[00:09] smb: re vsftpd vs. lxc earlier, it looks like Debian "fixed" it by updating the version of vsftpd in stable to 2.3.4 -- bleh [00:21] lynxman, if its not in the packages now it will be thursday [00:22] it will be thursday [00:24] seeing twb` online makes me sad. It's a reminder that he has gone home, had an evening, slept, had breakfast, and gone back to the office - with me barely leaving the computer. [00:28] heh [00:46] What is "breakfast"? [00:46] It's only 11AM, I have yet to break fast [01:16] New bug: #854343 in rabbitmq-server (main) "erlexec crashed with SIGSEGV in free()" [Undecided,New] https://launchpad.net/bugs/854343 [01:55] smoser: rocking! [01:56] lynxman, it looks like that should have it [01:56] https://launchpad.net/ubuntu/+source/nova reports we're currently at revno 1173. that commit went in at 1171 [01:56] so, fingers crossed, canonistack will have it soon. [01:58] smoser: While it's in the repo this week I'm happy [01:58] we're hoping / expecting to grab another snapshot tomorrow morning [01:59] https://launchpad.net/nova/+milestone/2011.3 [01:59] i'm the only one on that list. [01:59] weee! [02:00] smoser: You have too much fun [02:10] hey guys, what would you suggest to use as an email server? [02:14] CluelessPerson, postfix is the recommended option, this is covered in some detail in the ubuntu server guide === jjohansen is now known as jj-afk [02:18] qman__, Cool, thanks [03:09] Can someone confirm the current kernel version in 11.04 server please? I have 2.6.28-11-server [03:15] Tohuw: rmadison -s natty-updates linux-server says: linux-image-server | 2.6.38.11.26 | natty-updates | amd64, i386 [03:22] hmmm. thanks, jmarsden. So, I have 11.04, 2.6.28-11-server, and am facing this problem:https://bugs.launchpad.net/ubuntu/+source/linux/+bug/852972 . Does anyone have any insights as to how I can get to a bootable system? [03:22] Launchpad bug 852972 in linux "Kernel 2.6.28 Returns NAK bailout from sendbytes on startup" [Undecided,Won't fix] [03:24] For some reason, Brad Figg decided my bug was against Jaunty, but it really isn't. The install started life as an 11.04 [03:26] Tohuw: Ask about that in #ubuntu-bugs, and hopefully get that bug back to New or whatever status it should be in. [03:26] Thank you [03:26] Tohuw: You're welcome. [03:33] Is there a way to configure post fix to not need users to be on the system? [03:33] So that you can just have as many users as you want, but don't need that many user accounts? [03:33] Tohuw: Hmmm, the natty base kernel is 2.6.38, not 2.6.28. That might explain why people think you are running Jaunty :) [03:34] Haha yes I just realized that [03:34] I could have sworn it said a 2 there... [03:34] :( [03:34] CluelessPerson: Yes, it is called virtual mailboxes. [03:34] I suppose I'll just refile the bug... getting no feedback out of #ubuntu-bugs [03:35] jmarsden: why can't I pick a specific kernel to file the bug against, only the "linux" package? [03:35] jmarsden, Thanks. I just wouldn't know what to search for in google to find those answers. [03:35] After all, my bug is really 2.6.38-11-server specific, I believe [03:35] CluelessPerson, there's a few different ways to set them up, too, so make sure you stick with one guide [03:37] qman__, got it. :D [03:38] CluelessPerson: For an example direct from the postfix documentation, read http://www.postfix.org/VIRTUAL_README.html#virtual_mailbox [05:47] Hi [05:48] my pastebin is here http://pastebin.ubuntu.com/693541/ [05:48] I have 2 physical CPU and 4 physical CPU [05:50] let me pastebin it again [05:50] http://pastebin.ubuntu.com/693544/ [05:50] core is seen as 16 in 4 physical CPU and not as 32 [05:51] help me understand [05:52] one has hyperthreading & the other doesn't? [05:52] which one has HT ? [05:52] 2 physical CPU or 4 physical CPU ? [05:52] probably the first, if it's 2 CPUs of 4 cores each [05:53] oh ok [05:53] is there a way to see HT is enabled ? [05:55] ht in the flags line should show if it's capable of it, not sure if it's enabled [05:55] * ajmitch may be wrong there [05:59] is there a way to see HT is enabled ? [06:02] afaik, just from looking at the numbers that you saw in /proc/cpuinfo - number of physical CPUs & number of cores [06:02] kaushal: you can often toggle it in the BIOS [06:05] twb`: ol [06:05] ok* [06:41] New bug: #854457 in samba (main) "Panic or segfault in Samba every 30 mins" [Undecided,New] https://launchpad.net/bugs/854457 [06:56] Morning rat fans! === smb` is now known as smb [07:09] hello [07:09] is it possible to backup file with tar ? [07:10] iuytfr: yes. [07:11] how ? [07:12] iuytfr: The question is far too opened ended. [07:13] New bug: #706354 in ntp "dpkg-maintscript-helper: warning: environment variable DPKG_MAINTSCRIPT_PACKAGE missing" [Undecided,Confirmed] https://launchpad.net/bugs/706354 === jj-afk is now known as jjohansen [07:16] just give me some clues to begin [07:41] wtb double check on amazon web services network load === sanderj is now known as Sander^work [08:31] New bug: #854518 in samba (main) "package libsmbclient 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: subprocess dpkg-deb --fsys-tarfile returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/854518 === himcesjf1 is now known as himcesjf [08:32] hi all [09:29] hi [09:29] i noticed something weird with my server [09:30] it tries to give a dynamic ip to eth0 [09:30] whenever i plug the cable in [09:30] even though its configured static in /etc/network/interfaces [09:30] also it seemed to try to 'renew' the lease on its own and my server became inaccessible for a short while [09:30] sounds weird indeed. Mind pasting your interfaces file on fpaste.org? [09:30] lol fpaste.org [09:31] one sec [09:31] ersi: http://fpaste.org/JxLO/ [09:33] @aspire .. Is this a laptop? Do you have NetworkManager running? [09:33] its a netbook [09:33] there is no graphical interface [09:33] but i use wicd for the wireless card (wifi disabled right now) [09:33] oh, I get your 'lol' now. I just took whatever pastebin was in my memory :) [09:34] not sure about network manager though [09:34] heh [09:34] well, wicd is a 'network manager' [09:34] ersi: does it manage wired interfaces? [09:34] I would not be suprised if wicd is making this happen. Does it happen if you leave wicd off? [09:35] Yes, wired and wireless. It's a full fledged network manager [09:35] ok [09:35] that probably explains it [09:35] probably, but I'm unfortunally not certain [09:35] i should probably just configure wicd to use a static ip and then leave /etc/network/interfaces as it was [09:35] check if there's any way for it to leave your wired interfaces [09:35] yeah, sounds like a good plan [09:35] lets put it to the test [09:37] hello [09:37] there [09:37] there is one memory which is in failure on my server [09:38] how to find the one in failure ? [09:39] You remove the sticks and test them one by one with memtest [09:39] That's what I would do. [09:47] no [09:47] that's boring [09:47] i want to identify the one in failed by cli [09:48] hrmf... I have this apache virtualhost, enabled under /etc/apache/sites-enabled/icinga.nilu.no.conf. Even though the config looks right, apache falls through to the 'default' site. See http://paste.ubuntu.com/693652/ for the virtualhost [09:49] I've seen this before, but never managed to fix it without removing the default site - any idea how I can fix this? [09:50] where is no ? [09:50] icinga lol [09:51] that's a perfect solution to hacking your server [09:53] well do you ensite your conf ? [09:57] RoyK: please see http://httpd.apache.org/docs/2.2/vhosts/name-based.html "The main host goes away" section should refer to your situation. [10:01] iuytfr: Well, good luck and tell me if you find a solution [10:01] Only thing I could imagine would be if you'd somehow correspond the memory locations that are broken to which stick handles that location [10:11] you can also find with dmidecode [10:31] anyone have any experience using pptp on a virtual interface, or routing all of its traffic over one? === J__ is now known as Joe- [10:52] hey all.. Easy question here. I just created a new logrotate file that I want to run now. I thought the command logrotate newfile would run it now but it didn't seem to work. What am i missing? [10:54] nevermind. Ran with -d and then -f. All is well. [11:53] Hi, I'm awfully confused with bash on a lucid machine. [11:54] I'm sourching a file in our .bashrc and setting some environment variables [11:54] but those variables don't seem to be accessible from any cron [11:54] Even though my cron has a (. /home/username/.bashrc && /path/to/script) [11:55] the script doesn't seem to know of any of the environment variables which is in another file and sourced in .bashrc [11:55] Thoughts? :) [12:02] nigelb: Hmm.. so you've caught on that cron doesn't know about evn variables.. good. [12:03] I normally declare them *IN* the crontab. [12:03] Odd that sourcing doesn't work :/ [12:24] Daviey: Yeah [12:25] BUt I have a bunch of common variables. [12:25] Common to the code I'm deploying. Like, its part of the codebase. So we source all that into the user's bashrc [12:33] Daviey: I just prepared a MP for the merge of asterisk from debian if you would like to review [12:35] hi [12:35] what is the tool for simulating traffic [12:50] jamespage: rocking, will do [12:51] Daviey: I reviewed the upstream changelog and it appears to be bugfix/secfix only [12:51] but would appreciate a second opinion [12:51] there are **alot** of them [12:52] jamespage: yeah, seemed silly to even consider cherry pickin [12:53] Daviey: I was unsure about the VCS change in the MP - the branch it points to seems out-of-date so we might drop that [12:55] jamespage: Yes, that must go - please [12:55] Daviey: ack - I'll remove it now [12:55] switch back to debian stuff [12:56] nigelb: so, crontab isn't using bash? [12:56] nigelb: stock .bashrc isn't suitable for sourcing. [12:56] Daviey: crontab is using bash. [12:57] nigelb: create a crontab with: [12:57] Daviey: and we have done it before [12:57] MAILTO:nigel@funkyguy.com [12:57] * * * * * . /home/dave/.bashrc && env [12:57] email address and ~ needs updating. [12:58] hggdh: hey, my bugcontrol membership is about to expire, and it told me to ping you about it :) [12:59] hallyn: You know you get it for free now, right? [13:00] hallyn: you are in two teams which give you indirect membership. What more do you want? :_) [13:04] Daviey: I sort of hacked a fix. [13:05] I sourced the file which has our custom env varibales [13:05] that fixes "most" problems [13:05] The rest, I'll just manually correct the scripts to work with that. [13:05] Daviey: will you hate me even more if i uploaded a new nova snapshot today? [13:07] zul: no, we've planned for it. [13:07] zul: I like how you assume that Daviey hates you already :P [13:07] Daviey: ok...i have to check the tarball first [13:07] Daviey: asterisk branch updated [13:07] nigelb: oh i already know he has lots of love for me [13:07] zul: Can you merge vish's branch? [13:08] zul: dnsmasq-utils one.. and might want to check how change our conf to enable it by default. [13:08] Daviey: right did the new dnsmasq make it in? [13:08] zul: yup [13:09] well, i cherry picked that single part. [13:09] Daviey: where is it right now? [13:09] like bug number etc etc etc [13:11] https://code.launchpad.net/~vishvananda/nova/ubuntu/+merge/75875 [13:12] and bug to reference is bug 852771 [13:12] Launchpad bug 852771 in nova "dhcp leases are not released on instance termination" [Medium,Confirmed] https://launchpad.net/bugs/852771 [13:13] Daviey: ok then i'll ignore :) [13:14] Daviey: thanks [13:14] zul: I'm trusting that you still have the nova-spawning-multiple-containers bug under control. Pls ping if you want me to look at it after all. [13:15] hallyn: yeah its still on my list [13:17] zul: excellent [13:17] hallyn: i know where its failing though at least [13:18] my last reproduction attempt was still failing due to the other nova bug you were solving :) [13:18] That is like looking down the barrel of a rifle, whilst holding the trigger and saying - "well, i know where the bullet comes from" [13:23] Hi I'm trying to install server 11.04 amd64 but the installation hangs around the network config point before partitioning). Could anyone help with why, (server 10.04 installs fine)? [13:31] who wants to review a diff i'm about to upload? [13:32] (limited time offer, open to anyone) [13:35] Guest76352: feel like trying the 11.10 beta? [13:40] zul: around [13:41] koolhead11: kind of...kind of busy right now [13:41] zul: openstack-dashboard is broken pkg [13:42] koolhead11: yeah debdiff welcomeed [13:45] zul: http://paste.ubuntu.com/693777/ python-django-mailer seems to be the culprit [13:46] koolhead11: cool...can you open up a bug about it...ill try to have a look at it today [13:46] pmatulis: is that going to be lts? [13:46] Guest76352: no [13:46] zul: cool. at same time i will try installing dashboard using the github source. [13:46] pmatulis: but 12.04 will be? [13:47] Guest76352: yes [13:47] i will use keystone packge from our oneiric repo [13:47] pmatulis: so if I install 11.10 beta I can just update and will, somewhere around release day, be using the stable version? [13:48] Guest76352: yes [13:49] pmatulis: ok then, I'll give it a go - I just booted from the 11.04 desktop cd alright and it's found my LSI SAS OK === scar[w]_ is now known as scar[w] [14:05] zul: Have you added conf for nova to use dnsmasq-utils thingy by default? [14:05] Daviey: yep i added vishy changes and doing a testbuild and testrun [14:06] awesome. [14:06] vishy changes being the add dnsmasq-utils and updating the nova-sudoers [14:13] zul: https://bugs.launchpad.net/openstack-dashboard/+bug/854732 let me know if you need more info [14:13] Launchpad bug 854732 in openstack-dashboard "Broken openstack-dashboard package" [Undecided,New] [14:13] koolhead11: thanks [14:20] koolhead11: More info, in the form of a patch, would be great [14:23] Daviey: ? [14:24] koolhead11: If you had a patch which fixes it, it would be great! :) [14:28] Daviey: i will try installing it from the source. The way dashboard keeps changing it must be 2 difficult to keep updating dashboard package. [14:30] koolhead11: well we need to update soon. [14:30] Daviey: after 22ned once diablo relases will be good time i think. :) [14:31] heh [14:35] jamespage: call time? [14:35] robbiew: sure [14:35] jamespage: g+? [14:35] robbiew, +! [14:35] or +1 [14:36] heh === himcesjf1 is now known as himcesjf [14:47] Daviey: the problem is that quantum is a package dependency of dashboard now [14:51] pmatulis: so far so good, 11.10 b is installing and it's way past where 11.04 go stuck (which looks to perhaps be the ipv6 bit) [14:52] Guest76352: how did you try installing 11.04? [14:53] Guest76352: sounds fishy (10.04 good, 11.04 bad, 11.10 good), after confirming beta is good you may consider remaking your 11.04 CD (or however you installed). also consider testing 10.10 [14:58] zul: quantum?! [14:58] do we care for this release? [14:58] oh! [14:58] Daviey: yes and no [14:58] dashboard is a dep of quantum! [14:58] i see [14:58] bah [15:02] pmatulis: 11.04 was a default install. I ran the media test also [15:03] pmatulis: with 10.04, 11.04 and 11.10 all just boot from CD and hit 'Install Ubuntu' [15:03] pmatulis: 11.04 just gets stuck around the network config area before the partitioning - tried it 3 or 4 times [15:04] Guest76352: if you want to help you can re-attempt a 11.04 install and when it gets stuck get to a console (alt-F2) and look at the logs [15:04] /var/log/installer/syslog [15:04] Yeah I don't mind doing that [15:05] be good if I could help [15:08] Daviey: nova has been uploaded [15:08] Daviey: hey...so with eucalyptus still broken....do we want to consider removing it from the archive and either pulling the upcoming 3.0 release into partner or pointing users to the eucalyptus website? [15:09] zul: \o/ [15:09] robbiew: it isnt the final version :( [15:09] /o\ [15:10] robbiew: should be there friday [15:10] smoser: if you're not going to have time to sanity-check bug 850309, can you re-assign it to SpamapS? (and if he doesn't have time, he can toss it back ot me and i'll just "go for it") [15:10] Launchpad bug 850309 in libvirt "libvirt fails to autostart VM attached to a bridged port" [Medium,Confirmed] https://launchpad.net/bugs/850309 [15:10] *\o/* [15:10] * robbiew stops his irc mime practice [15:12] here i thought those were pom-poms :) [15:12] "give me a j! give me a u! give me a j..." [15:13] i'm having the hardest time figuring out the differences between the -virtual kernel and the -server [15:13] can anyone help? [15:13] i think virtual has xen support and fewer hw drivers [15:14] aiui it's designed to run optimally in cloud instances [15:17] robbiew: So, it looks like it is much closer to being fixed than ever [15:17] Daviey: ah [15:17] I think let it run, and hopefuly fixed before release - if not, SRU [15:18] jamespage and SpamapS have both touched it this week. [15:18] Daviey: well jamespage is less confident than you are [15:18] ;) [15:19] Daviey: if it's busted at release, I'm fearful of users upgrading without reading release notes...and breaking their Euca deployment [15:20] robbiew: yeah, that is valid. [15:21] jamespage: Has upstream responded for your call for help? [15:22] robbiew: The problem is, that even just removing it from the archive, will still result in a broken system... it's not euca that induced the explosion, it's the depends. [15:22] So it's not even as if they can upgrade, and still keep the euca version from Natty. [15:22] Daviey: actually yes they have - yesterday [15:22] I'd not spotted the update [15:22] Daviey: ah, damn [15:22] jamespage: doh! [15:22] bug 851611 [15:22] james, james, james [15:22] Launchpad bug 851611 in eucalyptus "Oneiric: Upgrade to 2.0.1+bzr1256 blocks" [High,Confirmed] https://launchpad.net/bugs/851611 [15:23] fired [15:23] hallyn: yeah I know it has specifically the /proc/xen hooks, but wasn't sure if there was anthing else [15:23] hallyn: thanks [15:23] as penance I'll look at it now [15:23] lol [15:26] morning fellas o/ [15:27] hey lynxman [15:30] how do i change keyboard layout to scandic? [15:30] Daviey: apologies your optimism was well founded [15:33] jamespage: Initial signs look promising? [15:33] Daviey: yes [15:34] Great, now we need to sort out the nova to openstack migration path ;) [15:35] Is there some kind of tool I can use to get update notifications for my ubuntu servers? Something like update manager for desktop, but something I can access remotely that is aggregated for all my servers? [15:36] !landscape | savid [15:36] savid: Landscape makes the management and monitoring of Ubuntu systems simple and effective by combining world-class support with easy to use online management tools. https://landscape.canonical.com/ [15:36] Anything else is going to require some thought.. [15:37] Hmm, looks cool, but no free/open-source solutions? [15:38] nagios or zabbix could also do it, but would require some hacking [15:38] Ok. Thanks! [15:40] Daviey, get I faster bug fixes when I chase you down on this channel? ;-P [15:40] Daviey, zul, ping on bug 831100 [15:40] Launchpad bug 831100 in mysql-cluster-7.0 "mysql-cluster-7.0 version 7.1.9a-0ubuntu1 failed to build in oneiric" [High,Confirmed] https://launchpad.net/bugs/831100 [15:40] doko: ill take care of that one as well [15:41] doko: Okay - If you use ~ubuntu-server, you get 10 free L3 ping-on-irc credits. :) [15:41] doko / zul: 831100 is in the unapproved queue [15:41] I uploaded it a few hours ago [15:42] Daviey: ah ok [15:43] L3? [15:51] doko: Level 3. [15:56] zul: wow, fast fix on php-imap! [15:56] Daviey: i didnt do it [15:57] ah [15:58] \sh fixed it [16:03] gondoi, the answer is mostly 'nothing' [16:03] Daviey: working now - just booted an instances OK [16:03] hallyn, sorry, i didn't know that had gotten assigned to me. [16:03] smoser: whoa - did it not send you an email? [16:03] i get like 40,000 emails from launchpad [16:04] should run a filter for 'has beena ssigned to you' :) [16:04] zul: and any idea about the php-gettext failure? [16:04] smoser: hallyn: another difference I've seen is /dev/sda vs /dev/xvda [16:04] :/ [16:04] doko: not yet [16:04] smoser: like i say just lemme knwo if you have no time for that [16:04] smoser: hallyn: cept for mav which sticks to sda [16:06] smoser: i'm close to using /dev/null as my Maildir store, i keep running out of inodes. [16:06] gondoi, -virtual is basically -server with a subset of modules [16:07] drivers not relevant to "virtual" are removed. so install size is vastly smaller [16:07] lynxman: you said you were going to do a merge for puppet 2.7.3? you will probably need a FFE [16:08] zul: yeah I'm working on that right now, it's not too many lines, ffe? [16:08] zul: ah yeah, exception :) [16:08] zul: would make the puppet users happy, that's all the reasons I can think of [16:08] lynxman: and then pay with your blood...i mean beer [16:08] zul: my blood is beer at this point already :) [16:12] How can I check my virtual host file when I used to use apachectl? [16:12] gondoi, that will be gone post maverick [16:12] smoser: yeah, it's fixed in natty [16:13] "fixed" [16:13] lol [16:13] smoser: so speaking of removed modules :D [16:13] https://bugs.launchpad.net/ubuntu/+source/linux/+bug/761809 [16:13] plesae open a bug [16:13] Launchpad bug 761809 in linux "Quota modules are missing from the package" [Undecided,Expired] [16:13] ah, you did. [16:13] lol [16:13] been there a while [16:14] gondoi, sorry for missing that. [16:14] smoser: no prob [16:14] obviously it hasn't been hurting us too bad, but we do still get complaints [16:14] please verify it is the case on the oneiric kernel (just unpacking that and listing modujles is enough), then copy me on it, and move it from 'expired' to 'confirmed' [16:15] k [16:15] gondoi, i think we can get that fixed in oneiric [16:15] sweet [16:15] what about backporting? [16:17] how do I check the syntax of changes in sites-available directory? [16:18] smoser: specifically lucid [16:19] gondoi, well, it has to be fixed in oneiric first [16:19] k [16:19] i believe on lucid you can just use the -server modules, right? [16:19] i know that sucks. [16:20] smoser: yes and no, it blows things up cause of the /dev/sda change with using -server [16:20] smoser: it can be done, but we will need to rework a few things [16:21] gondoi, but you can just cheat, right and lay down the -server modules on top of -virtual install ? [16:22] smoser: ahh yes, that is actually the current "workaround" ;-) [16:22] multitask++ [16:28] smoser: how can I unpack the deb package to the directory the file is currently in? [16:28] dpkg -c . [16:28] wait [16:28] dpkg -x [16:28] hm.. [16:28] actually -c will give you contents [16:28] -x extract [16:29] ahhh I overlooked that one [16:29] thanks [16:32] gondoi, so... [16:32] apparently there is a '-virtual-extras' package coming to an 11.10 release near you [16:33] .. [16:33] and it will have the modules that are in -server that were stripped. [16:33] so you can get them that way. [16:33] hmm [16:33] you see that on launchpad somewhere? [16:34] and what about lucid :( "LTS" [16:35] gondoi, right. checking on that. [16:35] okay [16:35] so the way to request that is to have it fixed in devleopment release [16:35] and then request it to be SRU'd [16:35] by "target"ing it to lucid [16:36] but the -extras will not be SRUd === mrmist_ is now known as mrmist [16:56] is there a way to have a block device in qemu mapped on to a directory on the host? or something like a directory on the host presented as a cifs server? [16:58] with qemu? doubt it [16:58] oh, wow, there is for the second question... now can I use it through libvirt? [16:59] yeah the first, would be pretty difficult (but I don't think theoretically impossible) [16:59] it is with vmware, not sure if virtualbox does it also [17:00] patdk-wk: not following, what is with vmware? [17:00] it can mount directories as a shared folder in the vm [17:01] ahh, ok, that must be over cifs/smb or some network fs, sounds like [17:01] nope [17:01] it looks like cifs, but it's a custom thing [17:01] hmm, then there would have to be special drivers for it [17:02] yep [17:03] vmhgfs [17:04] unfortunately it looks like libvirt doesn't support the -smb option for qemu, might there be an xml option for passing an arbitrary string to the qemu command line? [17:09] dunno, never used libvert [17:09] normally just run qemu directly [17:11] its pretty nice for managing your vms in an agnostic way, though iirc it ony supports qemu and xen right now [17:17] adam_g: need to push back our 1:1 by 30min...let me know if that's a problem === lullabud is now known as warzauwynn [17:30] robbiew: fine by me [17:34] Im curiuos, if your running several ubunut servers at one time.. Are there any ways of managing them from a single infterface (other than Landscape, which isnt free) [17:40] Right now Im finding it hard-going to manage packages and software and security across several machines [17:47] Daviey: bug #854899 submitted for Puppet package FFE [17:47] Launchpad bug 854899 in puppet "Update to puppet-2.7.3" [Undecided,New] https://launchpad.net/bugs/854899 [17:58] hallyn: you should about to reuse cgroups shouldnt you? [17:58] rephrase [18:02] zul: assuming you mean't 'should be able to', yes. [18:02] of course if you didn't rmdir it before, and you try to mkdir it now, you will get an error... [18:03] best to rmdir(); if error and error is not -ENOENT then assume it's still in use; else mkdir [18:11] hallyn: cool....me lunches [18:16] utlemming, it would seem we have to re-roll images [18:16] bug 854927 [18:16] Launchpad bug 854927 in openssl "wget, curl can't verify certificates" [Undecided,New] https://launchpad.net/bugs/854927 [18:17] * utlemming acks [18:17] smoser: I know we've already had that conversation regarding the ticket, just figured it could be documented === Ursinha is now known as Ursinha-lunch [18:26] smoser: I'm going to mark that bug as high [18:26] i was just going to ask in ubuntu-release if it would cause global respin [18:26] so yes, i woudl say "high" [18:26] : [18:26] :) [18:27] marked as high and confirmed [18:37] jamespage: im not able to reproduce the concurrency bug [18:39] jamespage: however i suspect what happens when you switch from kvm to lxc nova reuses the same instances and confuses the hell out of the libvirt because you are restarting the same vms wth the same name [18:48] hallyn: how hard would it be to make a debug build of qemu? [18:55] crass: not that hard. in fact can't you just load the debuginfo package? [18:57] crass: see http://askubuntu.com/questions/53708/how-to-create-debuginfo-package [18:58] crass: if you want to compile your own anyway, still not bad. do 'pull-lp-source qemu-kvm', make your changes, then either 'fakeroot debian/rules build; fakeroot debian/rules binary', or dpkg -S -us -uc and then use pbuilder to build [18:58] thanks hallyn, let me look into those options [18:58] (or sbuild, but that takes a bit more initial setup, though it's worth it if you'll be doing a lot of builds) [18:58] np === med_out is now known as medberry [19:03] anyone using imfile with rsyslog? [19:09] I'm having a problem where imfile is sending the same lines over and over to my central server.  I assume it has something to do with the statefile not being used even though it's set in the config: https://gist.github.com/1229913 [19:13] New bug: #756107 in php-imap (universe) "php-imap version 5.3.5-0ubuntu1 failed to build on i386" [High,Fix released] https://launchpad.net/bugs/756107 [19:13] New bug: #854614 in nova "metadata service local-hostname is not fqdn" [Undecided,New] https://launchpad.net/bugs/854614 [19:13] New bug: #854899 in puppet (main) "Update to puppet-2.7.3" [Undecided,New] https://launchpad.net/bugs/854899 [19:13] New bug: #854946 in eucalyptus (universe) "Rampart's configuration on Ubuntu's package doesn't define a default ClockSkewBuffer" [Undecided,New] https://launchpad.net/bugs/854946 [19:14] adam_g: patdk-wk is seeing this, do you think that is related to what you saw.. http://pb.daviey.com/bh4Z/ ? [19:14] New bug: #854555 in postfix (main) "package postfix 2.8.2-1ubuntu2.1 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 75" [Low,Invalid] https://launchpad.net/bugs/854555 [19:14] New bug: #854705 in bind9 (main) "dig returns 0 regardless of result of query" [Undecided,New] https://launchpad.net/bugs/854705 [19:14] New bug: #854731 in nova (main) "PPA: nova_sudoers has bad dnsmasq line" [Medium,Fix committed] https://launchpad.net/bugs/854731 [19:14] New bug: #854779 in vm-builder (universe) "change behavior on ubuntu with proxy apt" [Undecided,New] https://launchpad.net/bugs/854779 [19:21] Who wants to have a go at landing the patch attached to bug 854946 in oneiric? [19:21] Launchpad bug 854946 in eucalyptus "Rampart's configuration on Ubuntu's package doesn't define a default ClockSkewBuffer" [Undecided,New] https://launchpad.net/bugs/854946 [19:31] hi, I need to create lots of user accounts in batch, and some of them I'm importing from debian servers, and I'd like to use those hashed passwords. However lucid's chpasswd utility (1:4.1.4.2-1ubuntu2.2) doesn't offer the -e parameter for supplying encrypted passwords, whereas debian's version (1:4.1.1-6+lenny1) does. Short of using debian lenny's chpasswd binary directly, is there a "proper" way of supplying encrypted passwords in lucid? [19:32] I always just edit /etc/shadow [19:41] philsf: Perhaps usermod -p name [19:44] genii-around, Will try that, thanks. [19:54] jdstrand: Am i correct in saying that adding the 'fix' for bug 844935 to Ubuntu, doesn't change anything for us? [19:54] Launchpad bug 844935 in nova "Nova should not assume the default iptables INPUT filter policy is accept" [Medium,Fix committed] https://launchpad.net/bugs/844935 [19:54] I've added my user to www-data, and I've added www-data to my group. If the owner of all the directorys and the files is my user, shouldn't I not get any permissions errors. [19:54] DROP is just evil IMO. [19:55] Hi anyone knows howto set up openvpn? I´ve been following this guide http://goo.gl/cwFeF and http://goo.gl/ZCElC but it just wont start, it always says fail to start daemon. [19:55] Hello [19:55] I'm trying to get some virtualization runnng on an ubuntu-server with KVM [19:55] Is there any decent management interface I could use? [19:55] Daviey: it shouldn't no, cause we don't enable a firewall by default [19:57] jdstrand: thought so, thanks for the confirmation. [19:58] Daviey: regarding that iscsi thing, im not sure. need more detail? [19:59] patdk-wk: Are you able to provide more detail to adam_g, regarding your iscsi issue? [20:00] not so far [20:00] the only thing I see, it all starts up, mounts the iscsi filesystem [20:00] then says, starting network [20:01] then it says, waiting for network, 60 seconds [20:01] ... [20:01] ... [20:01] then it continues on normally [20:01] I won't have time to check more into it till later tonight [20:01] but I booted wrong the first time, on an old alpha kernel/initrd, and it didn't pause [20:01] but all 4 of my iscsi tests, did [20:02] my 2 local drive installs, didn't have that issue [20:03] all 6 installs, used vmxnet3 nic [20:03] I can probably try on real hardware tomorrow, doing an iscsi test [20:04] only the client machines are virtualized, the dhcp/dns/iscsi/... servers are real [20:07] New bug: #855023 in openssh (main) "64 bit ssh client fails to connect, 32 bit succeeds" [Undecided,New] https://launchpad.net/bugs/855023 [20:15] thanks patdk-wk [20:19] i wonder if this is related to bug #847782? [20:19] Launchpad bug 847782 in netcfg "installer writes a permanent ethernet entry in interfaces file" [High,Confirmed] https://launchpad.net/bugs/847782 [20:19] I think I've been hacked. Can someone help me? [20:21] depends on what exactly you need help with [20:21] jdstrand: Is there any chance of socat being security MIR reviewed today? [20:22] Daviey: I am doing it now [20:22] Daviey: it may not be done today, but I am actively working on it [20:22] qman: agreed -- its a bit lengthy, I just didn't want to waste my time if no one is here :) [20:23] jdstrand: rocking, appreciated [20:24] I've got a suspicious cron entry involving a "y2kupdate" entry, daemons shutting down 'on their own', and instances of extremely high I/O and CPU activity without explanation [20:24] I've shut down the server, but I need to get back into it and fix this without giving the perpetrator access again [20:24] Daviey: should we drop collectd and ganglia's MIR's ? [20:24] I'm afraid that's nigh impossible [20:25] the most effective way and only certain way is to reload the server and reconfigure your software [20:25] oh thats a bit extreme [20:26] unplug the network.. see if you can get your data off safely.. [20:26] then reinstall [20:26] of course [20:26] I didn't mean to give up on his data [20:26] what I'm saying is, once a server is rooted, none of the binaries can be trusted [20:26] well yeah I'd definitely rather not lose all my data -- but problem is, I'm running on Linode, so all I have is console -- anyone know if I can boot up in the console but disable SSH, Apache, etc? [20:27] boot to single user [20:27] binaries are still not trustworthy though [20:27] fair point about the binaries qman -- I hadn't considered that but you're right, I should just offload all my data and start over.. [20:28] I really wish I knew how this happened so I could prevent it.. I thought I was being careful heh [20:28] unfortunately i'm no security expert [20:28] what software do you run [20:29] apache, mysql, postfix/dovecot -- those are the main ones [20:29] the most common points of entry are badly configured SSH or other remote access, and badly written PHP sites [20:29] if the attacker is at all smart, he would have deleted the logs telling you anything about it [20:30] remote logging is the only way around that [20:30] SSH is the most likely if you were up to date w/ security [20:30] hm, its very possible a PHP app is the culprit actually [20:31] well [20:31] hm [20:31] qman__: what are examples for badly configured ssh, besides weak passwords? [20:31] weak keys [20:31] permitting root login if you don't need it [20:31] and using password authentication on a multiuser system, where you don't know all the passwords are good [20:31] hgb^harry: strong passwords will fall too [20:32] yep [20:32] can be a combination too [20:32] password auth, honestly, is a *bad* idea. period. [20:32] a bad site can get the attacker read access to password hashes === Ursinha-lunch is now known as Ursinha [20:32] and a few rainbow tables later, they have root [20:33] hm, good point [20:33] creatorbri: one common thing too is that they'll steal your strong password from some other site during a hack, then try the same strong password with the same username on a bunch of machines. [20:34] and you should _never_ allow password authentication and root access [20:34] keys at least require them to steal *the key* [20:34] ubuntu's default setup prevents root from logging on at all with a password, so permitrootlogon is yes [20:34] OK so what I need to figure out now, is how to get access to my data safely, without allowing the attacker further access [20:34] but if you set a root password, you need to either disable password auth or permitrootlogon [20:35] if linode gets you a 'local' console, boot single user and shut off all the services [20:35] Daviey: actually, I do have a question (in the bug), but am not blocking on it [20:35] then enable a vector for you to get to it [20:35] creatorbri: since you have console, you can use something super hacky like zmodem to download a tarball of it. ;) [20:35] but that's still not perfect [20:35] a hacked kernel or other secret service might be installed [20:36] hmm [20:36] again, just get the data, and leave everything else behind [20:36] yep [20:36] if they were able to sneak a hack into your data.... god help you ;) [20:36] * Daviey looks, jdstrand [20:36] creatorbri: also why aren't you backing up your data? [20:37] * SpamapS goes to lunch [20:37] dang.. I just realized the high I/O, CPU, and Network activity this morning probably means they've downloaded loads of stuff.. including data [20:37] sigh [20:38] if you're worried about legal issues, don't blow away the old server [20:38] just shut it down and make a new one [20:39] also, any passwords you used for anything on that machine are no good, change them if you've shared with anything else [20:39] *nod* [20:40] (02:05:49 IST) qman__: a hacked kernel or other secret service might be installed [20:43] Well thanks for your help qman.. guess I've got some work ahead of me. [21:04] jdstrand: Do i understand that glance (bug 801299) MIR is accepted, accepting the lack of SSL support? [21:04] Launchpad bug 801299 in glance "[MIR]glance" [High,Incomplete] https://launchpad.net/bugs/801299 [21:05] Daviey: I told zul yesterday I need to look at it. all the mirs on on my todo for this week [21:06] Daviey: I need to come up to speed on them as they were only recently handed off to me [21:06] jdstrand: ah, ok - missed that. [21:06] zul: nova is now depwait, waiting on glance. [21:06] jdstrand: understood. [21:16] Daviey: any news about #818177 ? This one is a nasty one if we let it slip into Oneiric [21:16] bug 818177 [21:16] Launchpad bug 818177 in udev "HP DL380G5 root disk mounted read-only on boot and boot fails" [High,Confirmed] https://launchpad.net/bugs/818177 [21:18] lynxman: If you were at the server meeting earlier today, you'd know. :P [21:19] Daviey: *blushes* [21:19] Daviey: I didn't know I was supposed to go :) [21:19] lynxman: Oh, i thought you were part of the Ubuntu Server community.. my mistake :P [21:20] Daviey: lol, so sorry [21:20] * lynxman adds +1 to beers owed to Daviey [21:42] Daviey: lynxman: I assume that's the same thing I'm trying to wrap my head around [21:43] I have questioin -> 8 WinXP SP3 computers are connected to single Ubuntu Server using a Switch device and a wireless ADSL router which has internet in it is also connected to the Switch device.. All the computers are receiving internet & also the server. What I want is I want to block certain website to these computers.. How can I achieve this using Ubuntu Server or something else ? Please Help [21:43] hallyn: I think so... [21:44] hallyn: And i believe it might also be hitting iscsi. [21:44] Daviey: right i'ts just udev [21:44] patdk-wk hit something, perhaps similar.. as did adam_g [21:45] living the dream. [21:46] Daviey: we all hit the same rock, isn't that fun :) [21:46] Daviey: that rock is pretty promiscuous as far as I'm concerned [21:48] lynxman: have made any progress with it? [21:49] hallyn: adam_g proposed a patc [21:49] hallyn: patch even [21:52] adam_g's patch was nacked. [21:52] I'll chase it tomorrow with foundations [21:52] Daviey: so slangasek is on it right? [21:53] * lynxman has deja-vu [21:58] anybody ! [22:02] lynxman: i thought smoser thought that he was, but jhunt is assigned. [22:02] Daviey: hmm... [22:04] tony_787: look at ufw [22:04] * hallyn out, bbl [22:06] so it will apply to all computers running windows xp ? [22:07] no. assuming the ubutu server is a gateway, it can filter based on the xp box' ip addresses [22:07] (or just their subnet) [22:08] i see [22:08] Daviey: would be good to ping jhunt and see how it goes === medberry is now known as med_out === kentb is now known as kentb-out [22:18] lynxman: keep up at the back [22:18] see -devel [22:18] Daviey: aha :) [22:20] Daviey: what's that vacation thing? [22:21] lynxman: i think it is where you are away from the office, working from McDonalds wifi instead. [22:22] Daviey: so that for me is when the power goes out === skrewler_ is now known as skrewler [22:35] zul: So, dashboard depends on python-django-mailer, this is not in Debian or Ubuntu. Are you planning to package it? [22:35] New bug: #855136 in samba (main) "package samba 2:3.5.11~dfsg-1ubuntu1 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/855136 [23:04] Daviey: yeah im pretty sure i did though [23:05] Daviey: ill work on it tonight after liam goes to bed === maknz_ is now known as maknz === cloakable_ is now known as cloakable === erichammond1 is now known as erichammond