| Patrickdk | remove the network/broadcast/gateway/dns* | 00:00 |
|---|---|---|
| twb | Patrickdk: nooooo | 00:00 |
| twb | Patrickdk: :1 bullshit is the old stinky way | 00:00 |
| Patrickdk | hmm? | 00:00 |
| Patrickdk | using up, isn't new/better | 00:01 |
| twb | Patrickdk: ifconfig doesn't understand that interfaces can have zero, or many, addresses, so that :1 stuff is a dirty hack | 00:01 |
| Patrickdk | as it does the exact same thing | 00:01 |
| Patrickdk | eth0:1 doesn't even use ifconfig | 00:01 |
| Patrickdk | so why does it matter? | 00:01 |
| twb | Er, ifupdown uses ifconfig internally as at 0.6 | 00:01 |
| Patrickdk | twb, but ubuntu doesn't use 0.6 anymore | 00:02 |
| Patrickdk | twb where have you been living? :) | 00:02 |
| twb | LTS | 00:02 |
| Patrickdk | he said 11.10 :) | 00:02 |
| twb | OK I missed that | 00:02 |
| twb | But I still think :1 is a stupid stinky way to simply have multiple addresses | 00:02 |
| Patrickdk | it is | 00:02 |
| Patrickdk | but as long as the interfaces file supports it | 00:02 |
| Patrickdk | why use a nother hack to get around a hack | 00:02 |
| Patrickdk | atleast the supported hack is suppost to be supported :) | 00:03 |
| Patrickdk | iface eth0:1 static, is the same as ip addr xxxx, now | 00:03 |
| Patrickdk | and that is what has caused the issue with ifupdown | 00:04 |
| Patrickdk | that we are getting fixed on debian/ubuntu | 00:04 |
| Patrickdk | ifup works fine | 00:04 |
| Patrickdk | issue is ifdown | 00:04 |
| Patrickdk | but that won't really affect him | 00:04 |
| twb | meh, I don't see inet manual as that big a hack | 00:04 |
| Patrickdk | inet manual? | 00:04 |
| twb | see pastebin | 00:05 |
| Nicolas | now i did the following: auto eth0:1 iface eth0:1 inet static address 94.247.88.245 netmask 255.255.255.255 but still not working | 00:05 |
| Patrickdk | oh, that is very dirty hack to me | 00:05 |
| Patrickdk | how can I take down/up one ip at a time | 00:05 |
| Patrickdk | expecially for failover | 00:05 |
| Patrickdk | not with that code | 00:05 |
| twb | Use ip, I guess | 00:05 |
| twb | I haven't ever needed to do that | 00:05 |
| Patrickdk | I only do in my ipvs configs | 00:06 |
| Patrickdk | nicolas, what is classified as not working? | 00:07 |
| twb | I guess what it boiils down to is that ifupdown has pissed me off enough over the years with being baroque and flaky, that I use inet manual because I can see what's happening and it tells ifupdown not to be clever | 00:07 |
| Patrickdk | what was the *test*? | 00:07 |
| twb | And obviously setting netmask and/or brd by hand blows | 00:07 |
| Nicolas | trying to ssh or entered into the browser: no respone | 00:07 |
| Patrickdk | output of 'ip a' | 00:08 |
| Patrickdk | IN A PASTEBIN | 00:08 |
| Nicolas | I am trying to find how to use the pastebin :$ | 00:09 |
| Patrickdk | http://pastebin.ubuntu.com | 00:09 |
| Patrickdk | copy/paste, click submit :) | 00:09 |
| Nicolas | http://pastebin.ubuntu.com/718385/ | 00:09 |
| Nicolas | thanks! :) | 00:09 |
| Patrickdk | heh? eth1 is still active | 00:10 |
| Patrickdk | ifdown eth1 | 00:10 |
| Patrickdk | ifup eth0:1 | 00:10 |
| Patrickdk | then pastebin again | 00:10 |
| Nicolas | ok | 00:10 |
| Patrickdk | twb, I used to do a /etc/init.d/networking restart :) back in 7.04 :) | 00:12 |
| Patrickdk | glad I have stopped that | 00:12 |
| Patrickdk | not even sure why I did that anyways, probably just being lazy | 00:12 |
| twb | Patrickdk: because if you do it remotely without screen, bad juju can happen | 00:13 |
| Nicolas | http://pastebin.ubuntu.com/718386/ | 00:13 |
| Patrickdk | always did it remotely without screen :) | 00:13 |
| Patrickdk | nicolas, oh, you removed eth1 already so you can't ifdown eth1 :( | 00:14 |
| Patrickdk | add auto eth0:1 | 00:14 |
| Patrickdk | so it looks like eth0 | 00:14 |
| Patrickdk | or it won't come up after reboot | 00:14 |
| Nicolas | ok | 00:14 |
| Patrickdk | and type in, ip set link dev eth1 down | 00:14 |
| Patrickdk | actually | 00:14 |
| Patrickdk | ip link set eth1 down | 00:14 |
| Patrickdk | then pastebin once more | 00:14 |
| Nicolas | ok thanks!! | 00:16 |
| Nicolas | http://pastebin.ubuntu.com/718393/ | 00:18 |
| Patrickdk | looks good | 00:18 |
| Nicolas | yes but still cannot connect with the ip 94.247.88.245 via ssh or when i enter into the browser it is timeout :S | 00:19 |
| Patrickdk | is this server at a colo? | 00:21 |
| twb | Nicolas: should that be a /32 ? | 00:21 |
| Patrickdk | most likely the mac is cached on the swithc/router | 00:21 |
| Patrickdk | and can take 8hours to timeout | 00:21 |
| Nicolas | oh | 00:21 |
| twb | Seems to me you want both to be /24's and the .164 to be primary | 00:21 |
| Patrickdk | twb, I always use /32 for aliases | 00:21 |
| twb | Patrickdk: huh, I'm surprised it works | 00:21 |
| Patrickdk | cause it doesn't matter as long as one ip is within the netmask of the gateway | 00:21 |
| Patrickdk | twb, why? | 00:22 |
| twb | It just looks like it shouldn't | 00:22 |
| Patrickdk | I have had mixed results of it not working when I don't use /32 | 00:22 |
| Patrickdk | where /32 always works | 00:22 |
| twb | Mine looks more like this, and FWIW it works fine: http://paste.debian.net/139599/ | 00:22 |
| Nicolas | anyway, 245 would be the "master ip" and the 164 is for only one domain but I can change the domain's dns records once it works well :) | 00:23 |
| twb | Nicolas: primary vs. secondary only matters here for outbound traffic to that net, and since you have a /32 it doesn't matter at all | 00:23 |
| twb | Nicolas: outbound traffic will always pick the outbound /24 as the source ip | 00:24 |
| Patrickdk | Nicolas, what is the network it's plugged into? | 00:24 |
| Patrickdk | is it under your control or not? a colocation/vps place? | 00:24 |
| twb | Incidentally when testing recommend trying ICMP echo-request and -reply before SSH; ICMP is connectionless so if you fuck up and have e.g. triangle routing, you can still see the response packets. Might want to tcpdump, too | 00:24 |
| * Patrickdk still bets it's a cisco router doing 8hour arp mac caching | 00:25 | |
| Nicolas | the server is at a hosting company | 00:25 |
| Patrickdk | that way customers are less likely to spoof other customers | 00:25 |
| Patrickdk | well, arp poison | 00:26 |
| twb | :-) | 00:26 |
| twb | Should just use IPv6, no ARP there :P | 00:26 |
| Patrickdk | sure it is, just renamed to nd :) | 00:26 |
| Takyoji[laptop] | I did something stupid and `rm /etc/ldap/slapd.d/*` and tried to uninstall slapd, although it backup up files in the directory I removed, therefore it freaks out and stops uninstalling, and I want to get slapd reinstalled fresh; any ideas? | 00:26 |
| Patrickdk | same thing, same issue, same solution :) | 00:26 |
| twb | Hum, I thought it was IPsec'ized ICMPv6 | 00:26 |
| Patrickdk | but atleast it lives in the ip layer then | 00:26 |
| Patrickdk | no | 00:27 |
| twb | Stupid tutle book lied to me! | 00:27 |
| Patrickdk | arp in ipv6 is called ND, works the same as arp basically | 00:27 |
| twb | *turtle | 00:27 |
| Patrickdk | but ND lives in ICMPv6 | 00:27 |
| twb | Well, that's lame | 00:27 |
| Patrickdk | instead of directly on layer2 | 00:27 |
| twb | I assumed it was protected by ipsec | 00:27 |
| Patrickdk | no, it means you can do ND over layer 3 :) | 00:27 |
| Patrickdk | it makes it really nice for like tunnels and stuff | 00:27 |
| Nicolas | i so I have to wait 8 hours? | 00:27 |
| Patrickdk | so you don't always hve to use tap | 00:27 |
| Patrickdk | Nicolas, normally, or ask your colocation people to reset it | 00:28 |
| twb | Now I will have to go back to plan B, which is to turn off arp/nd and hard-code ip neighbours tables in /etc/ntab or so | 00:28 |
| Nicolas | ok, thanks! | 00:28 |
| Patrickdk | twb, no one said you can't run icmpv6 on ipsec :) | 00:28 |
| Patrickdk | but it doesn't by default | 00:28 |
| twb | Patrickdk: hum, OK | 00:28 |
| Patrickdk | I mean, it's ipsec, how would it do that by default :) | 00:29 |
| twb | Patrickdk: I thought it was required for the "change-y" bits | 00:29 |
| Patrickdk | change-y? | 00:29 |
| twb | Like echo reply wasn't secized but stuff like "hey your new route should be over here" was | 00:29 |
| Patrickdk | twb, nope | 00:29 |
| Patrickdk | RA, ND, ... are not protected at all | 00:29 |
| Patrickdk | same issues as ipv4 | 00:30 |
| Patrickdk | there might be a future additon map planned to do so, but not in use | 00:30 |
| Patrickdk | I haven't read all rfc's | 00:30 |
| Patrickdk | but I have read most, and haven't run across that | 00:30 |
| Nicolas | I have changed the 88.245 to 88.165 and here it is the result: http://94.247.88.165/ | 00:32 |
| Nicolas | so i have to set the config file to 245 and wait for the switch... The guy tried to reset it but cannot do it | 00:33 |
| patdk-lap | ya, if another ip works just fine | 00:34 |
| patdk-lap | it's just arp/mac caching | 00:34 |
| patdk-lap | if they dunno how to reset it, just let it timeout | 00:34 |
| patdk-lap | normally the highest they can set it to is like 8hours | 00:34 |
| Nicolas | ok, thanks!! | 00:35 |
| Nicolas | thanks for your help! | 00:35 |
| Takyoji[laptop] | So yes, is there a way to completely rid of the history of a package? | 00:38 |
| === medberry is now known as med_out | ||
| twb | OK, who knows how to configure nut? I have the master running on lucid, but I have a couple of old, fucked-up hosts that can't easily run upsmon. So I need the master to use ssh forced-commands to shut them down at the right time -- I think I do this with NOTIFYCMD, but I'm not too sure what a worked example would look like. | 00:39 |
| twb | Actually, a better way I think would be to replace SHUTDOWNCMD with a wrapper that SSH's the dumb hosts, then does the existing "shutdown -h now" | 00:41 |
| lucascastro | oh... I'm trying to implement a traffic control on lucid. | 01:12 |
| lucascastro | I've created a qdisc with htb and class with rate 512kbit and subclass with rate 128kbit and ceil 128kbit. But when I'm gonna do some download, get up of that. | 01:14 |
| qman__ | I've only had success limiting upload, downloads don't seem to work no matter what I do | 01:16 |
| twb | ingress queuing is nontrivial | 01:19 |
| lucascastro | I've not tried the upload, but you get me on a ideia. Try over the local interface, the problem is the local traffic will be limited. | 01:19 |
| twb | It isn't helped by the kernel people pushing IFB when the rest of the world is sticking with IMQ | 01:19 |
| lucascastro | I'll do some testes about it. | 01:19 |
| qman__ | you can mark traffic by its originating point | 01:19 |
| qman__ | with the iptables rule | 01:19 |
| twb | And OBVIOUSLY you can't directly reduce the number of packets sent to you | 01:20 |
| twb | s/number of/rate at which/ | 01:20 |
| twb | You can fiddle-fart around with e.g. TCP congestion stuff | 01:20 |
| qman__ | as in, rather than just mark all traffic destined to the LAN, only mark traffic that came from the internet | 01:21 |
| lucascastro | qman__: I | 01:22 |
| lucascastro | qman__: I'm doin' in that way. | 01:22 |
| twb | What's the actual goal here? | 01:22 |
| lucascastro | twb: traffic control coming from the internet. | 01:23 |
| twb | tc as in rate limiting, prioritization, or both, or something else? | 01:23 |
| lucascastro | yes. | 01:23 |
| twb | :-) | 01:23 |
| qman__ | well, that's the means | 01:23 |
| qman__ | what's the situation requiring it? | 01:24 |
| twb | I haven't done much myself but AIUI you want to go read about IMQ and/or IFB | 01:24 |
| twb | qman__: good point | 01:24 |
| lucascastro | but... I'm using it and had define the rate and ceil, but the download always get up of that. | 01:25 |
| lucascastro | using TC I meant. | 01:25 |
| qman__ | I use it on my torrent box to limit global uploads and be nice to everything else on the network | 01:25 |
| twb | lucascastro: so you tried something, and it didn't work? | 01:25 |
| qman__ | I don't actually have any shaping or QoS on my router | 01:25 |
| qman__ | works better without it | 01:25 |
| twb | qman__: you probably have pfifo_fast | 01:25 |
| lucascastro | twb: no pfifo_fast on the interface that htb it is. | 01:26 |
| lucascastro | I checked it. | 01:27 |
| lucascastro | I'll read abou IMQ and IFB | 01:27 |
| twb | I meant on his router | 01:28 |
| twb | That allegedly does no qos | 01:28 |
| lucascastro | twb: Oh, yeah, sure. | 01:29 |
| qman__ | well, by that I meant it's just defaults | 01:29 |
| qman__ | no special configuration | 01:30 |
| qman__ | ubuntu server with ip_forward=1 | 01:30 |
| twb | pfifo_fast is the default on linux | 01:59 |
| twb | It fifo buckets by ToS | 01:59 |
| smoser | SpamapS, kirkland what apt mirror software do you use use? | 02:07 |
| smoser | my full rsync mirror is running out of space thanks to precise. so i need a approx or squid-deb-proxy | 02:08 |
| twb | smoser: debmirror | 02:12 |
| kirkland | smoser: just plan squid now | 02:17 |
| smoser | do you do anything to seed the development release ? | 02:18 |
| smoser | ie, to keep it fresh while you sleep | 02:18 |
| smoser | and can you share config ? | 02:18 |
| smoser | kirkland, ^ | 02:19 |
| kirkland | smoser: nope, i suffer through the first one | 02:19 |
| smoser | twb, thanks for your input. for some reason i tihnk i'm leaning towards the caching proxy. | 02:19 |
| kirkland | smoser: and gravy after that | 02:19 |
| twb | smoser: cos yer dumb :P | 02:20 |
| smoser | well, yes. | 02:20 |
| smoser | but i think in the end it gives me better use of what i need here. | 02:20 |
| smoser | kirkland, configs ? you just run squid on one box and point the others at that? | 02:22 |
| twb | smoser: FWIW everyone I've met that runs either debmirror or apt-mirror has been happy with it and hasn't had any problems | 02:23 |
| twb | smoser: and you can tell not to download e.g. priority: extra or section: games | 02:24 |
| smoser | twb, well i was happy with the rsync mirror until i ran out of space. | 02:24 |
| twb | plain rsync will pull in *everything* for all arches | 02:24 |
| twb | Oh, and debmirror can use rsync as a backend :-) | 02:24 |
| twb | 10:33 <twb> http://paste.debian.net/139591/ is what I do, it uses 78GiB today, and it pulls from an unmetered ISP mirror so I don't care. | 02:24 |
| twb | But I'll stop the advocacy now :-) | 02:25 |
| smoser | twb, you make a convincing argument | 02:32 |
| BuenGenio | hello | 02:32 |
| BuenGenio | we upgraded the mailserver to a new hardware yesterday, but during the upgrades we plugged and unplugged the old server several times, which means some new emails from yesteday stayed on the old box | 02:32 |
| BuenGenio | we have the old server mounted over NFS on the new one - how do I reliably copy only the missing files from the old Maildirs to make sure people get their emails? | 02:32 |
| BuenGenio | rsync, cp -ru ? | 02:33 |
| twb | BuenGenio: IIRC maildir more or less just deals with that | 02:33 |
| twb | cp -rnv I imagine | 02:33 |
| twb | Fuck, I don't know | 02:33 |
| twb | Best is just to let the users deal with it themselves by leaving dovecot running on the old system for a week | 02:33 |
| twb | That's what I did | 02:34 |
| BuenGenio | problem is we switched to the new server | 02:34 |
| twb | "Dear users, the new mail server is <here> the old one is still <there>; in a week the latter will vanish, if you want that mail kept, move it from <there> to <here> before then." | 02:34 |
| BuenGenio | so I unpacked the backup of the mail from the previous day | 02:34 |
| qman__ | I run into this problem on a regular basis with windows servers | 02:34 |
| BuenGenio | which means there's a day's worth and a bit missing | 02:34 |
| twb | Or just say "tough shit, you lost some mail." | 02:35 |
| qman__ | basically, if they're picky, I go in their outlook and do it for them, otherwise they're just cool with it | 02:35 |
| twb | "Be thankful you get anything" | 02:35 |
| twb | Tell them to treat it like an unexpected outage | 02:35 |
| qman__ | most customers understand that when you replace their server, sometimes shit happens | 02:36 |
| qman__ | for the rest, you just have to spend the time picking through their mail, or risk losing them | 02:37 |
| BuenGenio | i'd rather they didn't | 02:37 |
| BuenGenio | it's a rather large company, and I'm working here | 02:37 |
| smoser | twb, so stupid question | 02:38 |
| smoser | what happens when i i use debmirror and the cache misses ? | 02:38 |
| twb | How do you mean? | 02:38 |
| twb | debmirror creates a conventional first-class (i.e. internally consistent) apt repo | 02:39 |
| twb | It's not a cache in the sense that it's partially missing | 02:39 |
| smoser | right. so when it misses, what happens? | 02:39 |
| smoser | say you had told it to not include '--section multiverse' | 02:40 |
| smoser | and then 'apt-get install some-multiverse-pkg' | 02:40 |
| twb | You get "no such package, WTF are you talking about" | 02:40 |
| twb | What I typically do, mainly to guard against the debmirror cron job breaking, is to add a second entry for mirrors://... or so, so that if I ask for something not mirrored, it'll fall back on upstream (probably via squid) | 02:41 |
| smoser | ok. that swhat i was asking. | 02:41 |
| twb | Right, sorry, I misunderstood the question at first | 02:43 |
| twb | Another example would be that I don't mirror sources at all, so deb-src just points straight to upstream | 02:43 |
| TheEvilPhoenix | anyone know why nginx does not work with php5-gd? | 02:52 |
| TheEvilPhoenix | nginx is configured to work with php, but it won't recognize php5-gd | 02:52 |
| === med_out is now known as medberry | ||
| smoser | twb, mirror started. thanks. | 03:03 |
| === medberry is now known as med_out | ||
| twb | OK, let me lay this on you | 03:09 |
| twb | I have a host with- no, that can't be the issue | 03:09 |
| twb | OK, so I have a KVM VM running lucid server, it's a client for LDAP/SSL and NFSv3. | 03:10 |
| twb | Three times now I've caught it completely failing to run users' cron jobs | 03:10 |
| twb | This time, cron is running and the problem occurred after the VM was rebooted. IIRC the previous two times, cron wasn't running at all. | 03:10 |
| twb | I was about to say "it's because it can't read /home when cron starts", but the crontabs live in /var/spool | 03:11 |
| twb | One of the cron jobs is a script that automatically siphons money into my bank account, so I'm not anxious for it to silently stop working :-/ | 03:11 |
| Takyoji[laptop] | What would be a reason for an NFS share not mounting until a user authenticates? | 03:25 |
| twb | Takyoji[laptop]: krb? | 03:26 |
| twb | Takyoji[laptop]: what's fstab say | 03:26 |
| Takyoji[laptop] | The params are: rsize=8192,wsize=8192,timeo=14,intr | 03:27 |
| twb | Pastebin the entire fstab and the entire /proc/mounts | 03:27 |
| Takyoji[laptop] | I'll have to login on the other system then, one moment | 03:27 |
| twb | Might as well paste exports and thingo from the server, too | 03:28 |
| Takyoji[desktop] | http://paste.ubuntu.com/718479/ | 03:29 |
| qman__ | no auto? | 03:32 |
| qman__ | or is that not needed anymore? | 03:32 |
| Takyoji[desktop] | Server http://paste.ubuntu.com/718480/ | 03:32 |
| Takyoji[desktop] | ahh, perhaps it might be needed | 03:32 |
| twb | qman__: for NFS? | 03:32 |
| Takyoji[desktop] | I'll test the on one system | 03:32 |
| Takyoji[desktop] | I'll test that on one system* | 03:32 |
| twb | NFS at boot time is pretty much broken by upstart, at least in lucid | 03:33 |
| twb | mountall(8) is a great steam pile of kludge | 03:33 |
| qman__ | heh | 03:33 |
| qman__ | I'm behind the times with NFS anyway | 03:33 |
| Takyoji[desktop] | So I'd probably have to resort to writing an upstart script? xP | 03:34 |
| Takyoji[desktop] | Hay, auto helped | 03:34 |
| twb | Takyoji[desktop]: har har | 03:34 |
| Takyoji[desktop] | You sir, win one free internet and a stuffed penguin! | 03:34 |
| twb | Takyoji[desktop]: more like throw away upstart and use a deterministic boot process | 03:35 |
| magn3ts | How can I get nginx to start on boot in Oeniric? | 03:39 |
| qman__ | I set this thing up on 7.10 and haven't touched the configuration since, continued to work through all five release upgrades | 03:39 |
| qman__ | figured it was worth mentioning it | 03:40 |
| twb | magn3ts: install it? | 03:52 |
| magn3ts | twb, yeah, that's not cutting it. :/ | 03:53 |
| magn3ts | twb, I thought that's all I did in 11.04, but it didn't do such in 11.10 :[ | 03:53 |
| RoAkSoAx | win 3 | 04:33 |
| twb | magn3ts: does it provide an /etc/init or only an /etc/init.d? | 04:34 |
| cjs226 | I've run "/etc/init.d# update-rc.d myprocess_stop stop 1 0 1 6 ." which adds the appropriate links to /etc/rc0.d rc1.d and rc6.d. however the scripts are called until AFTER a reboot. any ideas? | 04:43 |
| twb | Blergh | 04:43 |
| twb | cjs226: it happens after a reboot because you're in single-user mode (runlevel 1) | 04:44 |
| cjs226 | no, I'm in runlevel 2 | 04:44 |
| alaing | hi i've got a usb wireless adaptor which is using RALink RT2870 chipset.I had it working on my ubuntu server edtion 11.04 until recently when I upgraded to 11.10. Can someone help me with it please | 07:36 |
| josePhoenix | Hello all | 07:44 |
| josePhoenix | My PostgreSQL db is saying "could not fork new process for connection: Resource temporarily unavailable" | 07:44 |
| josePhoenix | Where should I look first? The system doesn't seem to be under heavy load (well the three load numbers in top look > 1, but actual cpu usage seems low) | 07:45 |
| === almaisan-away is now known as al-maisan | ||
| alaing | hi i've got a usb wireless adaptor which is using RALink RT2870 chipset.I had it working on my ubuntu server edtion 11.04 until recently when I upgraded to 11.10. Can someone help me with it please | 08:17 |
| === the-mgt_ is now known as the-mgt | ||
| uvirtbot | New bug: #881304 in keystone (universe) "issues with ec2 middleware" [Undecided,New] https://launchpad.net/bugs/881304 | 08:46 |
| lynxman | morning o/ | 08:58 |
| Veovis_Muaddib | I'm looking through the man page and other sources for rsync, and I'd just like to make sure it's the best option before I start using it. I would like to syncronize files on my Windows 7 desktop and netbook (Large files like videos or large amounts of smaller files like music) and keep the most up to date version on my server at home. Is there a faster way to do this than learning rsync, or should I just go for it? | 09:03 |
| Veovis_Muaddib | To clarify, I want to take files from my desktop and have them sync up to the server and then back down to my netbook, and vice versa | 09:04 |
| BrixSat | hello i have a problem connecting wpa_supplicant to a hidden wpa network :/ it does not connect | 10:12 |
| koolhead17 | hi all | 11:00 |
| uvirtbot | New bug: #881361 in puppet (main) "puppetmaster-passenger fails to install with puppet 2.6.4-2ubuntu2.5" [Undecided,New] https://launchpad.net/bugs/881361 | 11:12 |
| Daviey | lynxman: How is mcollective looking? | 11:24 |
| lynxman | Daviey: almost done! | 11:36 |
| Daviey | lynxman: crikey, if it is this complicated - we are doing something wrong | 11:41 |
| Daviey | mdeslaur: around? | 12:02 |
| mdeslaur | Daviey: yeah, looking at busted puppet | 12:02 |
| Daviey | mdeslaur: Are comfortable triaging it? | 12:03 |
| mdeslaur | Daviey: huh? I'm working on it, it's busted because of the security update (se much for the test suite...) | 12:04 |
| Daviey | mdeslaur: Oh yes, just wanted to clarify that you are driving the issue? | 12:04 |
| mdeslaur | Daviey: yes, I am, you can assign me to whatever bug comes in | 12:05 |
| Daviey | rocking! Thanks mdeslaur | 12:05 |
| * koolhead17 pokes Daviey | 12:06 | |
| * Daviey frowns at koolhead17 | 12:07 | |
| koolhead17 | :P | 12:18 |
| koolhead17 | Daviey: how should i handle that php error issue during compilation then? | 12:18 |
| koolhead17 | hey lynxman | 12:18 |
| Daviey | koolhead17: sorry, can you pastebin the error again? | 12:23 |
| Daviey | (FWIW, Debian switched to git packaging and somewhat tried to switch to native packaging, badly.) | 12:24 |
| koolhead17 | Daviey: http://paste.ubuntu.com/718047/ | 12:24 |
| Daviey | koolhead17: the lintian W's are all warnings, which are on the Debian package aswell. | 12:25 |
| Daviey | It's not something you have introduced. | 12:25 |
| Daviey | The gpg error is because you don't have a gpg key, but you don't need that to get sponsored. | 12:26 |
| Daviey | So it's all ok | 12:26 |
| koolhead17 | Daviey: whats next step now :) | 12:26 |
| Daviey | koolhead17: have you built the package? | 12:28 |
| Daviey | pbuilder-dist precise i386 build *ubuntu2.dsc | 12:28 |
| Daviey | then install it from ~/pbuilder/pubilder_i386-result/*.deb (iirc) | 12:28 |
| Daviey | then run "php5" and see if you get the warning | 12:29 |
| Daviey | (best confirm this before installing) | 12:29 |
| koolhead17 | k | 12:29 |
| Daviey | m_3: Are you around sir? | 12:30 |
| koolhead17 | Daviey: i should run chroot once am inside builder directory ? | 12:32 |
| Daviey | koolhead17: erm, no | 12:33 |
| koolhead17 | Daviey: i am on oneiric machine and currently inside the pbuilder/precise_i386_result directory. i can see many .deb pkgs there. | 12:40 |
| Daviey | koolhead17: kool | 12:42 |
| Daviey | erm, so run "~:$ php5" | 12:43 |
| Daviey | you shoudl see the error, correct? | 12:43 |
| koolhead17 | yes | 12:43 |
| koolhead17 | :~/pbuilder/precise-i386_result$ php5 The program 'php5' is currently not installed. You can install it by typing: sudo apt-get install php5-cli | 12:43 |
| Daviey | koolhead17: so, sudo dpkg -i *sqlite*.deb | 12:44 |
| Daviey | err, wait | 12:44 |
| koolhead17 | :p | 12:44 |
| Daviey | That is not the error, i was talking about | 12:44 |
| rbasak | Daviey: looks to me like bug 858878 is an architectural issue with cobbler-web and any patch will not be trivial | 12:44 |
| uvirtbot | Launchpad bug 858878 in cobbler "lack of csrf protection in cobbler-web" [High,Triaged] https://launchpad.net/bugs/858878 | 12:44 |
| rbasak | Daviey: cobbler-web is using things like GET requests with side effects | 12:45 |
| Daviey | rbasak: Have you managed to create a minimal testcase which proves it's an issue? | 12:45 |
| Daviey | koolhead17: you need to install php5 and php5-sqlite3 | 12:46 |
| Daviey | Check you hit the bug. | 12:46 |
| Daviey | then install your *sqlite*.deb, and see if the error goes away | 12:46 |
| rbasak | Daviey: not right now, because it started to download gigs of images (presumably that's what it is) I killed the instance to avoid running up a bill | 12:46 |
| koolhead17 | Daviey: cool. the two packages from the packages i built. using dpkg -l comamnd | 12:47 |
| koolhead17 | dpkg -i ok doing it | 12:48 |
| Daviey | rbasak: you should be able to install cobbler on it's own without that, no? | 12:48 |
| Daviey | koolhead17: wait | 12:48 |
| koolhead17 | k | 12:48 |
| rbasak | yeah I tried cobbler on its own but the default configuration doesn't seem to work | 12:48 |
| Daviey | koolhead17: I want you to proove the bug first, with packages from the archive | 12:48 |
| rbasak | So I tried orchestra and that set it up sensibly | 12:48 |
| Daviey | Then dpkg -i, to proove you have fixed t | 12:49 |
| Daviey | it | 12:49 |
| koolhead17 | Daviey: got it | 12:49 |
| koolhead17 | Daviey: the package name is php5-sqlite :) | 12:52 |
| Daviey | good stuff | 12:52 |
| zul | morning | 12:53 |
| === med_out is now known as medberry | ||
| koolhead17 | Daviey: apache error log shows same warning as mentioned in bug. i will remove both package which i got from repo without deleting its deps and install the one i generated via pbuiled. i hope that is what is needed. :) | 13:08 |
| lynxman | zul: morning o/ | 13:09 |
| lynxman | koolhead17: hey :) | 13:09 |
| koolhead17 | lynxman: this 4square is killer apps man!! tells everything :) | 13:09 |
| koolhead17 | hello zul | 13:09 |
| lynxman | koolhead17: lol :) | 13:10 |
| zul | lynxman: werent you merging rabbitmq-server? | 13:10 |
| lynxman | zul: it was done a couple weeks ago... | 13:10 |
| lynxman | zul: I pumped straight up to 2.6.1 | 13:10 |
| zul | lynxman: really? | 13:10 |
| lynxman | zul: really | 13:10 |
| zul | odd | 13:10 |
| lynxman | zul: https://launchpad.net/~lynxman/+archive/ppa | 13:10 |
| lynxman | zul: with all the standard plugins ( | 13:10 |
| lynxman | zul: with all the standard plugins (+3 more for the landscape guys) | 13:11 |
| zul | okie dokie | 13:11 |
| lynxman | zul: and this supports HA replication, which is cool | 13:11 |
| zul | lynxman: because precise has 2.5.0 and testing has 2.6.1 | 13:13 |
| lynxman | zul: my 2.6.1 was before debian's, so might it help to just merge straight from debian (+ our very small delta) and then rebuild the plugins for precise? | 13:14 |
| lynxman | zul: I need to push the plugins back to debian at some point as well | 13:14 |
| zul | lynxman: thats what i was thinking | 13:14 |
| lynxman | zul: will do that then, our delta is just a soft link | 13:14 |
| zul | lynxman: if you are busy i can do it | 13:15 |
| lynxman | zul: won't say no, I'm finishing this whitepaper... :) | 13:15 |
| zul | lynxman: k | 13:15 |
| zul | ill get to it next | 13:15 |
| lynxman | zul: then rebuilding the plugins is just resending them to the enablement machines, they all work fine | 13:15 |
| lynxman | zul: let me know if I can give any support | 13:15 |
| Daviey | koolhead17: just dpkg -i *sqlite*.deb , then run php5, should be enough | 13:17 |
| Daviey | you don't need to look at logs | 13:17 |
| koolhead17 | ok | 13:18 |
| koolhead17 | i am getting some lovely deps issue while installing the the source pkg php5-sqlite /0\ | 13:21 |
| koolhead17 | Daviey: http://paste.ubuntu.com/718788/ | 13:21 |
| Daviey | zul: did you see verification-failed for bug 871278 ? | 13:22 |
| uvirtbot | Launchpad bug 871278 in nova "Cannot attach volumes to instances if tgt is used" [High,Fix released] https://launchpad.net/bugs/871278 | 13:22 |
| zul | Daviey: yeah i just havent gotten to it yet | 13:22 |
| Daviey | zul: I think it's going to be superseeded by another upload. | 13:23 |
| zul | Daviey: yeah i know the fix and will add it | 13:23 |
| zul | Daviey: what another upload? | 13:23 |
| lynxman | jamespage: ping | 13:25 |
| Daviey | zul: yes, one will probably go out today. | 13:25 |
| Daviey | (not including this fix) | 13:26 |
| zul | Daviey: umm...ok...whats in it? :) | 13:27 |
| koolhead17 | Daviey: the deps error means i should install the rest to from source :P | 13:32 |
| Daviey | uh? | 13:32 |
| Daviey | koolhead17: fresh system, sudo apt-get install php5 php5-sqlite3 ; php5 ; (see the error) ; ctrl+c ; sudo dpkg -i *sqlite*.deb ; php5 ; (is the error still there?) | 13:33 |
| koolhead17 | ooh ok | 13:34 |
| jamespage | lynxman: pong | 13:36 |
| lynxman | jamespage: pming you | 13:36 |
| uvirtbot | New bug: #881423 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/881423 | 13:42 |
| Daviey | it's sad that i have a command just for marking that bug as a dupe. | 13:51 |
| koolhead17 | Daviey: http://paste.ubuntu.com/718813/ | 13:52 |
| koolhead17 | seems am still doing sumthing wrong | 13:53 |
| Daviey | koolhead17: yes, the thing you are doing wrong is looking at the log :) | 13:53 |
| Daviey | Just invoke php5 from the command line with: | 13:54 |
| Daviey | dave@voodoo:~$ php5 | 13:54 |
| koolhead17 | :P | 13:54 |
| koolhead17 | k | 13:54 |
| Daviey | Do you see an error? | 13:54 |
| koolhead17 | Daviey: indeed :( | 13:54 |
| Daviey | koolhead17: before the upgrade? | 13:54 |
| Daviey | pastebin, dave@voodoo:~$ apt-cache policy php5-sqlite | 13:55 |
| koolhead17 | Daviey: even after the commands i excuted to install froms ource | 13:55 |
| Daviey | koolhead17: why, why, why, are you installing from source? | 13:55 |
| koolhead17 | ooh :( | 13:56 |
| koolhead17 | [19:03] <Daviey> koolhead17: fresh system, sudo apt-get install php5 php5-sqlite3 ; php5 ; (see the error) ; ctrl+c ; sudo dpkg -i *sqlite*.deb ; php5 ; (is the error still there?) [19:04] <koolhead17> ooh ok | 13:56 |
| Daviey | so which part is install from source? | 13:57 |
| koolhead17 | Daviey: http://paste.ubuntu.com/718817/ i meant my generated .deb ,sorry> | 13:57 |
| Daviey | ah | 13:58 |
| Daviey | Hmm | 13:58 |
| Daviey | That implies something else is creating the module | 13:58 |
| Daviey | koolhead17: try fiddling with debian/modulelist (see the sqlite entry) | 13:59 |
| Daviey | i'm not sure if that should be removed, or changed to sqlite3 | 13:59 |
| koolhead17 | Daviey: cool. let me re-run everything then :D | 14:00 |
| koolhead17 | :P | 14:00 |
| koolhead17 | from scratch | 14:00 |
| koolhead17 | Daviey: i told you. ownCloud is one such application which is being affected on oneiric because of it | 14:01 |
| koolhead17 | :( | 14:01 |
| Daviey | koolhead17: sure, but use the minimal test case to fix it :) | 14:03 |
| koolhead17 | Daviey: yes sir!! :) | 14:03 |
| koolhead17 | i had removed line about sqllite form "debian/modulelist" and compliled everything after that i hope i was not doing anything wrong there :p | 14:04 |
| Daviey | sudo apt-get install php5-sqlite | 14:05 |
| Daviey | $ php5 | 14:05 |
| Daviey | PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php5/20090626/sqlite.so' - /usr/lib/php5/20090626/sqlite.so: cannot open shared object file: No such file or directory in Unknown on line 0 | 14:05 |
| Daviey | Is the test case. :) | 14:05 |
| Ursinha | hello server people | 14:08 |
| koolhead17 | Daviey: got it. let me handle it now. :) | 14:09 |
| Daviey | Ursinha: hey! | 14:10 |
| Daviey | Ursinha: How did you get on looking for bitesize bugs? | 14:10 |
| Daviey | and targets for precise? | 14:10 |
| Ursinha | Daviey, not yet targeted, I'm crafting a list and will show you soon | 14:11 |
| Daviey | Ursinha: anything you can show today? :) | 14:15 |
| koolhead17 | Daviey: is there such list on aluncpad | 14:20 |
| koolhead17 | *launchpad | 14:20 |
| BrixSat | when i make zuxo insmod viawget.ko i get how come? "insmod: error inserting 'viawget.ko': -1 Operation not permitted" | 14:20 |
| BrixSat | zuxo = sudo | 14:20 |
| Daviey | koolhead17: there will be :) | 14:21 |
| * koolhead17 googled to find meaning of bit size bugs. | 14:21 | |
| smoser | hallyn, around ? | 14:22 |
| * koolhead17 finds his karma going down frequently :( | 14:22 | |
| hallyn | smoser: yup | 14:22 |
| smoser | can you attach a block device to a lxc container ? | 14:22 |
| smoser | i'm guessing you can do it by just adding entries in /dev/ for it. right? | 14:24 |
| hallyn | sure,the only thing is it doesn't do qemu-nbd style parsing of partitions. | 14:24 |
| hallyn | you shouldn't even ahve to add the dev entries if you can specify the device in /var/lib/lxc/container/fstab | 14:24 |
| hallyn | The host will then be mounting it for you | 14:24 |
| smoser | i dont really want it mounted | 14:25 |
| smoser | this question is targetted at 2 similar things | 14:26 |
| uvirtbot | New bug: #881446 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/881446 | 14:26 |
| smoser | a.) adding "config drive" to openstack lxc | 14:26 |
| smoser | b.) adding ebs disk attachment to openstack lxc | 14:26 |
| hallyn | smoser: so you're talking about libvirt-lxc | 14:26 |
| smoser | my interest in using this would imply that. | 14:27 |
| hallyn | smoser: you might have to do smoething with the devices whitelist | 14:27 |
| hallyn | smoser: pls dont' call libvirt-lxc lxc, you may get the wrong answer. | 14:28 |
| hallyn | smoser: I *think* libvirt will create devices whitelist entries for all sepecified block devices at startup | 14:28 |
| hallyn | but if you want to add it after the fact, you may need to manually add hte whitelist entry. (not hard) | 14:28 |
| hallyn | libvirt doesn't (last I knew) offer a way to do it through virsh | 14:29 |
| smoser | ok. but it is something that could be done. | 14:29 |
| hallyn | yup | 14:29 |
| cjs226 | Ubuntu 11.04: I've run "/etc/init.d# update-rc.d myprocess_stop stop 1 0 1 6 ." which adds the appropriate links to /etc/rc0.d rc1.d and rc6.d. however the scripts are called only until AFTER the first reboot. any ideas? | 14:31 |
| Melior | hey, where do i set time in ubuntu server. my time is 1 day ahead of my normal time. | 14:56 |
| davidgiluk_ | does anyone happen to know anything about membase? I've built it on ARM (Oneiric) and it passes the one 2 line example at the bottom or the membase build page - is there any simple test I can do to check it's sane? | 15:00 |
| sroecker | Melior: maybe you use ntp to synchronize your time | 15:00 |
| uvirtbot | New bug: #881464 in keystone (universe) "[MIR] keystone" [Undecided,Incomplete] https://launchpad.net/bugs/881464 | 15:01 |
| Melior | sroecker: sure, how? | 15:02 |
| Melior | I tried ntpdate ntp.ubuntu.com | 15:03 |
| Melior | 25 Oct 17:03:09 ntpdate[5814]: the NTP socket is in use, exiting | 15:03 |
| sroecker | Melior: ntpdate ntp.ubuntu.com | 15:03 |
| sroecker | oh | 15:03 |
| Melior | oh, my laptop is showing the wrong date :O dooh | 15:09 |
| === al-maisan is now known as almaisan-away | ||
| zul | lynxman: where is the puppet branch you merged again? | 15:45 |
| lynxman | zul: lp:~lynxman/ubuntu/precise/puppet/update275 | 15:46 |
| zul | thanks | 15:46 |
| lynxman | zul: np :) | 15:47 |
| zul | lynxman: ftbfs | 15:52 |
| lynxman | zul: *facepalm* | 15:53 |
| lynxman | zul: builds in my ppa :/ | 15:53 |
| lynxman | zul: https://launchpad.net/~lynxman/+archive/ppa <-- it's right there | 15:54 |
| zul | http://pastebin.ubuntu.com/718927/ | 15:55 |
| zul | nm....ill just get it from there | 15:55 |
| lynxman | zul: ty :) | 15:56 |
| Daviey | Meeting starting in 1 min, in #ubuntu-meeting | 15:59 |
| uvirtbot | New bug: #881483 in vsftpd (main) "vsftpd needs dbus to get status informations as user" [Undecided,New] https://launchpad.net/bugs/881483 | 16:14 |
| uvirtbot | New bug: #881504 in tomcat6 (main) "java.util.MissingResourceException thrown in default setup" [Undecided,New] https://launchpad.net/bugs/881504 | 16:28 |
| mdeslaur | zul: fyi don't merge puppet 2.7.5, we need 2.7.6 to fix this: http://puppetlabs.com/security/cve/cve-2011-3872/ | 16:31 |
| uvirtbot | mdeslaur: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3872) | 16:31 |
| zul | mdeslaur: oh...ok...i wont then :) | 16:32 |
| jdstrand | seriously, dbus support for vsftpd? | 16:32 |
| jdstrand | can that just be "Won't Fix" | 16:32 |
| jdstrand | :P | 16:32 |
| zul | jdstrand: no we must *do* that :) | 16:35 |
| jdstrand | one could disable dbus support in vsftpd | 16:35 |
| jdstrand | but whatever | 16:35 |
| jdstrand | I was just surprised by it | 16:35 |
| cjs226 | Ubuntu 11.04: I've run "/etc/init.d# update-rc.d myprocess_stop stop 1 0 1 6 ." which adds the appropriate links to /etc/rc0.d rc1.d and rc6.d. however the scripts are called only until AFTER the first reboot. any ideas? | 17:16 |
| RoyK | jdstrand: wtf is dbus? | 17:56 |
| jdstrand | RoyK: a message bus that allows applications to communicate with each other. typically used in desktop environments. underneath the hood it almost always uses IPC | 17:57 |
| RoyK | why would you want something like that for an FTP server? | 17:58 |
| koolhead17 | RoyK: hahaha | 18:21 |
| uvirtbot | New bug: #881579 in samba (main) "syntax error in /etc/network/if-up.d/samba" [Undecided,New] https://launchpad.net/bugs/881579 | 18:22 |
| koolhead17 | (11:26:36 IST) RoyK: jdstrand: wtf is dbus? | 18:22 |
| === negronjl_mobile is now known as negronjl | ||
| jdstrand | RoyK: exactly! now you know the source of my shock and horror ;) | 18:29 |
| koolhead17 | Daviey: around? | 18:33 |
| koolhead17 | do i need to work on php5-sqlite now instead php5 | 18:35 |
| koolhead17 | as suggested | 18:35 |
| Daviey | koolhead17: oi | 18:35 |
| Daviey | koolhead17: no, php5-sqlite isn't in later versions of ubuntu | 18:36 |
| Daviey | (source package) | 18:36 |
| koolhead17 | Daviey: i have downloaded the php5-sql pkg and extracting the deb package | 18:36 |
| koolhead17 | to get sqlite.so | 18:36 |
| koolhead17 | now i wanted to know where should i move this :) | 18:37 |
| Daviey | You shouldn't! | 18:37 |
| koolhead17 | oops | 18:37 |
| Daviey | koolhead17: Keep doing what i suggested.. | 18:37 |
| Daviey | the 'helpful' suggestion on the bug report is wrong. | 18:37 |
| koolhead17 | oops. ok. | 18:38 |
| koolhead17 | checking extraplugin contents | 18:39 |
| fuho | Hi, how would I go about anonymizing all my connections I have 2 VPS servers to my disposal. Is VPN enough? | 18:50 |
| soren | fuho: Depends on who you're trying to hide from and why. | 18:58 |
| fuho | noone in particular, just don't think i want to keep a slime trail behind me whereever I go. | 18:59 |
| soren | Without further information, yes, VPN is probably fine. | 19:00 |
| fuho | soren: Say I want to download couple thousand images from certain government agancy, and don't want my IP flooding their logs | 19:00 |
| soren | Then no. | 19:00 |
| soren | They'll just show up as being from your VPS. | 19:00 |
| fuho | soren: Thats why I though I could link two VPSes, but then I would have to first gain access to someone elses server I guess, otherwise its always my device at the end. | 19:01 |
| soren | Yeah, so you'd be doing something illegal to mask something legal. | 19:02 |
| fuho | yeah | 19:03 |
| JanC | you can go to a commercial VPN provider... | 19:03 |
| fuho | soren: I don't think the fact that something is legal explicitly means you wont be punished for it. | 19:03 |
| fuho | JanC: But then they would have my details. I just want my old anonymity back. | 19:04 |
| Randolph | hi all | 19:04 |
| JanC | what old anonymity? | 19:04 |
| soren | fuho: Well, doing something illegal in the process sure makes it easier to justify going after you in the first place. | 19:04 |
| Randolph | need help about ufw | 19:05 |
| fuho | soren: You are probably right, I think I am just being paranoid. | 19:05 |
| Randolph | could anyone help me ? | 19:05 |
| Randolph | I enable ufw on ubuntu server 10.04 | 19:06 |
| soren | fuho: Nothing wrong with that. Just need to direct your paranoia. | 19:06 |
| Randolph | that acts as a gateway | 19:06 |
| fuho | soren: government and corporations | 19:06 |
| Randolph | incoming traffic is allowed | 19:06 |
| Randolph | oups | 19:07 |
| Randolph | I made a mistake | 19:07 |
| Randolph | incoming traffic is denied | 19:07 |
| Randolph | outgoing traffic is allowed | 19:07 |
| Randolph | but when I try to ping a machine on the wan from the lan , it is impossible | 19:08 |
| Randolph | nobody knows about ufw setup on a gateway ? | 19:09 |
| pmatulis | Randolph: do you allow in established sessions? did you ensure the remote end has a route back to you? | 19:11 |
| Randolph | there is no problem from wan to lan | 19:11 |
| Randolph | <pmatulis>there is no problem from wan to lan | 19:12 |
| pmatulis | Randolph: turn off the f/w and test that | 19:13 |
| Randolph | I also tried this | 19:13 |
| Randolph | <pmatulis>and all is OK when disabling ufw | 19:14 |
| Randolph | <pmatulis>ping OK, telnet on port 80 to a machine on the WAN is OK | 19:15 |
| pmatulis | Randolph: so you should pastebin your filter rules | 19:15 |
| Randolph | <pmatulis>It seems my packets are blocked from eth1 to eth0 | 19:15 |
| pmatulis | Randolph: so you should pastebin your filter rules | 19:16 |
| pmatulis | Randolph: and logging all blocked traffic will help too | 19:16 |
| Randolph | <pmatulis>ufw status verbose | 19:17 |
| Randolph | Status: active | 19:17 |
| Randolph | Logging: on (low) | 19:17 |
| Randolph | Default: deny (incoming), allow (outgoing) | 19:17 |
| Randolph | New profiles: skip | 19:17 |
| Randolph | To Action From | 19:17 |
| Randolph | -- ------ ---- | 19:17 |
| Randolph | 22/tcp ALLOW IN Anywhere | 19:17 |
| Randolph | 53/udp ALLOW IN Anywhere | 19:17 |
| Randolph | 80 ALLOW IN Anywhere | 19:17 |
| Randolph | 443/tcp ALLOW IN Anywhere | 19:17 |
| Randolph | 25/tcp ALLOW IN Anywhere | 19:17 |
| pmatulis | gah, i said 'pastebin' | 19:17 |
| ersi | Randolph: Do you even have forwarding enabled | 19:18 |
| Randolph | <pmatulis>yes I enabled it on systctl.conf | 19:20 |
| Randolph | <pmatulis>net.ipv4.ip_forward=1 | 19:20 |
| ersi | Alright. That's good. | 19:21 |
| Randolph | pmatulis: it seems my packets are blocked from eth1 to eth0 | 19:29 |
| pmatulis | Randolph: so you should pastebin your filter rules (output to 'sudo iptables -L -n' should do it) | 19:31 |
| Randolph | pmatulis, I tried iptables -L and your command is more human readable | 19:32 |
| pmatulis | Randolph: my command is more human readable? huh? | 19:33 |
| Randolph | pmatulis, yes | 19:33 |
| === Jasonn is now known as Jasonn|NotHere | ||
| * koolhead17 never knew pbuilder-dist command will take some much time on his laptop :( | 19:44 | |
| === Jasonn|NotHere is now known as Jasonn | ||
| TheEvilPhoenix | anyone in here able to help me reduce the amount of memory mysqld uses, and also limit the number of threads it spawns/starts? | 20:05 |
| RoyK | let's see... new 24 bay supermicro machine, a couple of 250GB drives for the root, some 18 2TB drives for a nice pool with striped mirrors, some SSDs, what can go wrong? | 20:06 |
| RoyK | TheEvilPhoenix: how much does it use? | 20:06 |
| RoyK | memory... | 20:06 |
| TheEvilPhoenix | RoyK: sec | 20:07 |
| TheEvilPhoenix | 31MB per thread, times 8 threads | 20:07 |
| RoyK | no, that's all shared | 20:07 |
| RoyK | mostly | 20:07 |
| TheEvilPhoenix | its currently using up the most memory (in terms of percentage per process) | 20:07 |
| TheEvilPhoenix | well then this is problematic | 20:07 |
| TheEvilPhoenix | because the VPS everything's on is running out of memory | 20:08 |
| RoyK | how much memory does the VPS have? | 20:08 |
| TheEvilPhoenix | 640MB, most if it used (562MB/240MB used) | 20:08 |
| RoyK | that's not a lot ... | 20:09 |
| TheEvilPhoenix | indeed | 20:09 |
| TheEvilPhoenix | 'tis why i'm using nginx-minimal instead of apache or some shit | 20:10 |
| TheEvilPhoenix | oops that slipped | 20:10 |
| RoyK | TheEvilPhoenix: for a busy DBMS, you might want a bit more memory | 20:11 |
| TheEvilPhoenix | its only a Joomla DB | 20:11 |
| TheEvilPhoenix | and i think i found another memory hog | 20:11 |
| * TheEvilPhoenix points at bind9 | 20:12 | |
| TheEvilPhoenix | oh and teamspeak 3 voice servers | 20:13 |
| TheEvilPhoenix | :P | 20:13 |
| TheEvilPhoenix | that explains the memory usage | 20:13 |
| * TheEvilPhoenix now has freed up >=110MB | 20:13 | |
| RoyK | teamspeak is evil | 20:15 |
| RoyK | better us Mumble | 20:15 |
| RoyK | works better and is OSS | 20:16 |
| monaDeveloper | Hi I'm trying to update my php.ini file default values max file size uploads | 21:10 |
| monaDeveloper | and I save that and restart my apache but always phpinfo() is the same | 21:11 |
| kyconquers | I am trying to configure a mail server and currently have postfix with a ldap-table lookup. i tried adding dovecot as a MDA, so that postfix relays the email to dovecot but have run into alot of trouble. is there an advantige to using dove cot as a MDA, or is there a good alternative? | 21:16 |
| AndreKR_unreg | Has anyone successfully run an Ubuntu EC2 instance in the EU West availability zone (don't even know if that makes a difference)? I tried several AMIs with several instance types now and couldn't connect to a single one of them. | 22:59 |
| kirkland | AndreKR_unreg: I'm sure that utlemming and smoser have | 23:01 |
| AndreKR_unreg | I read the name smoser while googling for a solution. ;) | 23:02 |
| smw | AndreKR_unreg, I have successfully run it in US-East | 23:07 |
| smw | AndreKR_unreg, chmod 600 yourkey.pem; ssh -i yourkey.pem ubuntu@host | 23:07 |
| AndreKR_unreg | smw: I can't really imagine that makes a difference, but I will try now... can't believe that none of the official AMIs is working. | 23:07 |
| arrrghhh | hey all. i was told about a plugin for WHS, and was hoping there was something similar for Ubuntu/Linux. it's called "Lights Out" and it basically suspends/hibernates/powers off the server depending on usage, schedule, etc. | 23:08 |
| smw | AndreKR_unreg, have you gotten any EC2 image working? | 23:08 |
| adam_g | AndreKR_unreg: which ubuntu release AMIs are are you using? | 23:08 |
| AndreKR_unreg | smw: It doesn't even respond to ping. Last line of log: cloud-init boot finished at Tue, 25 Oct 2011 22:40:06 +0000. Up 18.41 seconds | 23:08 |
| arrrghhh | the key is it has the ability to wake the server if there's any network traffic, etc... | 23:08 |
| arrrghhh | i found powernap, but i'm not sure if i'll be able to wake the server back up | 23:08 |
| smw | AndreKR_unreg, amazon blocks pings by default | 23:08 |
| AndreKR_unreg | smw: Yes, the Amazon Linux images are working. | 23:09 |
| AndreKR_unreg | smw: Ah ok, but I get connection timed out on SSH also. | 23:09 |
| smw | AndreKR_unreg, launch this AMI; https://console.aws.amazon.com/ec2/home?region=us-west-1#launchAmi=ami-79772b3c | 23:10 |
| smw | AndreKR_unreg, make sure that you put it in a security group that allows TCP on port 22 (ssh) | 23:11 |
| AndreKR_unreg | adam_g: I tried ami-cc0e3cb8 (Lucid), ami-0e0f3d7a (Maverick) and ami-61b28015 (Oneiric). | 23:11 |
| smoser | AndreKR_unreg, i suspect that you have not set up security groups. | 23:12 |
| smw | smoser, he claims amzn linux worked :-\ | 23:13 |
| AndreKR_unreg | smoser: I have set up the default decurity group with ICMP Port ALL, TCP 0-65535 und UDP 0-65535 allowed. | 23:13 |
| smoser | well, we need console output (although i doubt that will work) and then how he is trying to ssh in. | 23:13 |
| smoser | ssh -i mykey.pem ubuntu@ec2-host | 23:13 |
| uvirtbot | New bug: #881721 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: subprocess new post-removal script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/881721 | 23:13 |
| smoser | AndreKR_unreg, but, fwiw, thouse amis *do* work, we use that very one (ami-cc0e3cb8) multiple times a day during publish of other builds. | 23:14 |
| AndreKR_unreg | smoser: On what instance type do you run it? | 23:15 |
| AndreKR_unreg | smw: I launched ami-79772b3c on a t1.micro instance, let's see what happens there. No log yet. | 23:19 |
| AndreKR_unreg | smoser: And I launched ami-cc0e3cb8 on an m1.large... | 23:19 |
| smw | AndreKR_unreg, can I have the ip? | 23:26 |
| AndreKR_unreg | smw: smoser: Here's the log of the EU one: http://pastebin.com/6L23nXpf | 23:27 |
| AndreKR_unreg | ec2-46-137-65-115.eu-west-1.compute.amazonaws.com | 23:27 |
| smoser | it really seems like you dont have security groups set up correctly. | 23:28 |
| smoser | the instance is up andwaiting for you. | 23:28 |
| * smw concurs | 23:28 | |
| smw | AndreKR_unreg, are you sure it is using the correct security group? | 23:28 |
| smw | AndreKR_unreg, are you sure that that security group is setup correctly? | 23:29 |
| smoser | http://paste.ubuntu.com/719282/ | 23:29 |
| smoser | nmap says you're firewalled off. | 23:29 |
| === koolhead17 is now known as koolhead17|zzZZ | ||
| smoser | AndreKR_unreg, euca (or ec2-) euca-describe-instances $IID | 23:29 |
| smoser | then, get the security group that is listed there and do: euca-describe-group <that-group> | 23:30 |
| AndreKR_unreg | smw smoser: Oh wait, I see. | 23:30 |
| AndreKR_unreg | Yes, security group was wrong... source was only the other security group, not 0.0.0.0. | 23:31 |
| AndreKR_unreg | ubuntu@ip-10-227-98-63:~$ :) I'm a moron. Thanks. :) | 23:32 |
| smoser | glad its working, AndreKR_unreg | 23:38 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!