/srv/irclogs.ubuntu.com/2011/09/08/#ubuntu-server.txt

twbWhere's UDS this year?  Some canonical dude just emailed me offering to pay for my travel and board.01:21
twbOh, it says in the subject: "Orlando"01:21
Picitwb: florida again irc.01:21
Picier, iirc.01:21
PiciYes, there.01:21
twbNo way I'm going near .us01:21
IdleOnetwb: why not? free trip and all...01:56
twbWell, it boils down to 1) I don't like Ubuntu; 2) I *really* don't like USA; and 3) I don't deal well with meatspace.01:59
jdstrandtwb: you're funny :P02:04
twbjdstrand: do I need to wave https://secure.wikimedia.org/wikipedia/en/wiki/Unix_hater%27s_handbook under your nose?02:05
jdstrandtwb: apparently so. I've actually not read that02:06
* jdstrand adds to his todo02:06
jdstrandI do recall coming across it in various places, but never actually read it02:07
IdleOnetwb: honest answer. I can appreciate that.02:07
twbIt says something like "we hate unix not out of ignorance, but out of experience.  Only people who deal with its idiocies every day can truly appreciate how horrible it is"02:07
jdstrandheheh02:07
jdstrandI definitely need to read it :)02:08
twb"see Peter Norvig’s detailed argument that Python is Scheme with funky syntax."02:15
twbNo, esr, it isn't.  Case in point: call/cc and TCO.02:15
twb(http://esr.ibiblio.org/?p=538, linked from the above wiki page)02:15
uvirtbotNew bug: #844478 in openldap (main) "apt upgrade exits on error with slapd_2.4.21-0ubuntu5.5_amd64.deb" [Undecided,New] https://launchpad.net/bugs/84447803:45
stichtquit05:16
jamespagemorning07:48
kev009any opinions on zenoss vs opsview for monitoring?08:08
twbcollectd08:15
DavieyI like twb, he is suitably angry.08:40
twbDaviey: (on reflection, I suppose kees' security work is mostly good.)08:40
koolhead11hi all08:41
twbMost other stuff just annoys me though08:41
twbEarly adoption of slapd cn=config databases, for example08:41
twbAnd because I only see LTS releases, usually by the time something affects me, that's already been the way Ubuntu has done it for two years08:42
twbAnyway, really going home now.08:42
Davieytwb: This UDS is planning for the next LTS. :)08:42
twbDaviey: yeah, but e.g. unity is already in08:42
Davieytwb: Yeah, we did gamble with slapd.. Some like it, others hate it.08:42
Davieytwb: Yeah, we are having unity on Server this time.08:43
Davieyit looks pretty good in ascii.08:43
twbI have end users08:43
twbThey have netbooting diskless workstations.  They are prisoners.  In a prison.08:43
twbI'm not looking forward to retraining them to switch to unity.08:43
Davieyheh08:43
Davieytwb: I'm really not convinced it will be /that/ much pain.08:44
twbYeah, that might be a bad example08:44
twbOr say having to make sure 3D is working because I can't just replace unity with metacity like I could with compiz08:44
Davieyevolution -> thunderbird probably more painful.08:44
DavieyBut they don't /need/ to switch.08:44
twbDaviey: btdt08:45
Davieytwb: Ah, already use tbird?08:45
twbAnd we are running ephy because sqlite3 was having problems with either NFS or prisoners just pulling the plug out rather than doing a "clean" shutdown08:45
twb*sqlite3 under ff08:45
Davieytwb: Well do sleep on your invite.. you are most welcome.08:46
twbAnd then ephy/webkit has a problem with authenticated proxies, where it displays the proxy error and then the real page beneath it...08:46
twbNot that I blame ubuntu for that08:46
rbasakdoesn't sqlite3 say in large letters not to use it with NFS08:47
twbrbasak: yep08:47
* rbasak never liked NFS08:47
twbrbasak: and ff hard-depends on using sqlite3 out the wazoo08:47
twbthe alternative was CIFS and I didn't want to deal with machine accounts08:47
twbI did try kerberized nfsv4 but I ran out of time and money before it actually worked08:47
rbasakI would either forward the screen or have a local disk08:48
rbasaks/disk/ramdisk/ if you like08:48
Davieyshame08:48
twbI'd quite like to get kerberized SMB2 running in a homogeneous debian/ubuntu environment, but samba4 isn't ready and it's all too hard08:48
twbrbasak: forwarding the screens isn't as scalable08:48
Davieytwb: If/when you do do that, i'd love to read a write up of it. :)08:49
Davieytwb: Have you tried LTSP?08:49
rbasaktwb: but basic stuff will work without immense pain08:49
twbUnfortunately LTSP was still at 4.0 when I built the existing infrastructure, and we are still using it out of inertia08:49
twbI have rolled out a couple of small LTSP5 and debian-live sites08:50
koolhead11TeTeT: hello there08:50
TeTeThi koolhead1108:50
twbrbasak: oh and I do run ff over the network here, because I won't allow anything that bloated on my own desktop, and that one line is struggle-central, because ff is so bad08:50
rbasakin general, doing anything unusual results in pain, so unless it's central to what I'm doing, I don't do it08:51
Davieytwb: You should do this, http://lwn.net/Articles/262570/08:51
twbI do it deliberately so I can file snarky bug reports08:51
twbDaviey: I know RMS' browsing habits08:52
twbMy main browse is emacs, tho08:52
DavieyIt is very efficient use of your time :)08:52
rbasakDaviey: speaking of pain, qemu and fifos!08:52
rbasakAFAICT, if there is a buffer it's not bigger than 8M08:53
rbasakAnd not listening on the fifo will cause qemu to throw stuff away08:53
twbIsn't buffering the kernel's problem?08:53
twblike ulimit08:53
rbasak(either that or it's hanging the system)08:53
rbasakI think it's the former though08:54
twb-q     The maximum number of bytes in POSIX message queues ?08:54
twbI guess that's IPC not fifo08:54
twbso ignore me08:54
Davieytwb: other ideas for bug 832507, welcome08:54
uvirtbotDaviey: Error: Could not parse data returned by Launchpad: HTTP Error 500: Internal Server Error08:54
Daviey*sigh*08:54
twbhaha08:54
rbasakAlso it won't start the system unless there is a listener, but that's not too bad08:54
rbasakI've found the code, it just tries a write(2) and if that fails it throws it away AFAICT08:55
twbI get that too http://paste.debian.net/128809/08:55
Davieybug 83250708:55
uvirtbotLaunchpad bug 832507 in nova "console.log grows indefinitely" [High,In progress] https://launchpad.net/bugs/83250708:55
twbrbasak: can't you just use udp ports or something?08:55
twbDaviey: I call savelog in the init script's start job08:56
twbAt least, in the related lxc case08:56
twbhttp://paste.debian.net/128810/08:56
Davieytwb: The problem is that a guest can fill up the hosts hard disk, with cat /dev/urandom > /dev/ttyS0 , from within the instance.08:56
rbasaktwb: udp ports how?08:56
twbDaviey: ah, DOS nice08:56
twbrbasak: I dunno08:56
sorenSorry, what's the problem now?08:56
sorenI thought we had a way forward?08:56
Davieysoren: seems not.08:56
sorenHow come?08:57
rbasakwell hang on, I didn't say that :)08:57
twbObviously the solution is to mount a tmpfs on /var/log/libvirt-bin :P08:57
twb-osize=8M08:57
rbasakI was just brushing up on what the actual behaviour wasw08:57
rbasakI'm not fully clear on soren's plan but now I might be capable of understanding it :)08:57
Davieysoren: Ah, might have jumped too fast.08:57
twbOh, I see, it's the same problem08:58
twbrbasak: I thought you were using -net blah to set up some kind of handy-dandy fifo-backed thing08:58
sorenI thought we would just tell kvm to output to a fifo and read from that. Leave it to nova to implement a ringbuffer-style behaviour.08:58
rbasaksoren, where and how is the fifo going to be listened to? Only on a get_console_output call, or periodically too, and is the fifo going to get persistently held open or opened and closed?08:58
twbsoren: pump it into logger(1)08:58
sorenIf Nova dies and the guest fills up the buffer and kvm can't deal with that in a nice way, screw it. They did this to themselves.08:59
twbThen it becomes rsyslog's problem08:59
sorenrbasak: Hold it open, read from it periodically *and* on get_console_output.08:59
sorenrbasak: That'll make sure we keep flushing it even if noone calls get_console_output, but someone calling get_console_output will also get completely up-to-date responses.09:00
rbasakOK and where do we write the data that we read, and how are we managing the space usage of that?09:00
sorenFlush it out the filesystem.09:00
sorenImposing a limit on its size.09:00
rbasakto a console.log file that can grow indefinitely? :-P09:00
rbasakah ok09:01
rbasakWhat do we do if it hits the limit?09:01
twbAll logs can grow indefinitely09:01
twbThat's what logrotate is for09:01
sorenPretend it's a ringbuffer.09:01
twbThe issue just becomes can you -HUP the writer to make it acquire a new fd09:01
rbasakSo just seek to the beginning again?09:01
rbasakand are you expecting get_console_output to grok the ringbuffer and start reading at the right point?09:01
sorenI'm expecting everything to do The Right Thing[tm] :)09:02
twbIt's not different from e.g. DOSsing the logfile by making sshd emit a "rejected connection for user root from host 1.2.3.4" messages09:02
sorentwb: We don't want to let these logs grow indefinitely.. and logrotate doesn't do that either. By default, at least. It expires old logs and throws them away.09:03
Davieywell logrotate cannot act fast enough.09:03
sorenrbasak: It's probably worth investigating how big of a message you can get through the message queue (which is how the console output will make its way from the compute node to the API node).09:04
Davieyrotatelog can, as it's piped through..09:04
twbDaviey: why?  How is it different from filling the logs via some other program?09:04
Davieybut i'd rather rip my head off than use rotatelogs09:04
Davieytwb: Isn't that the same reason people often put /var/ on a seperate partition?09:04
twbIndeed09:05
DavieyThe difference here, the server admin currently has no way of controlling the speed of the log writes.09:05
twbHe doesn't have that with e.g. sshd either09:05
twbUnless there's something in rsyslog I'm unaware of09:05
twbHell, apache would probably be an even better exaample, because it logs user-supplied string by default09:06
rbasakOK so I need to patch nova to: 1) create a fifo and open it persistently before it calls libvirt to start the process (I assume right now it relies on qemu to create console.log; we'd be creating that as a fifo in advance). 2) Periodically suck data out of the fifo and give it to the handler. 3) Also do step 2 before processing get_console_output. 4) Write a handler that will write round robin to a real console.log, which will wrap if seek position09:06
rbasakgoes above a limit, and keep track of where it is in memory (so a ringbuffer implementation managed in memory with a disk data store)09:06
twbSo make requests as fast as you can with a 1024kB-long user-agent09:06
rbasak5) get_console_output now needs to read through the ringbuffer implementation09:06
twbWhat I'm geetting at here is: you're not special, everybody has this problem09:06
twbRolling an app-specific fix is silly09:07
rbasaktwb: it'd break the API09:07
rbasaktwb: get_console_log really needs to output the last x bytes written to the console09:07
twbrbasak: throw away the API then ;-)09:07
rbasaktwb: what happens if the call comes just after the log was rotated?09:07
sorentwb: We're perfectly happy to discard old data.09:07
twbOh, hang on, I think I misunderstood09:07
DavieyWe only /need/ 16K IMO.09:08
twbYou're saying that ttyS0 in the guest is directly connected to a file on the server?09:08
rbasaktwb: currently, yes09:08
twbAnd you can't connect it to a pty instead?09:08
sorenDaviey: Whuh? That won't even fit all of the bootup-messages.09:08
rbasaktwb: it can be done but painfully09:08
sorentwb: How would that help?09:08
twbI guess becaus then you don't get any history until you connected09:08
twbs/until/before/09:09
twbTHat's what I'm doing for my libvirt KVM  VMs, so I don't have to use VNC09:09
sorenThis console output stuff is read-only.09:09
twbOK, let me get even weirder09:09
sorenUsing a pty sounds like adding another layer of problems.09:09
twbTurn that off, and instead use netconsole.ko in the guest09:09
sorenCan't.09:10
sorenIt's not ours to control.09:10
twbSo the VM could be windows or something?09:10
sorenThis is the cloud. WE provide infrastrucute, random nutjobs run their guests.09:10
twbOK09:10
sorenRight now, the contract is: Shove the stuff into the virtual serial port, and it'll magically turn up in GetConsoleOuput's response.09:11
Davieysoren: sorry, 64K09:11
soren..and we can't really change that contract.09:11
sorenWell, we can, but we need much better arguments than have been made here.09:11
sorenSince that's what all the existing EC2 images do and losing compatibility with them over something like this sounds like a really bad idea.09:11
rbasaksoren: what do you think of my plan (which is just my understanding of your plan with the details filled out)? Will it work? Would you accept it?09:12
Davieysoren: Hah, smoser has been pushing for ages that openstack should just provide the hardware.. not this poking, reaching in lark that has been punted.09:12
sorenrbasak: It sounds good, yes.09:12
sorenDaviey: And I completely agree with that.09:13
rbasakthe only catch I can see is that the ringbuffer management is in memory so if nova dies then the stored console log is no longer readable (it'll wrap at an unknown location)09:13
sorenYeah, just put it in the file.09:13
sorenLike you suggested a couple of days ago.09:13
rbasakand of course if nova does then we'll lose the fifo fd and that'll mess things up09:13
rbasakOh, OK :)09:14
rbasakSo that'll make the ringbuffer robust09:14
rbasakbut what about re-opening the fifo if nova is restarted?09:14
sorenJust make the first line something like: <max_length> <current tail position>09:14
sorenrbasak: What about it?09:15
Davieysoren: Do you have time to discuss this, shouldn't you be arguing about what code hosting to use? :)09:15
rbasaksoren: I presume I'll need to implement that, but I don't know where or how09:15
twbOK, REALLY leaving now09:15
sorenDaviey: Everyone else is asleep. I can do whatever I want. When they turn up, I'll get back to bitching about tooling.09:15
Davieytwb: have fun o/09:15
rbasaksoren: the first line would have to be a fixed length09:15
Davieysoren: cool :)09:15
sorenrbasak: Just open it again when nova starts. It has code already to pick up where it left off.09:16
sorenrbasak: That would certainly make it easier.09:16
rbasakOK so that's a step 6 in my plan09:16
sorenrbasak: "<0-padded 64 bit hex max_length> <0-padded 64 bit hex current_tail>\n"09:17
rbasakI suppose I could pad <current tail position> with zeroes to the same length as max_length09:17
rbasakwhy hex?09:17
sorenBecause 64 bit is a predictable lenght in hex.09:18
sorenNot so much in decimal.09:18
rbasakoh, one other thing about the disk ringbuffer format09:18
sorenYou can go with octal if you want.09:18
sorenOr binary. Just not decimal :)09:18
rbasakIf I use ascii then it'll corrupt if killed09:18
sorenWhy?09:18
rbasakI can't update it atomically09:19
sorenWhat *can* you update atomically?09:19
rbasakIf I use a binary int then it will09:19
soreneh?09:19
rbasakMaybe it's overkill09:20
sorenWhy is it less atomic if you encode it in ASCII?09:20
Davieycan be improved over time, having /something/ would be nice for first fix :)09:20
rbasakascii will cover many more bytes09:20
sorenStill *well* within a filesystem block.09:21
rbasaktoo many layers before it gets to a filesystem block. is everything aligned before then?09:21
rbasakanyway, as Daviey says09:21
rbasakI'll find or implement a ringbuffer class09:21
rbasakWe could fix that later :)09:22
sorenYou're arguing that writing 8 bytes rather than 16 bytes makes it more atomic?09:22
lifelessyay memory tears.09:22
lifeless:P09:22
rbasakI'm arguing that atomic_t is atomic and nothing else is09:22
rbasak(guaranteed)09:22
sorenNot sure what relevance atomic_t's have here?09:23
sorenWhat am I missing?09:23
sorenatomic_t sounds like wicked name for a rapper, though.09:23
rbasakhttps://bugs.launchpad.net/nova/+bug/832507/comments/409:33
uvirtbotLaunchpad bug 832507 in nova "console.log grows indefinitely" [High,In progress]09:33
rbasakIs this OK with everyone?09:33
sorenYes.09:34
Davieylooks good09:34
rbasakcool09:34
rbasakImplementation details that are a bit unclear to me: doing periodic jobs, and the restart logic09:35
rbasakI might need some pointers on the way if that's OK soren?09:35
koolhead11does it makes sense to do system lockdown with gconf anymore?09:35
sorenSure.09:35
Davieyrbasak: restart logic might be for free.09:35
Davieykoolhead11: gconf? wat?09:36
rbasakDaviey: I think I see what you mean09:36
* rbasak isn't familiar with the Nova source yet09:36
Davieyrbasak: You ca use my bzr branch for inspiration where the entry point is to mk the fifo09:36
rbasakI didn't test what happens if the fifo reader blocks so the fifo buffer fills (but still has it open). qemu will either block or it won't. I don't think it matters as we'll suck at a reasonable periodic rate and if the guest wants to dump tons to the console it's reasonable for it to be slowed down09:37
rbasakthanks Daviey09:37
koolhead11Daviey: for ubuntu desktop in  lockdown enviornment09:38
Davieysoren: What would be a good example of a scheduled task to use?09:38
Davieyrbasak: you should be able to first just read directly from the fifo with minor changes to my branch..09:38
Davieydifference between a mknod and mkfifo is small :)09:39
sorenDaviey: nova.compute.manager has a period_tasks that does various things.09:40
sorenerr...09:40
sorenperiodic_tasks09:40
sorenDaviey: We should extend it to call driver specific periodic_tasks.09:40
Davieyrbasak: Get that working first, then think about changing the behaviour to schedule a task to read and put to txt file.. Then make get-console read from the txt file, rather than the fifo (the branch i have edits the read log part.)09:40
rbasakDaviey: I see it, thanks09:40
rbasakDaviey: why do we need root to create the fifo?09:40
sorenrbasak: Only root can mknod.09:41
sorenrbasak: So Daviey needed it.09:41
sorenWe might not need it.09:41
Davieyyeah, drop that09:41
soren(since we're only mkfifo'ing, but I'm not completely sure we're in the clear anyway)09:41
sorenIt depends who the guest is going to run as.09:41
Davieyyou can still chown a fifo :/09:42
jamespagenegronjl: hey - please give me a ping re tomcat formulas when you start your day09:42
rbasakDaviey: I'm only seeing the fifo being opened, don't see anything about reading it09:43
rbasakDaviey: have you pushed?09:43
sorenDaviey: Sure, sure. I'm just pondering who needs to own it.09:43
rbasakhttp://bazaar.launchpad.net/~davewalker/nova/832507_with_emlog/revision/1509 is the only revision I can see09:43
Davieyrbasak: def _dump_file(self, fpath):09:43
sorenDaviey: Have you used the dashboard package, by the way?09:43
rbasakDaviey: oh, right09:43
Davieysoren: no, but i believe it is known to be broken09:44
Davieyrbasak: I had to make changes to that to make it not block, i don't know if a fifo will need that like my nod did.09:44
sorenDaviey: Ah.09:45
rbasakDaviey: yeah I think it will, otherwise it'll just hang there waiting for all console output ever09:45
Davieysoren: Have you tried it the dash?09:45
sorenA long, long time ago.09:45
rbasakDaviey: non-blocking using Python file objects is a bit dodgy actually, it might not work and I might need to use os.read instead09:45
Davieysoren: from the package?09:46
sorenDaviey: Nope.09:46
Davieysoren: I don't believe we can currently get ec2 creds from it, which is a pain.09:46
sorenDaviey: WEll,...09:46
sorenDaviey: Yes, I've *tried* trying it.09:46
Davieyrbasak: So it isn't using normal os, it's overidden by greenlet09:46
Davieyerr, eventlet09:47
rbasakDaviey: I'm not familiar with that, what are the implications?09:50
sorenOh, dear.09:51
sorenrbasak: Pretend like you don't know the first thing about blocking and non-blocking I/O.09:52
sorenrbasak: Because eventlet will screw with all of that.09:52
rbasakSo how should I suck all available data out of the fifo but not block?09:52
sorenDo it like someone who hasn't a clue there's such a thing a blocking or non-blocking I/O.09:52
rbasakwill what Daviey has already work?09:52
sorenJust read.09:53
sorenHaven't looked at it.09:53
koolhead11soren: is there something like nova --version ?09:53
sorenkoolhead11: There ought to be, but there probably isn't. We log the version in the logfiles, but I don't think we expose it that way.09:53
rbasaksoren: I don't see how I can code in ignorance like that. Will my call block or won't it?09:54
koolhead11soren  dpkg -l says 2011.3. something09:54
Davieyrbasak: So what i have in that for reading, doesn't block09:54
Davieyif it blocks without it, add it in :)09:54
sorenrbasak: Yes.09:54
Davieyrbasak: just opening it with NONBLOCK did infact block, thanks to eventlet09:55
koolhead11jamespage: hellos09:55
sorenrbasak: I'm not trying to be more of an arse to you than eventlet is to everyone else. You just read and cross your fingers hoping that eventlet does something vaguely reasonable on the backend.09:55
Davieyrbasak: soren is right.. I couldn't work out why the hell it was blocking when it was os.open'd NONBLOCK.. it was only when i started inspecting the object that i realised it wasn't normal os09:56
* jamespage waves at koolhead1109:56
Davieyfrustrating()09:57
rbasakPresumably someone chose to use eventlet here, and presumably whoever that is knows it well. Can we ask him how we should read from a FIFO?09:57
* koolhead11 bows to TeTeT: 09:57
koolhead11jamespage: wassup?09:57
sorenwhile fifo.read():09:57
soren    do_stuff_with_it()09:57
rbasakand that won't block when the fifo is starved?09:58
sorenDepends on what "that" is.09:58
sorenNova, no. Your loop, yes. PRobably.09:58
Davieyrbasak: probably worth just trying it to see what happens?09:58
Davieysuck it and see. :)09:58
sorenrbasak: You'd think that whoever chose it knew it really well. You'd be wrong.09:59
sorenrbasak: It was chosen because it made the code easier to read for people who didn't understand async code and non-blocking i/o and whatnot.09:59
rbasakDaviey: I hate coding like that, can you tell? Otherwise it may break for an unknown unfathomable reason later, especially with stuff like this where we're heavily dependant on what's going on with the underlying fifo09:59
sorenWhy they're more important than my sanity, I don't know.09:59
sorenThis was a chance to argue endlessly about something, so of course we did.10:00
Davieyrbasak: Hey, if the unit tests pass, ship it.. that is the upstream workflow :P10:01
* rbasak wonders how many race conditions there are in nova at the moment10:01
sorenDaviey: Luckily, our test suite is awesome....10:02
sorenDaviey: ....ly slow.10:02
sorenBut I digress.10:02
Davieysoren: well if rbasak makes a change that breaks a unit test, we just SKIP the unit test, right?10:03
sorenDaviey: Too obvious. Just remove it.10:03
rbasakI can always "adjust" the test10:03
Davieyheh10:03
Davieyrbasak: Sorry, i was commenting on the fact that nova has history of disabling tests which are annoying and fail.10:04
DavieyThis was yet another area that upstream were able to argue the moral toss about.10:04
sorenAnd I have a history of crying myself to sleep.10:04
sorenThese facts are related.10:04
=== mendel__ is now known as mendel_
uvirtbotNew bug: #836664 in python-anyjson (main) "[MIR] python-anyjson" [Undecided,Fix released] https://launchpad.net/bugs/83666410:12
koolhead11soren: http://paste.ubuntu.com/685140/  nova version :-> http://paste.ubuntu.com/685142/10:27
sorenkoolhead11: Zones are mysterious to me. I suggest you ask someone like sandywalsh.10:29
koolhead11Daviey: i have my fingures crossed, we will be testing new oneiric images  via cobbler :)10:31
Davieykoolhead11: cool10:33
rbasakhttps://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/83122810:36
uvirtbotLaunchpad bug 831228 in asterisk "asterisk version 1:1.8.3.3-1ubuntu1 failed to build in oneiric" [High,Confirmed]10:36
rbasakThis is a problem with the libc-client.so build10:36
rbasakEven if I rebuild the debian binary, it's not import needed symbols10:37
rbasak(but the debian binary has it right)10:37
Davieyrbasak: Have you come across ld --as-needed?10:37
rbasakno10:37
Davieyrbasak: http://wiki.debian.org/ToolChain/DSOLinking10:38
Davieyrbasak: which implies that uw-imap needs an extra LDFLAG?10:39
rbasakyeah, maybe10:39
rbasakis there a reason for debian and ubuntu to behave dfferently?10:40
rbasakI haven't tested to see if debian rebuilds it right or not10:40
Davieyrbasak: Debian will move to ld --as-needed one day it's suspected.10:40
DavieySome people feel it's easier for us to make the transsiiton first, then Debian.10:41
sorenMan, if we had to wait for Debian before we tried interesting toolchain changes...10:42
rbasakSo what's the current status?10:42
rbasakIt doesn't seem to just be new libraries10:45
rbasakIt's _all_ libraries10:45
Davieyrbasak: yup!  Which is the main reason we have so many FTBFS's10:48
Davieyfwiw, this was tried last cycle - and was reverted before release.10:48
DavieyIt could happen again, but i'm doubtful.10:48
rbasakyeah -Wl,--no-as-needed fixes it10:56
rbasakso now I just have to find a proper solution10:56
Davieyrbasak: well that will be ok for a last resort, just need to find out what the missing lib is.10:59
rbasakDaviey: well, all of them are missing11:00
rbasakthat's the odd thing11:00
rbasakeven though they are specified on that same line11:00
Davieyrbasak: it culd be an ordering issue then11:03
Davieycould*11:03
rbasakthe current line is: gcc --shared -Wl,--no-as-needed,-soname,libc-client.so.$(VERSION) $(PAMLDFLAGS) -lc $(EXTRALDFLAGS) $(SSLLDFLAGS) -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -o11:03
rbasak(I added --no-as-needed)11:03
rbasakwithout --no-as-needed, that results in ldd reporting only libc and ld.so, linux-gate etc11:04
Daviey-o needs to be before LDFLAGS11:04
Daviey12:04 -!- doko_ [~doko@dslb-088-073-086-171.pools.arcor-ip.net] has quit [DISGUSTED]11:04
rbasakthat makes a difference?11:04
Davieyyah!11:04
rbasakOK then the build system has  problem11:05
Davieyrbasak: For example, http://launchpadlibrarian.net/79186443/monkey_0.9.3-1_0.9.3-1ubuntu1.diff.gz11:05
rbasakIt's really a variable that's being set, it assumes that -o is at the end11:05
DavieyYeah, that is the bug11:05
rbasakhttp://paste.ubuntu.com/685163/ look at line 18011:07
rbasakTo fix this, the build system is going to need a radical change11:07
rbasakecho "$(ARRC) $(ARCHIVE) $(BINARIES);$(RANLIB) $(ARCHIVE)" > ARCHIVE11:07
rbasaklooks like that's how it works11:08
=== rickspencer3__ is now known as rickspencer3
rbasakI suppose I could add an ARRC_AFTER_ARCHIVE or something11:09
Daviey:/11:10
rbasakIt does look like a rather insane build system11:11
=== koolhead11 is now known as koolhead17
Davieyrbasak: :(11:12
koolhead17TeTeT: need your help. ping me back when your around.11:25
rbasakit does feel a bit odd that to fix an asterisk ftbfs I'm hacking an imap library makefile11:34
rbasakwtf does asterisk do with imap anyway?11:34
* rbasak resists running configure with --without-imap11:35
Davieyrbasak: stores voicemail in imap as an option11:36
Davieypretty nifty feature to sync it to a mail account TBH.. when you mark the email as read, asterisk knows the voicemail has been listened to :)11:36
rbasakAh I see11:36
rbasakI was going to suggest that if only there were some kind of common protocol to trasmit IMAP messages over the the Internet :-P11:37
Davieyheh11:37
rbasak(but I suppose for the mark as seen case I'll accept it :-)11:37
TeTeTkoolhead17: sure, what's the problem?11:43
rbasakDaviey: In http://launchpadlibrarian.net/79186443/monkey_0.9.3-1_0.9.3-1ubuntu1.diff.gz you've moved two things - $OBJ to the front and $LDFLAGS to the back. Do I need both?11:45
rbasakOr does the location of $OBJ not matter?11:45
uvirtbotNew bug: #844712 in mysql-5.1 (main) "package mysql-server-5.1 5.1.54-1ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/84471211:46
DavieyOBJ is a weird thing that only that has, unless i am mistaken11:48
rbasakI assume it's the list of source object files11:49
rbasakNeeds to go somewhere11:49
rbasakOh, or is that $mod_obj in your case?11:50
* Daviey can think of somewhere to put it.11:51
Davieyah yes11:51
rbasaklol11:51
rbasakOK, that worked11:51
Davieyrocking!11:53
Davieyrbasak: BTW, did you add your DEBEMAIL to your launchpad account?11:53
koolhead17TeTeT: curently am using lucid LTS for deployments and we had to lockdown the desktop apps so we used gconf there, now when i will upgarde to new LTS it will have Unity in it. It means all configurations woll break?11:56
TeTeTkoolhead17: I suspect so11:57
TeTeTkoolhead17: you might need to have a custom package that installs lock downs for unity / gnome 3 based on the old gconf settings11:57
koolhead17TeTeT: so how will i achive that :(11:58
koolhead17also from now on for coming deployments i have to read/tweak Unity for the same lockdown approach11:59
TeTeTkoolhead17: I guess finding the counter for the old lockdown settings in the new distro will do the job. Though I suspect there will not always be 1:1 replacement12:00
koolhead17TeTeT: and also suggest me some alternative i should work on for the same12:00
TeTeTkoolhead17: I'd recommend to grab an oneiric desktop in a vm and see if you can lock it down in a similar way as 10.04 LTS. If some pieces are missing, file bugs or talk to the devels directly and see if it can be integrated12:01
koolhead17TeTeT: hmm. Some tough work lined up it seems for me. :D12:02
TeTeTkoolhead17: not only for you, there are lots of deployments that face massive changes with the move to gnome 3 and unity12:03
koolhead17TeTeT: so we are on same side!! :D12:04
uvirtbotNew bug: #831228 in asterisk (universe) "asterisk version 1:1.8.3.3-1ubuntu1 failed to build in oneiric" [High,Confirmed] https://launchpad.net/bugs/83122812:07
uvirtbotNew bug: #844114 in pep8 (main) "Please merge pep8 0.6.1-2 from debian unstable (main)" [Undecided,Fix released] https://launchpad.net/bugs/84411412:07
rbasakDaviey: just done it now. It needed me to merge my @ubuntu.com address into my main launchpad account, now done12:17
Davieyrbasak: cool, otherwise launchpad doesn't know it was your upload12:18
Sander^workHi. I get: make: cc: Command not found12:26
Sander^workTried to install gcc, but it says: Package gcc is not available, but is referred to by another package.12:26
rbasakTry installing build-essential12:27
Sander^workCan't find it12:28
pmatulis!info build-essential12:28
ubottubuild-essential (source: build-essential): Informational list of build-essential packages. In component main, is optional. Version 11.5ubuntu1 (natty), package size 5 kB, installed size 48 kB12:28
PiciSander^work: What release of Ubuntu are you using?12:29
Sander^work10.0412:29
Sander^worknewly installed12:29
PiciSander^work: Please run apt-get update and then see if you can install build-essential again.12:29
Sander^workPici, thanks :-)12:30
rbasakDaviey: please pull and upload lp:~racb/+junk/uw-imap. LP #831228. Hope the fix isn't too hacky, it's the cleanest i could come up with without being too intrusive.12:36
uvirtbotLaunchpad bug 831228 in asterisk "asterisk version 1:1.8.3.3-1ubuntu1 failed to build in oneiric" [High,Confirmed] https://launchpad.net/bugs/83122812:36
rbasakDaviey: After that do we need to do a no-change update for asterisk or will it rebuild by itself?12:37
Davieyrbasak: can you propose it for merging?12:38
Davieyyou could even try bzr lp-propose-merge ? :)12:38
uvirtbotNew bug: #843701 in tomcat7 (main) "CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure" [Undecided,New] https://launchpad.net/bugs/84370112:38
Davieyrbasak: Does asterisk actually need rebuilding?  There is a binary in the archive, it just wouldn't rebuild..12:39
DavieyIt needs rebuilding if the binary is currently broken tho12:39
rbasakDaviey: I'd love to...how?12:39
rbasakoh12:39
koolhead17TeTeT: http://developer.gnome.org/gio/stable/ch28.html But i doubt it will work for next  LTS :P12:39
rbasakbzr: ERROR: File exists: '/srv/bazaar.launchpad.net/mirrors/00/07/cf/61'12:40
rbasakAh OK, then it doesn't need rebuilding12:40
rbasakIt would be nice to know if it rebuilds to close the bug though12:40
rbasakIs there a way to propose a merge through the web app?12:41
Davieyrbasak: yes12:42
Davieybzr lp-open ; click "propose merge"12:42
Davieyah dammit12:42
Davieyit's in +junk12:42
rbasakwhere should I have pushed it o?12:42
rbasakto?12:42
Davieyneeds to be in lp:~racb/ubuntu/uw-imap/BRANCH-NAME12:43
Daviey(maybe BRACH-NAME = bug number)12:43
sorenWill that work?12:44
sorenI thought it needed to be ~XXX/ubuntu/uw-imapd/oneiric/BRANCH-NAME12:44
sorenWith ~XXX/ubuntu/uw-imap just being an alias.12:44
rbasakbzr push lp:~racb/ubuntu/oneiric/uw-imap/831228 worked12:45
rbasakbzr push lp:~racb/ubuntu/uw-imap/831228 did not12:45
zulholy crap uw-imap...old school12:46
sorenright, of course.12:46
zuluw-imap was the first imap server i used....then i growed up12:46
Davieysoren: Ah, yes - that was an intentional mistake to see who was paying attention]12:47
Davieyzul: You are a big boy now!12:47
nigelbRule #284058: When wrong, always claim it was a test.12:47
zulDaviey: yes i took the pacifier out12:48
rbasakOK merge proposed12:49
rbasakzul: well asterisk depends uw-imap. what fun!12:54
zulrbasak: heh..12:57
smoserthat was a fun conversation up above, regarding console13:42
smoserthe thing that i'm concerned about is that you're going to have to be polling that buffer fifo fairly often, aren't you?13:43
smoserrbasak, ^ ? soren ^?13:43
sorensmoser: Why?13:43
smoserbecause on kernel boot (or potentially at any point) you will have a fairly quick 30k set of writes13:44
sorensmoser: The kernel has a 64k buffer for named pipes.13:44
smoserso if i turn kernel messages to verbose then i just block boot until the daemon comes trhough and reads.13:44
sorenMAybe.13:45
smoseror (actual real life) if i use a kexec loader, and get 2 kernels worth of output13:45
sorenI haven't actually checked that.13:45
sorenI woulnd't be overly surprised if it just discarded anything exceeding those 64k.13:45
soren"it" == qemu.13:45
smoseri happen to know that 2 kernels worth of boot will not fit in 64k thanks to bug 56679313:45
uvirtbotLaunchpad bug 566793 in eucalyptus "[SRU] euca-get-console-output gives first 64k of output, not most recent" [Undecided,Fix committed] https://launchpad.net/bugs/56679313:46
sorenIf you think we need to run it more frequently than once a minute, that's not a problem. I just didn't think it would be.13:46
smoseri'd be surprised if qemu is doing anything more intelligent than writing to the target.13:46
sorenWell, for one it doesn't hang if nothing is listening.13:46
smoserlistening to the fifo ?13:47
smoserit doesn't ?13:47
sorenYes.13:47
sorenNo.13:47
smoserah.13:47
smoserwell then clearly i'm wrong13:47
sorenSo it's certainly smarter than something htat just assumes writing to a pipe works.13:47
sorenIt even buffers the stuff that isn't read (Because nothing is connected) and flushes it to whoever comes along and starts reading.13:47
smoserso how will this solution play withthe other uses of that console ?13:48
sorenWhich other uses?13:48
smoseri think there was disicussion at least of some way to multiplex that output13:48
smoserso that a user could get an ajaxterm or something and not break the console output13:48
smoserputting something in between.13:48
sorenWe'll deal with that when it starts to happen.13:48
smoseri dont know .... just thinking.13:48
smoser:)13:48
sorenNo point in engineering a whole bunch of stuff nothing will need/use.13:48
smosertrue13:48
smoseri'm really curious what kvm does with the writes  if no one is listening.13:49
sorenIt's not like something is going to come along from the side wanting to look at this. These are Nova's VM's.13:49
sorenI don't know for sure, but I see a couple of options.13:49
sorenDoing it in a thread.13:49
smoseri wonder where my laptop writes when i'm not here to look at the screen and read its buffer13:49
soren...will just hang, but who cares? It's a separate thread..13:49
sorenor doing non-blocking I/O, using select() to wait for something that's willing to listen.13:50
smoseryeah, i think its easonable.13:50
smoserreasonable13:50
sorensmoser: Your laptop is a different story.13:50
sorenI could tell you, but that would ruin the fun.13:50
smoseri just assumed  that amazon had the 4 minute delay just to stop polling on the console13:51
smoserbut i suspect now that it is more complex, and possibly related to this :)13:51
sorenI'm having troube figuring out why they do that.13:51
sorenIt makes no real sense to me.13:51
sorenIt seems incredibly arbitrary and inelegant.13:52
sorenAny problem I can envision that would be solved by something like that would be so much more elegantly solved by different means.13:52
smoserbecause they only have to have their fifo-emptier come through every 4 minutes then.13:52
smoserand can even schedule it to happen 4 minutes after hypervisor detects reboot13:52
sorenAnd that's only a problem if it's one, great big fifo-emptier for all of EC2.13:52
smoseri agree.13:52
sorenOUrs just runs on the compute node. It would at the most have to scale to... I don't know, maybe 64 guests.13:53
smoserits a interesting problem.13:53
sorenHardly a major problem.13:53
sorenNow, if they run on each node, but send the stuff they collect to a central node or shove it in a database, that would also explain it.13:53
sorenBut why do that? To save a roundtrip to the compute nodes from their frontends if someone asks for this?13:54
smoseri really doubt that a call to GetConsoleOutput hits the node13:54
smoseranyway.13:54
smoseri just find it surprising that this is so complicated and there wasn't an existing solution for this sort of thing.13:55
LinuxAdminhi guys13:57
sorenIf a GetConsoleOutput call doesn't hit the node, they're storing these things centrally. That sounds like a fascinating way to scale somthing like this.13:57
sorenBut meh.13:57
LinuxAdminI forgot the password of a KVM virtual machine. how can I recover it?13:57
LinuxAdminI've got virt-manager installed13:58
LinuxAdminon a different host13:58
sorenLinuxAdmin: Same way you'd recover it from any other box.13:59
sorenLinuxAdmin: Boot into resuce mode.13:59
sorenLinuxAdmin: Or take its disk somewhere else, mount it, reset the password, put it back into the machine.13:59
_rubenbah .. keepalived doesn't seem to work well when using unnumbered interfaces :(13:59
LinuxAdminhow can I boot a VM into rescue mode?13:59
sorenLinuxAdmin: How d oyou boot any other machine into rescue mode?13:59
soren(The astute reader will notice a pattern here)14:00
* ersi facepalms14:00
soren_ruben: Unnumbered interfaces?14:00
soren_ruben: What does that mean?14:00
ersiLinuxAdmin: By rebooting the machine and haxxing it up in the "boot prompt"14:00
_rubensoren: interface without ip address configured14:00
soren_ruben: Oh.14:00
LinuxAdminsoren, I type "single" in the boot process14:01
LinuxAdminbut I don't do it a long time14:01
jasonmsphey all.  My server was used last night in a DOS attack in an attempt to take out some DNS servers.  The hole that it used was due to the fact it is coming up as open resolver.  I've been reading up all day and can not find how to close it.  Any love?14:02
LinuxAdminI tryed restart the machine and then open immediately the virt-manager window, so I can see the boot process, but I could not interact with it.14:03
LinuxAdminhow can I do it?14:03
sorenLinuxAdmin: Or take its disk somewhere else, mount it, reset the password, put it back into the machine.14:03
LinuxAdminsoren, I'm talking about a virtual machine, its disk are virtual14:04
sorenYes.14:04
sorenI realise.14:05
sorenThat makes it even easier.14:05
sorenNo need for screwdrivers.14:05
* soren needs to take a break14:05
rbasaksoren, smoser: just catching up with that14:07
rbasakAFAICT, qemu ignores failed writes14:07
smoserbut writes to a file dont fail14:07
rbasakI left a machine running outputting junk and timestamps to the console overnight14:07
smoser:)14:07
rbasakLeft it without connecting a reader to the fifo14:07
rbasakthe timestamps started approx when I resumed reading the fifo14:08
rbasakNova is a persistent process, right? Can we hook into the eventing system to have an event when the fifo is available for reading?14:09
rbasak(rather than trying to poll)14:09
paljasWhich setting on apache 2.2 on ubuntu makes that php pages are interpreted14:12
paljaswithout the extension being given in the request? Can't find it in the14:12
paljasconfig. It looks like /etc/apache2/mods-enabled/php5.conf only has some14:12
paljaslines to matches .php file to the php handler, but apache also  matches14:12
paljasthings like /path/file instead of /path/file.php to the php handler.14:12
patdk-wkthere is no magic way to do that14:15
patdk-wkcause how is apache suppost to know you wanted to use php for it? instead of like perl? or ruby?14:16
patdk-wkthe only magic you can do, is attempt a rewrite, to see that when someone asks for /path/file, to check if /path/file.php exists, if it does, use it14:16
just-a-visitorIt sounds like a rewrite rule.14:17
just-a-visitorOh.14:17
paljasIt's not that I want it, but it does.14:17
paljasCould be done by: RewriteRule !\. - [H=application/x-httpd-php]14:17
paljasbut that's not in the config14:17
patdk-wkheh? why would ubuntu have that in the config at all?14:18
patdk-wkthat isn't *normal*14:18
norcI have an OVH server with Ubuntu Server 10.04 running. When I install a standard kernel, remove the OVH kernel and run update-grub and then reboot - the server doesn't come back up again and needs reformating14:19
patdk-wkwhy would it need reformatting?14:19
norcpatdk-wk: because it doesnt boot back14:19
norcFor which reason I cannot determine14:19
patdk-wknot booting and reformatting are two totally unrelated things14:19
norcpatdk-wk: point is, I dont have serial console access14:20
norcIf it doesnt come back up, the only thing I can do is hit the reformat button14:20
patdk-wkwhat version of grub is on it?14:20
patdk-wkoh? it's some kind of vps thing14:20
patdk-wklikely they had some customizations, that normal ubuntu grub killed14:20
_rubenwhich might require special initrd stuff which is now missing14:20
norcpatdk-wk: grub-setup (GRUB) 1.98-1ubuntu1014:21
norcno its a dedicated root serer14:21
norcbut it does have a custom kernel14:21
norcmhmmm14:21
_rubenphysical hardware with a reformat button? interesting14:21
norc_ruben: no, a web interface with a reformat button.14:21
_rubendoesn't make it less interesting .. it's a typical feature for virtualized stuff14:22
norcWell its rather common for server providers these days14:22
paljaspatdk-wk: xxx.xxx.220.152 - - [08/Sep/2011:16:20:15 +0200] "GET /aap.php?=SUHO8567F54-D428-14d2-A769-00DA302A5F18 HTTP/1.1" 200 3042 "http://dateldb.net.xxx.nl/aap" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.22) Gecko/20110905 Ubuntu/10.04 (lucid) Firefox/3.6.22"14:22
norcpatdk-wk: how would I go about verifying grub integrity?14:22
patdk-wkpaljas, random logs don't make sense, without a referense as to why it's posted14:23
paljasto show you ubuntu _does_ the rewrite14:23
patdk-wkrewrites aren't logged like that14:24
patdk-wkthat was a redirect14:24
patdk-wkprobably cause of multiviews being on14:24
patdk-wkso the user got a page saying, you asked for app, but it doesn't exist, but app.php does, did you really mean that?14:24
paljasI'll have a look at multiviews.14:24
rbasaksmoser: so what do you suggest?14:25
smoseri dont suggest that i have a solution.14:25
smoseri'm just honestly surprised that this is this complicated14:26
smoser:)14:26
smoseri dont know about polling, does inotify support fifo having data ?14:26
paljaspatdk-wk: it is indeed due to multiviews. Thanx a lot!14:27
rbasaksmoser: no, but any sensible eventing framework woiuld support it, eg. a select or poll loop14:27
rbasaksmoser: I don't know eventlet though14:28
zulnova is suppose to be getting an event based framework but not what you guys are talking about14:28
rbasakI suppose I need to study the code more, and do whatever the rest of the code does when it wants to listen for events on a fd14:29
rbasak(assuming it is capable of that14:29
rbasak)14:29
Davieysmoser: ideally qemu would provide a ringbuffer interface, i think - that get_console could poll and flush to file, and append fresh output, keeping the text file at 64K i think.14:34
DavieyBut a generic solution, seems to be why emlog was invented.  Just a kicker the author didn't seem to try and get it mainlined.14:35
Davieyit is starting to taste like getting emlog-dkms into the archive might be less pain.. but hardly fair as an upsteam solution.14:36
rbasakI'd prefer a generic solution in userspace14:36
rbasaklibringbuffer14:36
DavieyAnyway, lets see what rbasak churns out :)14:37
rbasaktrouble about putting ringbuffer support in qemu is that support would be needed all the way through the stack14:37
rbasaklibvirt would need to support that option14:37
rbasaknova would need to ask for it14:37
rbasaketc14:37
Davieyture14:38
rbasakthe fifo answer is really a hack which is useful because qemu happens to be able to write to it without* issues14:38
rbasakalso with qemu writing to the ringbuffer and nova get_console_output reading from it, there would have to be a standard ringbuffer format and there isn't an obvious file-based one, hence the need for a libringbuffer14:39
rbasakthat's the ideal solution but I don't think the time it would take can be justified14:39
Davieyyah14:39
rbasak(also I'd want to have agreement from upstream)14:40
sorenrbasak: You can just spawn a thread that reads from that fifo, really.14:40
sorenrbasak: In a tight loop.14:40
rbasaksoren: that's really horrible but I suppose I'll do it if I have to. I'll need a lock on the ringbuffer then too :-/14:41
sorenrbasak: You will anyway?14:42
rbasaksoren: maybe. I haven't looked at eventlet, remember? And you said to ignore its presence, and nobody told me that it used threads :)14:43
Davieyrbasak: interesting, http://laforge.gnumonks.org/weblog/2004/08/18/#20040818-syslog-performance14:44
=== scar[w]_ is now known as scar[w]
sorenrbasak: It doesn't.14:46
sorenrbasak: :)14:46
sorenrbasak: Well, it uses greenthreads.14:46
rbasakDaviey: yeah that's the kind of thing I have in mind for the ideal solution14:46
rbasakDaviey: I'd use a disk-based format, the library would mmap it and use mutexes14:46
rbasak(not really for performance, but just for the shared ringbuffer really)14:47
smoseri think the ideal solutoin actually modifies kvm14:49
smoserto support this.14:49
rbasaksmoser: and thus modifies libvirt and nova too?14:49
smoserwell, yeah.14:49
smoserobviously kvm is the right place, its the closest to it.14:49
smosersupporting writing content to a ring buffer.14:49
smoserno?14:49
Davieysmoser: The problem is, there is no such thing as a userspace or mainline kernel generic ringbuffer14:50
DavieyIf one is provided as named pipe, kvm already supports it :)14:50
rbasakwell, qemu already supports writing to a socket14:51
rbasakand indeed a pair of named pipes14:51
Davieyincidently, screen works against connecting to a unix pipe.  I like that.14:51
rbasakso if we are always going to have a qemu monitoring process, then I don't think ringbuffer _has_ to be in qemu for the result to be clean14:52
rbasakin fact I think it would be reasonable if qemu upstream rejected a ringbuffer patch for this reason14:53
rbasaktrouble is that I don't think libvirt allows for a monitoring process, and it sits in the middle of our stack14:53
rbasakalthough I suppose it would be reasonable for libvirt to support a socket destination for console logging and to pass that through from nova to qemu14:54
rbasakbut we're coming back to nova supporting events on a file descriptor again14:55
sorenIt does.14:55
rbasakOK so I think the only ugliness really is the fifo without telling qemu14:56
rbasakso if we implement as planned (with nova monitoring the fifo better than a poll if possible) and there are issues then that would need to be fixed by actually using qemu's pipe type and modifying libvirt to pass that request through14:57
sorenSorry, what?14:57
sorenQemu's pipe type is what you'll use as a fallback? What's plan A?14:58
rbasakPlan A is using qemu's file type which is actually a fifo14:59
rbasak(as in, we make the fifo and then tell qemu to write to it as a file)14:59
rbasakI thought that was the plan all along, otherwise how do we do it without modifying libvirt?15:00
=== kentb is now known as kentb-afk
=== lynxman- is now known as lynxman
uvirtbotNew bug: #838729 in libcgroup (universe) "x200 laptop fails to complete to suspend on second suspend after boot" [Medium,Triaged] https://launchpad.net/bugs/83872915:37
ScatterBrainIs AppArmor worth keeping on a Web Server?15:44
jpdsScatterBrain: Possibly.15:45
jdstrandScatterBrain: sure, especially if you are using mysql and/or confine specific applications via http://wiki.apparmor.net/index.php/Mod_apparmor_example15:46
jdstrands/specific/specific web/15:46
* ScatterBrain looking at link.15:46
norc_Ok let me approach this from another angle. I installed a kernel via apt, then moved the ovh kernel and /etc/grub/06_OVH to a temporary dir, hit update-grub and then reboot - this should technically boot directly into the new kernel then right?15:47
patdk-wkdepends on grub's settings15:48
=== bdmurray_ is now known as bdmurray
=== shadeslayer_ is now known as shadeslayer
zullunches16:21
garymcI still cant get server to load dhcp3 after server reboot. Any ideas anyone?16:30
jamespageRoAkSoAx: around? need a bit of help pxebooting my panda16:41
RoAkSoAxjamespage: i'm here16:46
jamespagehey RoAkSoAx16:46
jamespageI'm trying to get my pandaboard to pxe boot and install using cobbler (oneiric)16:46
RoAkSoAxjamespage: ok, where are you stuck?16:47
jamespageits booting OK from the sd card - but I got an error trying to add the sysem16:47
RoAkSoAxjamespage: pastebinit ;)16:47
jamespage<type 'exceptions.IOError'>:[Errno 2] No such file or directory: '/etc/cobbler/pxe/pxesystem_arm.template'16:48
RoAkSoAxjamespage: interesting, let me test16:48
jamespageRoAkSoAx: the message is right i.e. the file does not exist16:49
RoAkSoAxjamespage: alright, so it might just be a packaging error16:49
RoAkSoAxlet me check16:49
RoAkSoAxjamespage: btw.. I think you'll have to trick the preseed to get manual partitioning cause in my case, everything installed successfully however, it failed to come up16:54
jamespageRoAkSoAx: right-oh16:54
jamespageI was going to try installing to a usb disk to try an improve performance16:55
RoAkSoAxjamespage: ok.. anyways I'm building the apckage now16:55
jamespageRoAkSoAx: OK - so I hacked in the pxe*_arm.templates from the source pckage16:55
RoAkSoAxshould be able to get it fixed soon16:55
jamespagefor the time being16:55
jamespage:-)16:55
jamespageits doing somehting16:56
jamespageinstalling I think16:56
jamespagebut nothing on the serial line - maybe I need to set some more kernel options16:56
RoAkSoAxjamespage: yes you do16:56
RoAkSoAxsudo cobbler system edit --name=balblabla --kopts="blabla" I believe it is16:58
jamespageyep - picked then from here http://rsalveti.wordpress.com/2011/07/11/net-booting-with-tftp-and-pxe-with-pandaboard/17:01
utlemmingsmoser: around?17:03
RoAkSoAxjamespage: cool, alright, I';ll be uploading the fix in a bit17:04
RoAkSoAxforgot to install them in cobbler-common17:04
jamespagenp17:04
RoAkSoAxjamespage: good catch though ;)17:05
jamespageI did not need todo your hack with the pxelinux.cfg/* file - that worked fine17:05
RoAkSoAxjamespage: yeah they fixed it already AFAIk17:05
GrueMasterI am interested in this cobbler for panda pxe boot.  I already have pxeboot working here (quite well, actually), except for doing custom preseeds & custom pxelinux.cfg.17:11
GrueMaster(and the occasional issue of not being able to install to the advertently unplugged usb drive - oops).17:12
uvirtbotNew bug: #844982 in cobbler (universe) "Cobbler lacking arm templates for pxe file generation" [Medium,Fix released] https://launchpad.net/bugs/84498217:17
jamespageGrueMaster: I'll let you know how I get on - I want to network install to USB drive so may need a little help there17:19
GrueMasterOnly real issues I have seen lately are related to bug 806751, and recently something has changed to where it now prompts me for keyboard detection again.17:20
uvirtbotLaunchpad bug 806751 in debian-installer "Boot partition on SD is too small on omap/omap4" [Medium,New] https://launchpad.net/bugs/80675117:20
koolhead17hey all17:27
sms_a noob me just installed ubuntu server, is there a tutorial somewhere how I can control the server from my win7 pc?17:31
sms_By control I mean see and use the terminal on the win7 pc basically..17:34
jamespagesms_: try putty17:34
sms_will do17:34
sms_oh wow17:42
sms_Didn't think it would be this simple17:42
sms_Yess :)17:42
RoAkSoAxjamespage: how's the installation going?18:03
jamespageRoAkSoAx: worked like a dream - had to work my own preseed for install to usb disk18:18
GrueMasterjamespage: I could have sent you mine to work from.18:26
jamespagewell it did not need to much alteration TBH18:27
jamespagejust fixing the disk to install to18:27
GrueMasterI'm curious, can a preseed file use an include statement to pull a sub-section for preseed parameters?18:28
GrueMaster(I haven't worked with preseeding that much).18:29
RoAkSoAxjamespage: is it booting?18:29
jamespageRoAkSoAx: yep18:29
jamespagecan figure out how to make it netboot again tho18:29
jamespagecan't that is18:29
=== lullabud is now known as warzauwynn
RoAkSoAxjamespage: did you create the two partitions on the USB stick?18:30
jamespageyes18:30
RoAkSoAxjamespage: would be could if you could write down your steps so I can play aroudn wtih what you did too18:30
GrueMasterjamespage: The easiest way I have found is to reformat the SD and copy /usr/lib/u-boot/omap4_panda/[MLO|u-boot.bin] (in that specific order) to the SD.18:31
GrueMasterThen u-boot will look to the bootp server for netboot.scr first.18:32
ScatterBrainOk, really showing my noobness here.  If am installing a LAMP Server (for development purposes) and I'm ONLY going to be talking to MySQL on the local machine (via bash scripts, and PHP), the default setting in /etc/mysql/my.conf to bind to the loopback address is correct, right?18:54
kirklandRoAkSoAx: ping18:55
RoAkSoAxkirkland: pong18:56
kirklandRoAkSoAx: are you getting bzr crashes when running release-build?18:56
kirklandRoAkSoAx: looks like something in bzr build-deb broke very recently18:56
kirklandlifeless: ^18:56
RoAkSoAxkirkland: yes18:56
kirklandRoAkSoAx: have you triaged it?18:56
ScatterBrainThe server will be accesible from the Internet, but I only want commands being sent to MySQL from my web applications and the local backup scripts.18:56
RoAkSoAxkirkland: i got it fixed by commenting this:18:56
RoAkSoAxkirkland: http://paste.ubuntu.com/68550618:57
RoAkSoAxkirkland: lines 54,5518:57
kirklandRoAkSoAx: ugh18:57
kirklandRoAkSoAx: that sucks18:57
kirklandRoAkSoAx: i guess we can sign it later18:57
kirklandRoAkSoAx: but i think that's a bug in bzr build-deb18:58
lifelesskirkland: hi; tell jelmer / james_w / poolie :P18:58
lifelesskirkland: I'm on leave atm18:58
kirklandlickalott: thanks18:59
kirklandlifeless: ah, right, congrads ;-)18:59
RoAkSoAxkirkland: yeah it wont hurt for now18:59
lifelesskirkland: thanks :P - if I wasn't about to hop in the car and go pick lynne up (again :P) I would poke at it for you, but I am, so I won't.19:01
uvirtbotNew bug: #845068 in ipmitool (universe) "ipmitool is not packaged for ARM" [Undecided,New] https://launchpad.net/bugs/84506819:01
kirklandlifeless: np, later19:02
kev009any opinions on zenoss vs opsview for monitoring?19:16
jamespageRoAkSoAx: will document somewhere handy tommorow19:27
RoAkSoAxjamespage: thanks19:29
=== joschi_ is now known as joschi
RoAkSoAxjamespage: what partiotioning layout did you use?19:51
lbordakim0, hi19:53
kim0lborda: hey there19:53
lbordakim0, I'm filling a merge proposal for the serverguide. Should I add you as a reviewer?19:53
kim0lborda: not really, whoever can review will .. I don't like becoming a bottleneck :)19:54
kim0lborda: congrats on the great work though19:54
kim0lborda: keep em coming19:54
lbordakim0, not a problem... it's a pleasure...19:55
kim0great thanks!19:57
RoAkSoAxjamespage: are you using today's images though?19:58
sms_two computers connected to the same router, what featurs must be on in the router so I can ftp into one computer to the other?20:37
sms_from the other*20:38
patdk-laphow are they connected to the router?20:38
patdk-lapusing different nics? vlans? ...20:38
sms_rj45 cable?20:38
sms_I'm pretty confused with this networking stuff20:38
patdk-lapthe same rj45 cable?20:39
sms_No, the router has 4 slots20:39
patdk-lapsounds scary20:39
patdk-lapwhat kind of *router* is this?20:39
sms_hehe20:39
sms_Uhh20:39
sms_a-link roadrunner 4420:40
PiciNormally you don't need to do anything on a router for two clients under it to communicate.20:40
sms_so adsl router? I guess20:40
patdk-lapya, sounds like nothing needs to happen20:40
patdk-lapas long as the router is providing dhcp info, or you used static ip's20:40
Picisms_: have you installed an ftp service on the server you'd like to ftp into?20:41
sms_I can ftp into my server, but apparently the connection went over the internet20:41
sms_So I guess I used the external ip20:42
sms_and this is where I'm lost20:42
PiciSo use the internal IP.20:42
sms_Where can I find it20:42
patdk-lapon the computer running the ftp server20:42
sms_what command?20:43
patdk-lapdunno, what os is running on it?20:43
sms_ubuntu20:44
patdk-lapifconfig20:44
sms_so uhh20:44
sms_eth0: info20:45
sms_lo: info20:45
sms_which one is the internal ip :S20:46
patdk-lapall of them :)20:46
patdk-lapbut your looking for the eth0 one20:46
sms_umm20:46
sms_inet addr:... is my external ip I think20:47
sms_Because I can access it from anywhere..20:47
patdk-lappost it20:47
sms_88.115.187.15920:47
patdk-laphmm, odd20:47
patdk-lapwhat ip is on the other machine?20:48
sms_91.155.133.24720:48
sms_the one I'm on now20:48
Piciweird.20:48
patdk-lapboth plugged into that same router?20:48
sms_yes20:48
PiciThose are both publically addressable ips.20:49
patdk-lapmust have got multichannel from the isp then20:49
patdk-lapor whatever they call that on dsl20:49
sms_yeah? :D20:49
sms_So is it a setting in the router or something20:50
sms_I mean20:50
patdk-lapyou have to have fun with routes to get that to work nicely :)20:50
sms_I keep reading 192.168.0.0 from everywhere20:50
sms_so I'm guessing that's if I had an internal ip20:50
patdk-lapnormally that is how it works, but your getting multible connections20:50
sms_Wait so20:51
sms_My router is in bridged mode?20:51
patdk-lapnope20:52
patdk-lapor, I don't believe so20:52
patdk-laptry this on your machines20:53
patdk-laproute add -host 91.155.133.247 dev eth0 (on the server)20:53
patdk-lapand, route add -host 88.115.187.159 dev eth0 (on the client)20:53
patdk-lapit's been awhile since I have done something like this20:54
sms_well the client is win720:54
patdk-laphmm20:54
KrayZhi all, howto mount the floppy drive on the ubuntu server livecd? I need to load some raid drivers in order to see my raid.. (rocketraid 620)20:54
sms_hmm, I can't configure my router without changing my ip to 10.0.0.2, subnet mask 255.255.255.0 and gateway 10.0.0.321:06
toddnineHi guys.  Does anyone have any experience with either Ubuntu Cloud or a server with virtualization?  I'm looking to replace our old vmware server (still running on cent os 5.0) with an updated ubuntu version.  We're also growing on our internal system needs, so we need the ability to expand as well.21:07
toddnineI also need an interface that's relatively easy to use like the vmware server 2.0 web ui.  Any suggestions in the Ubuntu sphere of products since this is our preferred OS now21:10
koolhead17toddnine: better you speak to canonical in case you need support :D21:11
jamespageRoAkSoAx: this is the preseed I'm using - http://paste.ubuntu.com/685589/21:12
toddninekoolhead17: We're not a big shop.  The hosts are all used for development work, so we should be ok for support21:12
jamespageand yes I am working from todays images - although I have had to hard power off/on a couple of time21:12
RoAkSoAxjamespage: i get a weird error about not finding the root filesystem, but I don't get the partitioner at all21:12
jamespageRoAkSoAx: so did you do the 2 partition setup on your sd card?21:13
koolhead17RoAkSoAx: even am not able to get custom partitioning working via preseed21:14
RoAkSoAxjamespage: yeah, its the same setup as I had installing before21:14
RoAkSoAxjamespage: this time it complainst about not finding the root filesystem so might be the installer21:14
jamespageso is this ARM or x86?21:14
jamespagesorry - its a bit late so brain a little fuddled21:14
RoAkSoAxjamespage: ARM21:15
jamespageright-oh21:15
koolhead17toddnine: i am not aware who all works for canonical here and who can help you with it. :(21:15
toddninekoolhead17: Do they have a dedicated channel?21:15
RoAkSoAxkoolhead17: yeah you cant, but the thing here is that I'm using a rpeseed that is supposed to wipe out the root partition and use it21:15
RoAkSoAxand it used to do it21:15
RoAkSoAxnot anymore21:15
koolhead17:(21:16
koolhead17pressed is crazy :D21:16
koolhead17toddnine: where are you based in21:16
toddnineNew Zealand21:17
toddninewww.spidertracks.com21:17
=== sms__ is now known as sms_
koolhead17toddnine: check pm21:19
sms_patdk-lap, my router is in bridged mode..21:20
GrueMasterjamespage: Here's my preseed. http://paste.ubuntu.com/685594/  So far it works quite well, although recently I have been getting prompted for keyboard info prior to dchp.21:20
koolhead17jamespage: but this should work21:21
koolhead17its auto partitining21:21
koolhead17i suppose21:21
koolhead17?21:21
koolhead17partitioning21:21
sms_lan, nat, natp, dhcp I'm just so lost with the relation of these :|21:22
jamespageGrueMaster: well I did not get any prompts21:23
GrueMasterAnd my pxelinux.cfg  http://paste.ubuntu.com/685598/21:24
GrueMasterMight be a difference in kernel boot params.21:24
RoAkSoAxjamespage: yeah what are your kernel boot params21:24
jamespageRoAkSoAx: console=ttyO2,115200n8 earlyprintk=ttyO2 locale=en_GB text priority=critical fixrtc omapfb.vram=0:24M vram=48M21:26
koolhead17RoAkSoAx: i don`t provide kernel parameter like that. i simply import the ISO and then when am creating profile i provide it with path21:27
koolhead17and yes if you are using eth1 as default on dhcp, you have to provide it in kernel options or your profile or system21:28
* koolhead17 spent 7 days kicking himself with preseed21:28
koolhead17Daviey: hey21:28
jamespageso I set those kernel params on the profile - but I should prob have done them on the system as they are for serial console access (i,e, specifi)21:28
RoAkSoAxjamespage: have the same plus root=/dev/mmcetcetc21:28
GrueMasterGuess I can delete the mem= lines.  They are only needed for accelerated encoding.21:28
jamespageI dropped root=21:28
jamespageas I'm not installing to the SD card but to a USB connected SATA drive21:29
jamespagehence the /dev/sda in my preseed21:29
RoAkSoAxjamespage: right, I see the failure with both, adding root= or removing it21:29
RoAkSoAxjamespage: which I didn't see before21:29
jamespagehrm21:29
RoAkSoAxjamespage: so if you have the chance to give it a try with a SD card21:29
RoAkSoAxlet me know your results21:29
jamespageI will do21:30
jamespageGrueMaster: I just raised bug 84515821:30
uvirtbotLaunchpad bug 845158 in ubuntu "Frequent java task hang on ARM server" [Undecided,New] https://launchpad.net/bugs/84515821:30
jamespagekeep bumping into it21:30
GrueMasterI don't think netinstall will install properly to SD due to the partitioning.21:30
* GrueMaster looks21:31
jamespagehave you seen anything similar in the testing you have been doing?21:31
GrueMasterNo, but I am only installing the jenkins slave on my systems.21:31
GrueMasterWhich java are you using?  I have seen issues with openjdk-7-jre-headless.21:33
jamespageyeah - I was more poking at any other java based stuff you had been trying?21:33
jamespagethats running on openjdk-621:33
jamespage-jre-headless21:35
GrueMasterAccording to https://wiki.ubuntu.com/ARM/QA/Server, Phoronix-test-suite was run against openjdk-6 (if I read this correctly).  It should have found something if there was an issue.21:36
GrueMasterAlthough it was a slightly older version.21:36
uvirtbotNew bug: #598933 in open-vm-tools (multiverse) "open-vm-tools should recommend open-vm-dkms" [Wishlist,New] https://launchpad.net/bugs/59893321:46
sms_well I made progress22:14
sms_Now I have internal IP adresses22:17
sms_What answers my external ip now?22:17
sms_aaaa that's where the "virtual server" thingy in my router comes along22:20
=== sms__ is now known as sms_

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!