[00:06] New bug: #861866 in cloud-init "cloud-init-nonet does not wait for dhcp" [Medium,Triaged] https://launchpad.net/bugs/861866 [00:14] courier imap gives error as 'impad: chroot /root/Maildir unable to access permission denied' and squirrel mail unable to login with 'IMAP service barred login' [00:14] How can i rectify this ^^^ [00:41] kirkland: you are missing two patches in the bzr branch for ubuntu-server-dev [00:51] adam_g: ping [00:51] adam_g: updated keystone ( minor changes ). pull when you get a chance [00:52] negronjl: cool. was just lookin at that a minute ago [00:53] negronjl: did your patch get merged to keystone upstream? im still hitting similar issues even with that one column converted [00:53] adam_g: I think it did but, the charm has an ugly hack that checks for that code and patches it if needed. [00:54] adam_g, what issues are you getting ? [00:55] negronjl: yah i saw the patch in the formula [00:55] negronjl: one sec [00:57] negronjl: actually i lost the juju environment. [00:58] adam_g, I'm testing on my side as well [00:58] adam_g, I am currently deploying mysql, then keystone. [00:58] negronjl: i was basically creating a user, a tenant(i think?) and granting admin to the user (as is outlined in the howto doc) [00:58] adam_g, keystone deploys it's own version of mysql but, you can also add a relation to an existing mysql [00:59] adam_g, keystone-manage tenant add [00:59] adam_g, will report back on how it goes on my side. [00:59] adam_g, are you using the local version of mysql or a relation to the external mysql [00:59] ? [01:00] negronjl: no, an external mysql. tested with innodb and myisam [01:00] adam_g, cool. same here [01:01] ive run into issues with foreign keys, myisam v innodb and nova's sqlalchemy migrations [01:01] adam_g, are you using the openstack.yaml file that I included in the branch ? [01:03] negronjl: yea, db access is fine. ive been dropping the database, reconfiguring storage engine, remigrating, etc. [01:07] negronjl: anyway gotta run for the day, talk to you tomorrow [03:01] hello: ubuntu 10.04LTS uses apache 2.2.14. Security scanners report this version of apache as exploitable. Since Lucid is backported we can assume as long as the latest patch is installed it's indeed not exploitable correct? . [03:01] Part 2. If so, is there a plugin that can be used for security scanners? I know centos has something similiar [03:01] No. [03:02] If you want to know if a CVE fix has been backported, read /usr/share/doc/foo/changelog.Debian.gz [03:02] ^ [03:02] *Often* important vulnerabilities are patched, but not alway. [03:03] gotcha, ty [03:03] Also note that these security patches are backported in lucid-security -- lucid-backports is for new upstream versions. [03:03] let me check that out [03:03] !USN [03:03] usn is Please see http://www.ubuntu.com/usn for information about Ubuntu security updates. [03:14] keep in mind also that vulnerabilities can be patched without upgrading the mainstream version [03:14] e.g. apache-2.2.14-ubuntu3 might have patches that mainstream apache fixes in 2.2.15 [03:14] robo: yeah, see https://wiki.ubuntu.com/SecurityTeam/FAQ#Versions [03:15] you have to read the changelogs or test for yourself to know whether the holes have been closed or not [03:17] however it is generally safe to assume that vulnerabilities in commonly used packages in currently supported releases are patched within a reasonable amount of time [03:18] no guarantees but the track record is pretty good [04:09] qman__: I think that assumption is optimistic [04:09] If I actually had OpenVAS running, I would look through its report and for any scary-looking CVEs, check them in changelog.Debian [04:11] a fair point, but it really depends on your profile [04:11] for most people, it's good enough, but if you're an enticing target, you have to be more careful [04:12] the skiddies have plenty of much easier targets to go for [04:13] s/enticing target/paranoid/ [04:14] If you don't have bear traps in your air ducts, you aren't doing your job as sysadmin [04:14] nothing wrong with that approach [04:14] no such thing as too much precaution [04:15] qman__: proactively killing users to prevent them leaking secrets? [04:15] I guess intel agencies do that, so it's not wrong per se [04:15] heh [04:16] Speaking of which, I should put honeypots back on my todo list [04:17] I think I dismissed them last time because I couldn't think of a reliable way to have a honeypot that nothing could escape *and* be able to get the list of attackers out of it [04:17] (Other than, you know, sneakernet) [06:02] hallyn: why is bug 861547 low? :) [06:03] Launchpad bug 861547 in nova "/usr/sbin/ietadm is missing in /etc/sudoers.d/nova_sudoers" [Low,New] https://launchpad.net/bugs/861547 [06:03] hallyn: it makes nova-volume unusable [06:21] ivoks: have you read the status defintions? [06:22] Daviey: status definitions? [06:22] ivoks: Err, Importance - rather [06:23] <_ruben> anyone ever ran into $ARCH being amd64 instead of x86_64 when trying to build an out of tree kmod? [06:24] Daviey: i was unaware of any changes; i've been too long tied to different definitions [06:31] ivoks: Whilst i agree it could have been a medium, the triager was correct with Low - "A bug that has an easy work-around" [06:33] Daviey: ok, thanks for explanation [06:33] hallyn: ignore my question ;) [06:36] ivoks: fancy adding d/changelog entries? [06:36] leave it marked as UNRELEASED [06:37] Daviey: sure, i just have to finish some other work [06:46] New bug: #862064 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 10" [Undecided,New] https://launchpad.net/bugs/862064 [07:14] jamespage: Your likewise-open upload did also fix bug 655533, right?\ [07:14] Launchpad bug 655533 in likewise-open "[master] package likewise-open 5.4.0.42111-2ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [High,Confirmed] https://launchpad.net/bugs/655533 [07:28] hey all. Can someone tell me what I can do to get the file names to print out before they are displayed when I do this? find . | xargs -n1 grep -ils loglevel | xargs -n1 -I {} head {} ? [07:29] hello [07:30] do I need to import a database schema for postfix mysql support? [07:33] Kartagis: no [07:34] Kartagis: the installer for mysql comes with the default schema [07:34] the postfix one comes with an "empty" schema if that makes sense === smb` is now known as smb [07:47] Anyone know what to do when you cat a file and your encoding or something changes? This is my prompt after I hit cat on a file: T␤┤ S␊⎻ 29 03:46:09 [07:47] /⎽⎼┴/┬┬┬/┘┼⎼16/┐⎺⎽┐␋┘⎺┤⎼┼␊≤.␌⎺└/⎻┤␉┌␋␌▮␤├└┌ [07:47] jasonmsp: reset [07:47] tput -reset [07:47] thanks! [07:47] no - [07:48] no for which? [07:48] no - he means [07:48] ah.. thanks.. [07:48] thank you twb [07:55] would this http://www.pcpro.co.uk/reviews/servers/364444/hp-proliant-microserver be a decent platform for ftp/www/file sharing server, using 2nd disk as mirror or rsync redundancy, running ubuntu server of course? [07:55] thoughts? [08:01] brontosaurusrex: Ubuntu UK Podcast did a review of it, you could do worse than listen to that. [08:01] brontosaurusrex: or ask popey.. he has at least one. [08:02] Daviey, tnx, let me google [08:03] ikonia: do I create the table manually then? [08:03] Kartagis: what table ? what are you trying to do (little bit of background please) [08:04] ikonia: I'm trying to have postfix work with mysql [08:04] Kartagis: you'll need to create the database for that manually, or use a software package that creates them for you as part of the install [08:05] Kartagis: you'll also need to make sure your postfix install was built with mysql compatability linked in, I don't know if it does it native or links against the mysql client [08:05] I think it's against the client [08:06] brontosaurusrex: I haven't used proliants, but I get the impression they're reasonably good tier1.5 gear [08:07] I did hear one horror story where their smart PSUs sent bad juju back down the power line and caused the UPS to turn off everything whenever you plugged a proliant into it, tho [08:08] twb, any suggestions on how to go with mirroring? is raid1 really the best option? or would a croned rsync do better? [08:08] That depends what you want [08:08] well, basically a constant uptime with all the files and all the functionality :) [08:08] Here, we have three-way RAID1 on the local system, combined with offsite backups using rsync + cp -al to create incremental snapshots. [08:09] brontosaurusrex: you aren't going to get constant uptime [08:09] You will be lucky to get five-nines with LTS on a proliant [08:09] ok, near-constant uptime, basically redundancy, something that people can trust to store their master videos as well, not just intranet proxies [08:10] What risks are you guarding against? [08:10] harddrive crash [08:10] A disk dying? The RAID controller dying? The building burning down? The user accidentally rm -rf'ing? [08:10] If you're only concerned about the first, a two-way RAID1 will suffice [08:11] yeah, basically against hd crash and silly admins risk (against myself) [08:11] how is raid1 agains silly admins? [08:12] What do you mean "silly admins" ? [08:12] Daviey: I think so - I need to re-install and re-test the upgrade again when we have something that actually might work [08:12] rm -r [08:12] brontosaurusrex: zero safety [08:12] brontosaurusrex: RAID1 won't help against that *at all* [08:12] so rsync is better i guess? [08:12] jamespage: I might test it in a natty cloud image. [08:13] yes - not a bad idea [08:13] ( jamespage: morning btw ) [08:13] Daviey: good morning to you as well! [08:13] brontosaurusrex: like I say, I have local RAID1 and offsite rsync+cp -al [08:14] ZFS or BTRFS snapshots are better than cp -al, but they're also a pain [08:14] offsite like over intranet or external drives or ... ? [08:14] brontosaurusrex: If you have silly admins, you are probably doing it wrong :) [08:15] Daviey, well, my current server has 120 days of uptime, but the fact that there is no redundancy makes me nervous [08:15] brontosaurusrex: either over the internet, or over intranet to the other end of the site for large campuses, or to removable USB HDDs that the user is responsible for rotating [08:15] twb, ok [08:15] rotation is bad because then the user can forget [08:16] of course, i need a "no admininstration" needed system [08:16] New bug: #862129 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: subprocess new post-removal script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/862129 [08:17] You mentioned videos; rsync of videos over internet is gonna be painful [08:17] brontosaurusrex: Offsite is always Off site. [08:17] brontosaurusrex: Otherwise, it isn't offsite :) [08:17] For stuff like maildirs and office docs, it is fine [08:17] pst files completely rape rsync, tho [08:17] twb, then it will be an usb disk that always on? [08:17] lol [08:18] brontosaurusrex: you'd arrange it such that the USB disks automount, and one is always onsite and one or more are in transit / offsite [08:18] yes, the videos can be in Gb [08:18] e.g. you say to the user "every friday, bring disk A in and take disk B home, and vice-versa every other friday " [08:19] Personally I really hate that design [08:19] all tutorials/documentation n stuff says i have to first tell mdadm i'm going to remove my faulty disk before i can actually remove it. [08:19] twb, sounds good, so this can be easily automated in a way that the rsync will see any usb disk with the same path and everything i guess? [08:19] acemo: well, no, you can just yank it out and it'll be as if the disk exploded while it was in there [08:19] brontosaurusrex: udev can handle the mounting [08:20] brontosaurusrex: give all USB HDDs the same filesystem label (tune2fs -l) [08:20] I didn't do that and now my new hard disk is seen as a spare disk. Is there any way i can tell mdadm that the removed disk is actually gone? [08:20] hrmm, yeah, how about rsyncs to a win/mac workstations overnight? [08:20] acemo: so activate it [08:21] acemo: madadm --add /dev/md0 /dev/sdz1 or whatever [08:21] brontosaurusrex: you cannot back up windows machines [08:21] They have no inodes, so it is impossible without specialist Windows backup tools [08:22] no, just the file transfer of files to windows machine [08:22] I don't follow [08:22] twb thats what i did and then it became spare.. [08:22] well, the editing workstations are either: win, mac or linux, server is ubuntu, so can i use an editing workstation overnight as a rsync target? [08:22] or something similar [08:22] acemo: I don't remember what to do next, RTFM, sorry [08:23] brontosaurusrex: I *really* wouldn't rely on Windows for anything important [08:23] brontosaurusrex: apart from anythign else, rsync over the wire will need SSH and rsync installed on the Windows box, so you'll need cwrsync or full cygwin [08:24] right, so OS X would be much easier as a target? [08:24] Well, it's a fucked-up 80s vendor wars-style unix [08:25] But at least it isn't VMS like NT7.1 [08:25] twb: been reading the manual and random tutorials for a few hours already.. haven't found anything yet.. oh well.. back to searching :) [08:26] so what if i upgrade this existing server with some new HDs and get proliant as a backup server? [08:26] acemo: raid1 or raid5 [08:26] twb: raid 1 [08:27] All I can see is mdadm /dev/md0 --add /dev/sdz [08:28] same here.. thats what pretty much everything on the internet says [08:28] pastebin mdadm --detail output [08:31] twb: http://pastie.org/private/q4rhmkssc6qhq1s94oeaq [08:32] And /proc/mdstat ? [08:32] What *I* think is that you've successfully added it, and it'll stop being a spare automatically when the resync finishes [08:32] /proc/mdstat http://pastie.org/private/xruou3g5ets1askaro5bmw [08:32] thats what i was asuming myself too.. [08:33] BTW, recommend you enable write-intent bitmaps [08:33] They're the RAID equivalent of a filesystem journal [08:33] (-binternal on --assemble/--grow) [08:33] unfortunately as soon as its done it will show the removed disk again.. [08:33] atleast thats what it did the last time [08:33] acemo: hm, I can't explain that [08:34] acemo: unless the new disk is too small or something? [08:34] thanks for the tip, i'll enable that when its done [08:34] Check /proc/partitions [08:34] /proc/partitions http://pastie.org/private/kvpxql5wonuveqju9egsig [08:34] their the same size.. [08:35] OK [08:38] jamespage: Did you have time to reproduce bug 801494, with a sleep()? [08:38] Launchpad bug 801494 in ubuntu "Multi part LVM layout: system fails to boot due to missing volumes" [High,New] https://launchpad.net/bugs/801494 [08:38] (/me suspects not! But thought i should ask) [08:38] no [08:38] Daviey: no [08:39] i guess best thing to do is 1) wait for it to be done syncing 2) --grow -binternal 3) hope that somehow its not putting it as spare yet again. [08:40] jamespage: Ok.. hopefully jhunt will have a proper fix today, we can test against :) [08:41] ikonia: How did you get on with bug 831121 or bug 831179? [08:41] Launchpad bug 831121 in dovecot-antispam "dovecot-antispam version 1.4~rc3-1 failed to build in oneiric" [High,Confirmed] https://launchpad.net/bugs/831121 [08:41] Launchpad bug 831179 in dovecot-metadata-plugin "dovecot-metadata-plugin version 0.0.1~hg144-0ubuntu1 failed to build in oneiric" [High,Confirmed] https://launchpad.net/bugs/831179 [08:41] Daviey: I'm returing to it at 12:00 [08:41] let me get the number of the one I'm working on [08:41] I've got it building, [08:41] I hate my users [08:41] (can only get to the test kit when I'm on a different network [08:41] ikonia: rocking! [08:42] I even write .ssh/config rules for them and they still insist on doing things wrong [08:42] Daviey: working on 831121 [08:42] twb: I swear you are the BOFH. [08:42] I am [08:42] ikonia: ok, thanks [08:42] not touched 831179 as I'm doing one at a time due to limited time/resources [08:42] Daviey: well, not THE BOFH [08:43] Daviey: Simon's a kiwi [08:43] twb: :o [08:43] ikonia: understood [08:43] Daviey: what? [08:45] twb: I still think you re the original BOFH. [08:45] I'm too young for that [08:45] too many social skills [08:47] Nah, adult aspys just know how to hide it [08:47] It's all operant conditioning [08:56] Daviey: got the assignment - sloppy on process, so please keep me in check, not done much with "official" ubuntu bug fix process [09:00] ikonia: heh [09:02] hi all [09:16] http://pastebin.com/8h3WgcfZ <--- what does this mean? what do I need to install? [09:16] if I do [09:18] Kartagis: looks like too issues [09:18] Kartagis: one the authentication methos is configured to use sasl, which isn't available on your machine, and the second is your postfix startup options are wrong/invalid [09:49] Daviey: testing the new version of likewise now [09:56] Daviey: do we still get tasksel at the end of the server ISO installer? [09:56] I should know but I've not looked recently [10:01] jamespage: I thought we dropped it. [10:02] Daviey: me to - but I wanted to make sure [10:02] Equally, i should know.. but I tend to do the install on autopilot these days [10:02] not good. [10:02] Daviey: I think that we need to re-align our automated testing for next release [10:02] its still focussed around tasksel [10:02] which is not that appropriate [10:09] jamespage: Hell, yes. [10:09] jamespage: It is sounding like we will need to drive the complex-testing blueprint. [10:09] Daviey: we should be able to next release [10:09] juju will be mature enough [10:10] I'm seeing it [10:10] jamespage: we should consider if orchestra is the right framework for it, using openstack + iso support might be better. [10:11] Daviey: I think so - I don't want to introduce a requirement for real hardware [10:11] jamespage: Ah.. without openssh (server) installed by default, we pretty much have to keep tasksel [10:11] hmm [10:11] gah [10:12] OK - but I really want to automate network install testing as well [10:12] we can leave what we already have in place and supplement it [10:12] Yeah [10:12] for example I see several things this release which could do with a good test - tomcat7, mail-stack-delivery, likewise-open [10:13] hey - maybe even jenkins [10:13] jamespage: I assume you've already put some thought into a blueprint? [10:13] I don't think we should be to restrictive [10:13] about 5 minutes worth looking at this log [10:13] but yes - generally I have [10:14] no, it should be easy to write tests.. and for not just stuff we care about. [10:14] heh [10:15] for simple deployment tests we should prob use preseed + simple test suites [10:15] juju for more complicated stuff [10:15] but that is likely to need a openstack/or we use ec2 [10:19] jamespage: hmm, wouldn't it make sense to use the same complicated test framework for *world? [10:20] I think there is merit in validating simple installs first [10:20] Base Install (ISO + Preseed) -> Simple Install (Netinstall + Preseed) -> Complex Install (Juju) [10:21] we might want to drop things like orchestra and cobbler into the simple install testing [10:21] unlikely we will deploy using juju [10:21] for example [10:23] Daviey: ping [10:23] ikonia: hey [10:24] Daviey: advice time I'm afraid [10:24] think I've tracked this down to an incompatability with the dovecot version 11.10 is using against how the software maintainer has prepped his code [10:25] Daviey: I think (here is where your advice is needed) this may need to go back upstream to the maintainer [10:25] or we'll need to write a header from scratch [10:25] there is a version check against dovecot to match to a header to include [10:26] there is no dovecot 2.0 header, he stops at 1.2 [10:26] suggestions/opinions advice [10:28] gah [10:28] * Daviey sniffs [10:28] ? [10:29] * Daviey has a look. [10:32] New bug: #861582 in nova "Failed snapshots are not cleaned up" [Undecided,New] https://launchpad.net/bugs/861582 [10:32] Daviey: missing file is antispam-storage-2.0.c [10:33] which looking at his webpage, sort of suggests he's inline only for the 1.X tree [10:35] yep [10:35] upstream doesn't have the fix yet either [10:35] :/ [10:35] http://johannes.sipsolutions.net/Projects/dovecot-antispam [10:35] I started playing around with hacking at the 1.2 to try to make soemthing 2.0 that will at least build for a test [10:35] ah! [10:36] http://wiki2.dovecot.org/Plugins/Antispam [10:36] ikonia: yeah, i just did the same [10:36] ahhh [10:36] let me look at this, [10:36] good find. [10:37] http://dovecot.org/pipermail/dovecot/2011-September/061134.html [10:37] gah, it's a total different codebase [10:37] how should this be delt with work with maintainer ? make own missing header ? look at using fork that is 2.0 compatible ? [10:37] ha, yes, totally different [10:38] based on how this sort of thing is usually handled [10:38] If it was a fork, we could have cherrypicked as a patch. [10:38] I'll update the bug report in a minute, but thought I'd get some input on the direction you'd like me to take [10:38] well, bad wording [10:38] "alternative vesion" [10:39] Yeah, it's very late in the cycle to consider switching.. I have NFI if they are drop in compatiable. [10:39] I can try to work with the maintainer or sort the missing file out myself [10:40] Someone concerned it clealry known upstream, and not handled. [10:40] It might be more complex than we hoped [10:41] I have no doubt [10:41] looking at the 1.2 file [10:41] I can see at 3 issues straight away [10:41] I don't think it's realistic for it to make 11.10 unless the maintainer is holding something back [10:42] that said I can start to progress it for inclusion on date $X [10:42] The fact it fails to build, is only part of the concern now.. It seems that it will not work with dovecot full stop? [10:42] that's not how I was reading that mailing thread [10:43] "Yes, the HG code works fine with Dovecot 2, am using it. The Berg site is for Dovecot 1. Dovecot 1 is in use in many distributions like Centos 5, etc. So, it still needs updates." [10:44] It sounds to be that the code we have is suitable only for Dovecot 1.X series, and won't be updated [10:44] Maintained, but not extended. [10:45] I see where you are going [10:45] would you like me to start looking at swapping it out to the alterantive version for release $X [10:46] * jamespage adds dovecot-antispam to the list of things for testing automation next cycle [10:47] http://bugs.debian.org/631143 [10:47] debian bug 631143 [10:47] Debian bug 631143 in dovecot-antispam "[dovecot-antispam] Module is for different version 1.2.15" [Grave,Open] http://bugs.debian.org/631143 [10:48] I'll link our bug into that one for reference [10:49] no I won't [10:49] that's 1.2 bug [10:50] so he does plan to move to dovcecot 2 [10:50] it's the same issue, just older [10:50] how will ubuntu deal with that, just leave it as a broken package until it's available ? [10:50] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631143#15 [10:50] Debian bug 631143 in dovecot-antispam "[dovecot-antispam] Module is for different version 1.2.15" [Grave,Open] [10:50] ikonia: I think that is all we can do really. [10:51] understood [10:51] potential release note. [10:55] Daviey: I'll move onto the next bug then, let me know if I can progress that further in any way [10:59] ikonia: thanks! [11:00] Daviey: what should I mark that bug to as a status [11:00] (won't fix ?) [11:00] Just confirmed. [11:01] ok [11:01] Even or Triaged, i guess [11:05] ikonia: ssh ubuntu@91.189.93.84 [11:06] ahhh [11:07] ikonia: got in? [11:09] yes [11:11] but not seeing my message? [11:11] kicked me off [11:11] I'm seeing it now [11:11] got it [11:16] ikonia: so, libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I -I/src/lib -I/src/lib-mail -I [11:16] /src/lib-imap -I/src/lib-storage -I/src/lib-dict -I/src/imap -DPKG_RUNDIR=\"\" - [11:16] g -O2 -c metadata-plugin.c -fPIC -DPIC -o .libs/metadata-plugin.o [11:17] the -I's need to be after the -o's :) [11:17] Does that make sense? [11:17] mostly === scar[w]__ is now known as scar[w] [11:34] Daviey: rails update... I've upgraded the dep lib packages to 2.3.14, just having problems building one of them [11:35] some patches reverting previous patches nonsense [11:35] m_3: eeeek [11:35] working through that now [11:35] m_3: Does it touch non-rails packages? [11:35] nope [11:35] Oh good.. i was worried we'd be touching ruby itself.. [11:36] From a release aspect, i think we can touch rails in any way suitable to get it working. [11:36] but ruby requires more consideration. [11:36] nope, really not that complicated of an upgrade, just some dh stuff getting in my way [11:37] shall I submit merge requests when it's working? [11:38] I've got branches, and am test-installing these from a ppa [11:43] jamespage: jenkins blueprint, "Update documentation for disabling plugin management through web ui" - still a target for oneiric? [11:43] m_3: merge branches would be GREAT [11:47] Hello, what is the recommended Wiki engine available on Ubuntu ? [11:49] AnAnt: moin [11:50] Daviey: python-moinmoin ? [11:51] !moin [11:52] !moin [11:52] https://help.ubuntu.com/10.04/serverguide/C/moinmoin.html [11:52] Daviey: thanks [12:33] ivoks: exactly, 'easy workaround' was what I went on :) howdie, btw :) [12:33] ivoks: will you be at uds? [12:34] hallyn: yes, i got corrected :) [12:34] hallyn: and yes, i will be at UDS [12:34] cool [12:58] I'm getting a bunch of packages "held back" when doing an upgrade. Is it OK to just install over them? [12:59] strat-o-caster: sounds like you have done some pinning? [13:00] strat-o-caster: Are you using apt-get upgrade or dist-upgrade? [13:00] In particular ssl-cert is asking me if it is OK to replace a cert that was created automatically and is now flawed... [13:00] not yet [13:00] just apt-get install ssl-cert [13:00] morning [13:00] I'm still running an old 8.04 LTS [13:01] it was just apt-get upgrade when I got the warning... [13:01] Daviey: that can be postponed - reviewing blueprints now [13:01] jamespage: i just did a hack and slash on them all, i think they should be pretty reflective now; but please change any that are wrong. [13:02] Daviey: lgtm [13:03] cool [13:13] smb: i understand we probably can't do anything, but just wanted to point out bug 862136 as ipv6 is sort of important to us... [13:13] Launchpad bug 862136 in linux "Can't define network with IPv6 address in libvirt - fails to define address" [Medium,Triaged] https://launchpad.net/bugs/862136 [13:14]