Doesn't euca2ools do all we need? | 20:25 |
soren | s/Who/Why/ | 20:25 |
zul | soren: what?! you dont want the maintainer to be Soren "The Cool Dude Golfer Dude" Hansen <soren@ubuntu.com> :) | 20:27 |
smoser | soren, probably... i will conssider that in the future. | 20:31 |
soren | zul: I should really find that golfer idiot's e-mail address and put that. | 20:32 |
zul | hahaha | 20:32 |
lynxman | soren: have you tried contacting him at idiotgolfer@aol.com? | 21:00 |
Xago | Hi, How can I know IP address if I have MacAdress only? | 21:38 |
lifeless | SpamapS: is http://blog.bodhizazen.net/linux/lxc-configure-ubuntu-lucid-containers/ good advice? | 21:40 |
Daviey | Xago: if you have communicated to it recently, hopefully it's in your ARP cache. Otherwise, your router might have an idea. | 21:40 |
Xago | I was watching into my router :( | 21:40 |
Xago | niether arp | 21:41 |
Dynamit | i have wierd problem if im write http://84.55.71.22/annat/ the dir is showing but not the content in the map | 21:41 |
Dynamit | never got this problem before so i dunno how to fix it | 21:41 |
=== IdleOne is now known as OneiricOne | ||
* slyboots makes a noise thats like a honk..but isnt! | 22:01 | |
Corey | Dynamit: Check your logs. | 22:02 |
Corey | ENsure it's going where you THINK it's going. | 22:02 |
Dynamit | i will get help from a very good friend | 22:02 |
Corey | Okay then | 22:03 |
axisys | how do I get a puppet version higher than 0.25.4 on lucid? it is very old | 22:10 |
axisys | would be nice if that one upgrades automatically with apt | 22:10 |
axisys | otherwise last resort would be just download a copy from puppetlabs | 22:11 |
=== lullabud is now known as warzauwynn | ||
SpamapS | lifeless: reading | 22:28 |
SpamapS | lifeless: its important to note that, since that post, lxc has been disabled in the default updated lucid kernel | 22:29 |
SpamapS | lifeless: you have to use the lts backport kernel | 22:29 |
SpamapS | lifeless: serge from our team did a bunch of stuff to make spawning lucid on maverick and natty work pretty well tho | 22:33 |
lifeless | SpamapS: are there docs? | 22:39 |
lifeless | SpamapS: what I want is lucid userspace lxc on my natty machine | 22:39 |
lifeless | for lp dev | 22:39 |
SpamapS | lxc-create -n lucid-test-lp -t lucid -f /etc/lxc/basic.conf | 22:40 |
lifeless | so edit that file to assign ip address etc? | 22:41 |
SpamapS | lifeless: yes, man 5 lxc.conf has some helpful stuff too | 22:42 |
lifeless | kk thanks | 22:42 |
SpamapS | hrm | 22:43 |
SpamapS | I'm having trouble starting the containers.. I think there's a step I forgot | 22:43 |
SpamapS | lifeless: looks like there's a bug that may get in the way.. | 23:12 |
SpamapS | lifeless: bug #784093 .. I just posted a workaround if you happen to hit it | 23:13 |
uvirtbot | Launchpad bug 784093 in lxc "lxc broken by cgroup-bin" [Undecided,New] https://launchpad.net/bugs/784093 | 23:13 |
SpamapS | lifeless: also the default templates don't seem to create any users.. that can be.. hindering | 23:14 |
lifeless | heh | 23:14 |
lifeless | for bind mounted dirs | 23:14 |
lifeless | uids need to match, right ? | 23:14 |
SpamapS | lifeless: tho I think for you, you can make a 'lp-test' template that does all you need. | 23:14 |
SpamapS | lifeless: yes | 23:14 |
silence9 | hi there, I screwed something up using webmin to admister samba on ubuntu server. and yes yes I know, bad webmin, not supported, i've learned my lesson but i'd appreciate any help in fixing the issue I caused with it | 23:15 |
silence9 | I used the 'convert unix users to samba users' in webmin and it made my domain go crazy, i have two samba pdc's serving about 40 windows machines that now cannot locate the domain after i made that mistake | 23:19 |
lcb | hi. any known "web based operating system" to install into 11.04? | 23:21 |
SpamapS | silence9: that one is a notorious for screwing things up. :) | 23:23 |
silence9 | SpamapS: ah shucks, tell me about it, i'm in quite the bind. know anything of it? | 23:23 |
SpamapS | lcb: What is a "web based operating system" ? | 23:23 |
SpamapS | silence9: I've not run a Samba PDC since the Win2000 days. No clue. | 23:24 |
lcb | SpamapS: almost the same as cloud computing - you serve applications trough it | 23:25 |
SpamapS | lcb: you mean a server OS? | 23:25 |
silence9 | SpamapS: thanks anyway, mate. | 23:25 |
lcb | SpamapS: not really.. a server in a server, probably that way. | 23:25 |
SpamapS | silence9: were it me, i'd start restoring the configs and samba's database files (I think in /var/lib/samba) from backups. :-P | 23:25 |
SpamapS | lcb: I'm sorry but I don't think that makes sense to me. | 23:26 |
lcb | SpamapS: this probably would make sense to you. that's one among a lot of them. -> http://www.cloudo.com/ | 23:27 |
SpamapS | lcb: ahh, there are tons of web applications you can serve with Ubuntu | 23:29 |
SpamapS | lcb: but "install" isn't really something you do with a web based os.. you just access it, and use it. | 23:29 |
lcb | SpamapS: alltogetter like a... suite, to install? | 23:29 |
SpamapS | lcb: why don't you tell me what you want to *do* not what software class you want. | 23:29 |
lcb | SpamapS: i need something that provides a word processor, some sort of image editing, image manipulation, calculator, calendar, appointments, contacts ... | 23:30 |
lcb | SpamapS: ... so users could use from one point, share, integrate some data into MySQL etc | 23:31 |
lcb | SpamapS: i were thinking in integrating whatever is available with joomala or drupal | 23:32 |
SpamapS | lcb: you can just use local apps and file sharing for most of that | 23:33 |
lcb | SpamapS: never did that :) (with those apps i said) can you give me a jump start? | 23:34 |
SpamapS | lcb: libreoffice works quite well | 23:37 |
lcb | SpamapS: i'm a fast learner. just give me a hint on how to start, for instance with a word editor. | 23:37 |
lcb | SpamapS: can we integrate it into a browser so users don't need it on their own machine? I believe so. How can i start with that? | 23:38 |
lcb | SpamapS: ubuntu 11.04, non graphical - unless needed | 23:38 |
SpamapS | lcb: what you're talking about is thin client, or "desktop in the cloud" | 23:43 |
lcb | SpamapS: the idea of the usage is exactly like the "cloudo". users from anywhere with anything could access it and manipulate data. | 23:44 |
SpamapS | lcb: http://cloud.ubuntu.com/2010/11/show-off-ubuntu-desktop-on-cloud/ | 23:45 |
lcb | SpamapS: ok, i'll learn clouding. i thought i needed that. the only thing is, looking at those "web OSes" i thought we would have some "suite" into one single package to install on the server. | 23:46 |
lcb | thanks SpamapS :) | 23:46 |
lcb | SpamapS: starting... http://www.ubuntu.com/business/cloud/overview | 23:48 |
Alan | Not sure if this is a server or client problem... but for some reason, i've just started getting "mount error(112): Host is down" trying to mount my samba share from a 10.04 ubuntu server to a 11.04 ubuntu desktop | 23:52 |
Alan | has anybody else encountered similar unexpected breakage? | 23:53 |
Alan | maybe after recent desktop updates or something? | 23:53 |
lcb | SpamapS: "lcb: http://*" thanks | 23:55 |
Alan | crap, i think i found my problem... | 23:57 |
Alan | I actually managed to break something with IPv6 | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!