[01:34] hey guys, I posted this yesterday but didn't really get an answer - I'm not sure if this is the right place to ask this, but I'll take a random stab at it; I've got a theoretical question for you guys - I've got a SaaS type service that moves data from one point to another; sometimes, that data is behind a VPN. I've got multiple clients on a single server, so plugging that entire box [01:34] into the VPN isn't an ideal solution; do you guys think it'd be possible to connect an external "worker box" to the VPN and then connect through that box via a proxy connection? Would that work or am I pounding sand? [01:44] That would depend on a bunch of things [01:44] Like: is there a proxy available for the protocol in question? [02:01] Daviey, where'd that come from ? [02:38] twb`: typically, proxies can be configured for any TCP service yeah? [02:39] Durg: No, application proxies are protocol specific by definition. [02:40] Perhaps you should describe the service in more detail [02:42] interesting [02:42] it's essentially an API to API middleware app [02:42] takes data from one enterprise system and moves it into another [02:42] such as a CRM to an ERP, ERP to Fulfilment, etc [02:43] but it's built around a SaaS model; completely hosted environment, so accessing on-site applications and databases that contain critical customer data is a significant challenge [02:43] Is it using a custom layer 7 protocol, or is it layered on top of e.g. HTTP? [02:43] HTTP [02:44] Then in principle you could use something like squid or nginx as the proxy [02:44] Although IIRC HTTP requires the client side to know it's going via a proxy, or for you to do dirty transparent proxy hacks [02:46] well, essentially the goal is to be able to access network services and clients for single-use calls; that's why I thought a proxy option might work [02:46] the back-end database I'm connecting to might be MSSQL, MySQL, Oracle, etc. or even file-based [02:46] might not have an HTTP endpoint [02:51] isn't that what soap was made for? [02:52] well, REST, SOAP, XMLRPC, but that requires the application to adapt to meet the middleware, not the other way around [02:54] my second solution is to build a mini-instance that contains all of the network-specific code and can be accessed by a REST interface, but that raises my cost per client significantly compared to building 5 or 10 relay boxes for my entire network of clients [02:55] I don't think I really understand the problem [02:55] I'm not saying "there's no problem", I mean that I can't get my head around all the bits [02:55] A network diagram and/or user stories would probably help [02:55] unfortunately very few do, lol - it's my specialty field [02:56] well, here's a use case, that might help [02:57] Well, it's also that I don't do stuff like saas much [02:58] Company ABC has MAS500, an on-premise based application with an MSSQL database for their finance system, which is blocked off by their firewall (for good reason, it contains critical financial data about the company) - they want to move sales orders from Salesforce.com (SaaS) into their MAS500 instance [02:58] so it goes Salesforce -> DatixPanel.com (my middleware app) -> MAS500 [02:59] from a low level standpoint, the concept is: [03:00] Salesforce -> Message Processing Server - > Action Server (retrieves, transforms and sends data) -> VPN Tunnel -> MSSQL [03:00] companies don't want to expose MSSQL through their firewall, because it would pose a significant security risk [03:01] so the problem is, how do I get to MSSQL? [03:02] Something like stunnel I guess [03:02] Er, no, brain fart [03:03] No, you know what, a properly secured TLS-encrypted version should be fine to allow through the firewall [03:03] I mean that's how stuff like IMAPS and HTTPS work [03:03] you know that, and I know that, but they don't want to admit that [03:04] OK, so that's not allowed because is retarded? [03:04] I mean plan A is "convince the customer to do it right" :P [03:04] lol, of course, but my target audience is small to mid biz, not enterprise [03:04] enterprise IT guys typically know that [03:04] but small to mid are... frankly, idiots [03:05] IME enterprise-level ones are the idiotest [03:05] Two-thirds of SMEs will just do what you recommend [03:05] well, that's not 100% false either [03:05] but typically the CIO is more intelligent than not [03:05] and they've typically done something like this with their data in the past [03:05] Yeah right [03:06] it's more about experience when I say 'intelligent' [03:06] My dad was CIO for a multinational for a couple decades, and he doesn't know shit about the lower layers. [03:06] I think that's part of the reason they're more willing to say go [03:06] lol [03:06] He deals with issues more like "how do I convince Cisco to give me a 60% discount" not issues like "why do we even need Cisco" [03:07] yeah, that sounds typical [03:07] just from my experience, I've had a lot less resistance from enterprise clients than SMEs [03:07] I guess it depends on how much their guy trusts you, and whether he realizes that he doesn't know what he's talking about. [03:09] well, the goal is to reduce the amount of end-client configuration to as low as possible; so setting up a PPTP login usually requires less effort [03:09] unless I'm wrong about that? [03:09] I'm a programmer, not a sysadmin [03:09] hey all, I'm looking for a good resource that explains how the permissions of directories affects access to subdirectories and files with differing permissions [03:11] smaug: you talking about permission inheritance? [03:11] idlemind: very possibly [03:11] sounds like it means what i'm after [03:12] You can't have that with POSIX DAC [03:12] u have a resource for it? [03:12] If you use something else, like POSIX ACLs, NTFS or NFS4 ACLs, then I guess so [03:13] I've always put ACLs into the "too hard" basket. [03:13] see acl's i think are really important [03:13] (Actually I tell a lie, there is one specific kind of inheritance you can have in POSIX DAC -- setgid dirs. But that's unlikely to be what you want.) [03:13] and you guys just blew my little admin mind. [03:13] lol [03:14] the fine grained options they give just outweigh the crap out of traditional owner / group / system perms [03:14] idlemind: yes but then I have to learn how to use them [03:14] problem is they always come off as an afterthought in linux, the tools just don't seem to be their yet [03:14] Personally I'd like to do it properly with grsec RBACs, but ICBF recompiling the kernel on all my hosts [03:14] idlemind: yeah that's the other issue [03:18] smaug: https://help.ubuntu.com/community/FilePermissions [03:18] smaug you will probably want to look into using acl's [03:19] AFAIK BCP is to use NFSv4 or NTFS acls; not POSIX acls. [03:31] idlemind: thanks for the link, but I'm not sure if that includes what i'm interested in. what I want to know is, if a directory has, for example, drwx------ and a file inside it has -rwxrwxrwx or whatever, what happens? can the file be read by a random user? or not since you can't get into the directory? [03:31] that sort of behavior [03:32] i'll look into ACLs [03:32] http://www.cyberciti.biz/tips/understanding-linux-unix-umask-value-usage.html [03:32] but from your discussion it appears that they don't always work? [03:32] it's an all or nothing type setting with the default rwx rwx rwx permissions as far as i know [03:33] so acl's (nfs v4 ones) may be your best option to make it behave more like the ntfs file perms you are most likely used to [04:04] idlemind: thanks for the link, it was helpful but also did not answer my question. i am not seeking to make ubuntu behave as ntfs, I am simply attempting to understand how it does behave so I can use it properly [04:04] the umask was a pretty interesting read and i thank you for it [04:04] smaug that's basically it [04:04] when you create a file it doesn't inherit permissions [04:04] one of the questions i am trying to answer, for example, is - if a directory has a set of permissions, how does that affect the permissions of the files inside [04:04] it [04:04] and if the directory does not affect the perms of the files inside it [04:05] what is the point of directory perms [04:05] do you have situations where you cannot cd to the directory but if you know the path of the file you can still access it? [04:05] 1. a directories permissions do not affect the permissions of the files inside only if you can view those files or not [04:06] well i guess i answered both there [04:06] idlemind: True, but setting g+s affects ownership of files created inside the directory, though! [04:07] so is the answer to my secondn question yes? that surprises me [04:07] Smaug: Yes, you can set things up so a user cannot read a directory to discover what files are in it, but if the user knows a filename they can read it. [04:07] hmm okay [04:08] well i do stand slightly corrected u+s and g+s would allow you to force inheritance for files created within a directory [04:08] so that maybe something you want to research smaug [04:09] my end goal is being able to add a user to help with creating a website, without letting him have access to other, private parts of the server [04:09] like other sites of my own [04:09] o well that's simple [04:10] when you create the user don't give him a home directory (or assign his home to the web-sites root) and add that user to a group with your other users and assign that group the rwx you want on those files [04:12] you may want to then set the g+s on the web-sites root so that files that user creates inherits the group perms [04:12] ne who i gotta run [04:12] tty laters [04:13] thanks you idlemind [05:25] Just got this oops on natty, when detaching a serial console from byobu: [05:25] http://pastebin.com/E0JU0nmg [05:26] Oddly enough, my znc is still running. [05:29] (10:25:03 PM) DanaG: Just got this oops on natty, when detaching a serial console from byobu: [05:29] (10:25:04 PM) DanaG: http://pastebin.com/E0JU0nmg [06:24] How do I access the GRUB cli when on boot I'm taken directly into Ubuntu without a grub menu? [06:31] Hol- oh, he's gone. [06:31] Damn impatient kids [06:39] i changed the ssh port on a 10.04 server, i can not connect to it with the new port (or old port) do i need to regenerate the keys on it after i change the port? I get a connection refused when trying to ssh into it now [06:44] Host keys are not port-specific [06:44] You probably forgot to deal with the firewall or something [06:49] s10loridr: I would check the firewall, and you should be able to run on multiple ports for testing. Just add another "Port 2222" or whatever line, leaving the original "Port 22" there. [06:49] actually i made a dumb mistake, was editing the wrong fiel [06:49] i used the ssh_config by accident [06:49] im an idiot [06:49] all fixed now, thanks [06:56] hi a;l; [06:56] *all [07:43] morning all [07:46] "error: invalid argument in libvirt was built without the 'gsx' driver" - any chance that I can connect virsh to a GSX hypervisor on 11.04? [07:51] phretor: you can rebuild your own version [07:52] twb`: well, I'd have preferred not to screw with the packaging system [07:52] phretor: since 11.04 is released, you're unlikely to get a new version that has new features enabled [07:52] I'm trying to migrate out from vmware [07:55] Apparently GSX driver just backs onto HTTP, so I would guess it wasn't in 11.04 because it wasn't in that version of libvirt [08:04] Hello folks [08:04] My base instalation of ubuntu server 11.04 seems to come with udhcpd as a default dhcp daemon. Can I change it to ISC? [08:07] when I upgraded from 10.10 to 11.04, GRUB attempted to boot Xen DOM0. Does this have to do with the upgrade, or I installed Xen stuff by mistake? [08:08] GeorgeJ: try apt-get install isc-dhcp-client [08:08] Aye, just did so, I was just a bit confused because dhcpd3-server did not exist in /etc/init.d [08:09] phretor: You must have installed Xen. By mistake or not, I can't say :) [08:09] phretor: It's most certainly not part of the standard upgrade procedure. [08:09] Didn't kernels recently get the ability to be dom0's OOTB ? [08:09] Yes. [08:09] soren: I should go for libvirt/kvm instead, right? [08:09] Kernels, yes. But to boot in that mode you need xen-hypervisor [08:10] phretor: If you're not on ancient hardware, yes. [08:10] just checking [08:10] twb`: Right, they can act as dom0, but you still need the Xen hypervisor to run first (which then in turn runs the dom0 kernel). [08:10] soren: I've got a Dell PowerEdge 1950 with 8 cores and 8G of RAM. smb: what do you mean by "to boot in that mode"? [08:11] Normal upgrade should not pull that hypervisor package. [08:11] twb`: So a standard install can't function as a Xen host. You must manually choose to install the Xen hypervisor. [08:11] Unless somebody put it into a meta package that pulls it. [08:11] phretor: KVM is what I'd recommend for sure. [08:11] soren: I bought a server last year that oddly, Intel excluded virt extensions. [08:11] fairly modern CPU aswell. [08:12] Daviey: True. [08:12] phretor, In that mode means the xen hypervisor is booted and loads a kernel as dom0 [08:12] smb: maybe I installed xen on 10.10 and then disabled it and forgotten. And the upgrade simply reactivated it by mistake. [08:12] Daviey: They still produce new models that don't have the virt extensions. The feature support matrix of Intel processors is a massive clusterfuck. [08:12] smoser: slow reply, must have been an issue in my bundling. [08:13] soren: that's for price differentiation [08:13] twb`: potato, potato. [08:13] soren: like "$100 more for the VT version!!1!" [08:13] It shits me that the only atoms that have VT are the pouslbos [08:13] phretor, Maybe. I have not checked really, but the last working xen hypervisor I know of in Ubuntu was 8.04. [08:14] OTOH my main machine I'm switching to ARM this month, and I managed to get the only one that doesn't have SIMD (NEON) :-/// [08:14] * smb misses a "was" [08:14] Sorry not fully awake, yet [08:14] AMD gets this right. They don't mix and match features. Each new processor offers a superset of the features of its predecessor. There might be the odd exception to this rule, but it's just that: and odd exception. Intel offers virtually any combination. [08:14] soren: I guess my point was just that it's a *deliberate* clusterfuck [08:15] twb`: True, and good point. [08:15] smb: ah, true, I migrated all the way from 8.04 -> 8.10 -> 9.04 -> 9.10 -> 10.04 -> 10.10. [08:16] phretor, Ah ok. Hm, interesting to remember that xen can be that persistent... [08:17] Well, if you've had the hypervisor installed, but not had a kernel that could be a dom0, you're fine. [08:17] smb: I believe you are correct about 8.04 being the last working xen hypervisor release, which is why the buildd's never upgraded to Lucid. [08:17] smb: http://paste.pocoo.org/show/478406/ [08:18] soren: I was rather unhappy.. i stopped checking virt extensions before purchase as it seemed they all had them now.. being left with a lemon made me cry. [08:18] Daviey, yep. And thats why they really like us to have something before Hardy goes out of service. :) [08:18] Now that the standard kernels can be a dom0, and you happen to have a hypervisor installed (which would have been useless for the past X releases), suddenly you'll boot into Xen. I guess this is somethis update-manager should warn about. [08:18] smb: Yep, which is why we single-handed pushed xen into mainline :P [08:19] smb: good luck with that [08:19] smb: wasn't xen axed in lucid, along with vserver and openvz? [08:19] * twb` bitches about LXC not being ready in .32 [08:19] twb`: It was axed right after ahrdy because it wasn't supportable (not being in mainline) [08:19] ...but now it's in mainline, so it's a different story. [08:20] soren: non-LTS releases don't matter anwyay [08:20] They are just an ephemeral fog [08:20] twb`: Also, the dom0 kernel in Hardy wasn't in main. [08:20] Nor was openvz or vserver, shrug [08:20] soren, phretor Maybe that is related to the old 3.1 hypervisor. On my test system with the 4,1 one there is a special grub entry for starting as xen and it is not the first thing [08:21] And current lucid-security .32 has LXC support disabled to keep stupid vsftpd happy :-/ [08:21] smb: that was 3.3 [08:21] twb`: whuh, really? [08:21] yeah [08:21] twb`, Not so much axed as ignored as it was already enough pain to drag a patchset for getting a pv-ops domU [08:21] SOmeone noticed that vsftpd used cgroups and DOSd it, so the "fix" was to disable cgroups (thus, no LXC), rather than to, I don't know, turn off that feature in vsftpd [08:22] soren, twb` It has net namespaces disabled [08:22] smb: still annoying, because the upgrade path from hardy openvz was to lxc, which IMO isn't ready as at .32 [08:22] twb`: It's all very well identifying failings... people tend to come to UDS to help fix these things. ;) [08:22] Right, because you can create them quick but it takes about two seconds for each to get torn down in Lucid [08:22] Daviey: go stick your head up a dead bear's bum :P [08:23] heh [08:23] twb`, The option would be to take one of the backport kernels [08:23] smb: yeah, that's what I'm doing now, I just don't like it [08:23] I would just prefer vsftpd be penalized for being stupid [08:23] Well, _if_ vsftp is the only thing [08:23] Which you never can say [08:24] Yeah yeah, I know you're right [08:24] I'm probably extra pissed off because the power outage that triggered the new .32 kernel happend at like 4AM sunday [08:25] And it was totally unexpected that it LXC would Just Not Work anymore after a kernel -n+1 update [08:27] twb`, Yes, I can understand that. I'd preferred to have had another option. Or at least a way to warn about the change [08:27] I'm mainly just venting (again) [08:28] FWIW libvirtd-bin has been doing OK, apart from ridiculous errors from the stupid broken virt-managers in lucid and natty [08:29] e.g. apparently natty's v-m goes "oh, you are connecting as chris, I will just add /home/chris on the server, which has a root_squashed /home, as a VM volume. And then try to scan it all the time" [08:29] twb`: When was this kernel update, btw? [08:29] Dunno, there's a ticket in LP about it [08:30] [Bug 790863] Re: Unable to start lxc container after update to 2.6.32-32 [08:30] Launchpad bug 790863 in linux "Unable to start lxc container after update to 2.6.32-32" [Critical,Confirmed] https://launchpad.net/bugs/790863 [08:30] Oh, a long time agi. [08:30] ago, even. [08:32] qemu/kvm and me are BFFs, tho. I can do ttyS0 and TFTP booting and stuff, /me love. [08:33] And looking at an architecture diagram of kvm doesn't make me facepalm unlike the equivalent for Xen. === almaisan-away is now known as al-maisan [08:33] Eh, isn't xen designed by the same people that try to use microkernels in the real world? [08:34] Xen is a microkernel. [08:34] There you go then [08:34] But that's hardly the worst of it. [08:35] is there a program that I can run on my server that will forward ports in my router via uPnP for me? so if I switch it between wireless / wired i dont need to manually change port forwarding settings... etc [08:35] About as clever as hurd or ntoskrnl :P [08:35] stiv2k: last time I looked, UPNP was basically a big hole that said "exploit me!". Do you really want that? [08:35] twb`: i dont know much about that, can you elaborate [08:36] If mean if you're doing port forwarding maybe you want more like SOCKS5 (ssh -D) or something [08:36] twb`: its just to make the machine visible from behind a NAT device [08:36] it happens to have a wireless card and i'd like to make it easier to switch between the two interfaces [08:36] Oh one of THOSE. Is Ubuntu running on the router, or is it some crappy vendor-provided vxworks image? [08:37] while still keeping the machine visible on the net [08:37] it runs a custom fw [08:37] Like OpenWRT? [08:37] Tomato [08:37] same idea [08:37] Are the wifi and ethernet networks bridged together (on the router)? [08:37] how to tell? [08:38] Pastebin the output of "ip a" and "ip r" for each network [08:38] If they're the same range (e.g. 192.168.0/24), then they're bridged [08:38] Since you don't know, they probably are [08:39] In which case, the easiest solution would just be to make sure you use the same IP address regardless of which interface you're using. [08:39] hold on [08:39] let me ssh in [08:39] Failing that, rather than UPNP you could just ssh into tomato and use a shell script [08:40] Daviey: any chance you could sponsor the MP for bug 852019? [08:40] Launchpad bug 852019 in octopussy "Octopussy not installable due to renamed dependency" [High,In progress] https://launchpad.net/bugs/852019 [08:40] twb`: the router has a lot of interfaces [08:40] br0, eth0, eth1, lo, vlan0, vlan1 [08:40] jamespage: no, because i hate you. [08:41] * jamespage is feeling the love this morning :-) [08:41] vlan1 has my public ip [08:41] stiv2k: no, the interfaces on your laptop or whatever [08:41] oh [08:42] jamespage: crappy weather for you aswell? [08:42] SOmething like http://paste.debian.net/130942/ [08:42] Daviey: meh - kinda average here [08:42] twb`: wtf is ip a ? [08:42] A command. [08:42] Like "ifconfig" only not shit [08:43] twb`: http://pastebin.com/GWRpJcNm [08:43] hahaha [08:44] i use wicd to connect to the wireless network [08:44] stiv2k: yeah, OK, now check if when you switch to wired, it also gets a 192.168.1/24 address [08:44] twb`: it does [08:44] OK, so then just make sure you get the same IP on both [08:44] hmm ok [08:44] great, LP seems OOPsy today :( [08:44] Not that the same time; I mean whichever you're on, it is always (say) 192.168.1.10/24 [08:44] what if the wired connection is plugged in and wireless is still on too? [08:45] stiv2k: then it explodes [08:45] stiv2k: but it should explode in that case anyway [08:45] will the machine become unreachable [08:45] to anyone [08:45] Depends [08:45] Probably something like RPF will just throw away half the packets [08:45] what is RPF [08:46] Magic [08:46] Short version is: make sure you don't raise both networks at once [08:46] there is a wireless switch on the machine [08:46] (It *can* be done, but it's a huge pain in the arse and you don't want to do it.) [08:47] i just need to remember to disable the wireless before plugging in the ethernet [08:47] i should test it out [08:48] i imagine it would still destroy all the existing connections [08:49] meaning i would get kicked off irc and all my clients would get kicked off too [08:50] ok here we go [08:50] stiv2k: or script it to do so [08:52] SOmething dirty like this http://paste.debian.net/130943/ [08:55] hello [08:55] i'm still here [08:55] cool [08:55] it worked, twb` [08:56] twb`: how would i script the system to do that [08:56] Good day everyone. I'm trying to enable and use IPv6 on my Ubuntu Server 11.04-machine, I've tried to add my IPv6 address to eth0 (I still want to be able to use IPv4) and add the correct route, but nothing seems to work. And this https://wiki.ubuntu.com/IPv6 article did not help at all, it's just about tunneling. [08:56] And it's on the machine that the problem is, not the network. :) [08:59] stiv2k: to do what? [09:00] yo, wtf [09:01] every time i plug in the cat5 cable, it gets a dynamic ip [09:01] i have to do /etc/init.d/networking restart [09:01] and THEN it gets the static ip i assigned it [09:01] Markslap: you should already have an IPv6 address listed in "ip a", that is autonegotiated a la IPv4's zeroconf [09:02] inet 78.46.87.39/27 brd 78.46.87.63 scope global eth0 [09:02] inet6 2a01:4f8:120:14e1::10/64 scope global [09:02] has anyone deployed openstack or eucalyptus on ubuntu yet and want to share thoughts? [09:02] Like that? [09:02] Markslap: well, yes, that's your IPv6 address [09:02] twb`: http://stats.stiv2k.info [09:03] tell me you like my load averages [09:03] stiv2k: doesn't work. You shouldn't be using PHP anyway [09:03] huh [09:03] so its not visible then [09:03] whats not working? [09:03] stiv2k: I get a response, but there's no load average there. [09:04] what do you see? [09:04] http://paste.debian.net/130947/ [09:05] twb`: Mkay, but when I tell Irssi to use that IP address i just get this error when trying to connect to a IPv6-enabled server: 11:04:21 -!- Irssi: Unable to connect server efnet.xs4all.nl port 6667 [No route to host] [09:05] what...oh [09:05] twb`: stop being a smart ass [09:05] you could have just said "i dont have a browser" [09:05] stiv2k: if you expect me to be using a browser with js, or css, or colour, or images, you are wrong. [09:05] My browser implements HTML. That's it. [09:05] lol [09:06] so you can't look at at like... 90% of the internet [09:06] It means I have a nice consistent interface and you stupid webdevs can't fuck it up or spam me with ads [09:06] stiv2k: yes, the 90% that is where 4chan and youtube and other useless time-wasters hang out [09:06] technical and academic resources work just fine [09:06] hehehe [09:06] (Except blackboard, but that's retarded.) [09:07] twb`: i use youtube for technical and academic resources all the time [09:07] Now now, stop quibbling. You got different needs and tastes. [09:07] IME there are no technical youtube videos where you can't jsut throw away the video stream [09:07] In any case, mplayer can do youtube better than some silly browser [09:08] ersi: right. It's just MY needs are more important :P [09:08] lmao [09:08] anyhow [09:08] what i was saying earlier was [09:08] can i write a script that will bring wlan0 down upon plugging in the ethernet cable [09:08] or bring wlan0 up upon disconnecting it [09:08] stiv2k: on plugging it in, or on DHCP completing? [09:08] I showed you how to do the latter [09:09] i dont use dhcp [09:09] The former would go in /etc/network/if-up.d or so [09:09] otherwise i wouldnt be able to get my port forwards to stay consistent [09:09] Sure you woud [09:09] *would [09:09] explain? [09:09] Just teach the DHCP server to supply the correct IP [09:09] hmmm [09:09] Admittedly that might be hard to make it send the same IP to both [09:10] But failing that you could tell your DHCP client to refuse leases that don't match, and to specifically ask for the lease you want [09:10] You'd have to make sure you released the lease on the old iface before switching, tho [09:12] i think im going to finally fall asleep [09:12] 5:12am [09:12] Likewise [09:17] kim0: [09:17] koolhead11: hey man [09:18] came to know about this company called system76 they sell hw with only ubuntu as sw on it. :D [09:19] os [09:20] Daviey: hello [09:21] yeah some nice laptops there I guess :) [09:23] hey koolhead11 [09:25] kim0: they are selling servers too man. :D [09:51] rbasak: Fancy reviewing a branch for me please? [09:52] Daviey: sure [09:53] rbasak: it's updating the diff... but https://code.launchpad.net/~davewalker/ubuntu/oneiric/dnsmasq/add_dnsmasq-utils_package/+merge/75988 [09:57] * rbasak waits [09:58] maybe i borked it by requesting a merge before LP had scanned the branch [10:11] rbasak: hey [10:11] hey koolhead11 [10:12] how have you been? and is cobbler thing got solved for you? [10:14] rbasak: am waiting for your blog on same. :D [10:14] I got it working in the end, thanks. There were a few hurdles - remind me of the one you are thinking about? [10:15] Was it the installer not finding the disk and ending up in a loop? [10:24] jamespage: Do you fancy review and if suitable sponsoring, https://code.launchpad.net/~allison/ubuntu/oneiric/backuppc/bug-852484/+merge/75973 ? :) [10:25] Daviey: sure - lemme just finish up what I am working on [10:25] jamespage: no hurry. [10:25] Daviey: ack [10:41] Daviey: should I be testing the build? In principle it looks good to me. What's the purpose of the Conflicts: line, and if to stop it going with a previous version before the new package, then surely it should be against 2.58 and not 2.40? [10:42] * rbasak isn't really sure how to go about doing a review here [10:44] rbasak: My assumption was that the contrib script wasn't in <2.40. [10:45] rbasak: Is there anything cosmetic, does it build, does the new binary deb contain files you'd expect? [10:45] does the damn thing install? [10:45] pick a few of the above. [10:45] Daviey: but the contrib scripts are built in the source. What's that got to do with a binary dependency? [10:46] Tear me apart. kkthnx [10:46] rbasak: Yes, but i assumed the upstream source of <2.40 didn't include contrib/wrt/dh* [10:47] oh [10:47] yeah but why would one need a conflicts for that? A binary built from this source would have them [10:47] rbasak: honestly, i don't know.. perhaps <2.40 produced the same binary? [10:48] NFI, it's a change that came from the debian maintainer. [10:48] I don't suppose it matters [10:48] But good question, one that i now want to find out. [10:48] That was the one thing in the diff I didn't understand, that's all [10:50] rbasak: Great, so add a comment to the merge proposal, if you approved it - i'll upload it. If it turns out to be bad, i'll blame you.. thanks :) [10:50] Daviey: minor version bump with just bug fixes does not need a FFE right? [10:50] jamespage: correct-a-mundo. [10:50]