| kristianpaul | There is a easy way to get a ubuntu work as wireless acess point? | 01:12 |
|---|---|---|
| kristianpaul | like a methapackage for the task or something :) | 01:12 |
| _Techie_ | is there a way to have ubuntu remove a list of packages using apt-get purge when one/some of the listed packages are not installed | 01:18 |
| _Techie_ | is there any way to remove all ubuntu-desktop packages so that im left with ubuntu-minimal for a server im setting up, the only disc i had on hand was a desktop disc | 01:28 |
| thesheff17 | _Techie_, the kernel is different from server to desktop | 01:28 |
| twb | _Techie_: it would be better to install from the Server CD in the first place, but yes, you can remove packages you don't need | 01:29 |
| twb | kristianpaul: you just need hostapd | 01:30 |
| twb | kristianpaul: the documentation for it is a bit obtuse, but it's actually reasonably simple configuration | 01:30 |
| _Techie_ | twb: are you able to provide an easy way of removing the un necessary packages, the purexfce instructions are a tad outdated | 01:32 |
| _Techie_ | thesheff17: i dont need a streamlined kernel, all it will be doing is acting as a dhcp server and router between a LAN and the internet | 01:32 |
| twb | _Techie_: broadly speaking, go into aptitude and markauto things | 01:33 |
| twb | _Techie_: you'll want to keep ubuntu-standard and -minimal metapackages, and a kernel. Oh, and a bootloader. | 01:34 |
| twb | If you get rid of EVERYTHING else, you should still be able to boot, and install packages you do need. | 01:34 |
| twb | I would recommend not getting rid of everything else in one go tho -- rather e.g. markauto ?section(metapackages), ?section(x11) and ?section(gnome) to begin with, plus everything in ?section(libs) | 01:34 |
| twb | On my own systems I aim for ~i!~M to show only the packages I actually asked for | 01:35 |
| _Techie_ | twb: just checking, does ubuntu-minimal require networking and /bin/bash , would hate to accidentaly remove those | 01:59 |
| _Techie_ | or ubuntu-standard | 02:00 |
| twb | You'd have to really go out of your way to get rid of bash | 02:00 |
| twb | Not so sure re. networking | 02:00 |
| twb | If you've been using NetworkManager up until now, that will obviously go | 02:00 |
| _Techie_ | its base install | 02:01 |
| _Techie_ | and it will all be re configured from CLI | 02:02 |
| twb | The main stuff for networking will be ifupdown, dhclient and netbase or so | 02:03 |
| twb | Assuming ethernet DHCP client | 02:03 |
| twb | Currently dhclient is called isc-dhcp-client AFAICT | 02:03 |
| twb | If you just pay attention to what you're removing you should be OK | 02:04 |
| _Techie_ | well, i just marked a ton of stuff as auto and am hoping for the best | 02:05 |
| twb | Like I said, it's safer to do a bit at a time | 02:05 |
| _Techie_ | this is odd, i cant htink of what would be reuiring compiz-fusion | 02:06 |
| twb | aptitude why compiz-fusion, or hit "r" in the UI | 02:06 |
| _Techie_ | okay, i just went nuts | 02:08 |
| _Techie_ | either im gonna learn something incredibly cool... or im gonna be back at square one within half an hour | 02:08 |
| _Techie_ | maybe if this doesnt go too well, ill burn a server disc | 02:08 |
| _Techie_ | okay, i still havent been completely locked out... maybe im not trying hard enough | 02:10 |
| _Techie_ | twb: just rebooting now, hopefully everything still works | 02:29 |
| twb | You're still here, so I guess you had the sense to IRC from another box | 02:31 |
| _Techie_ | this aint my first rodeo | 02:33 |
| _Techie_ | okay, things seemed to have worked to a point | 02:35 |
| _Techie_ | some things are stopping some X11 packages from being removed, and im not going to go chasing after them | 02:36 |
| twb | Wise move | 02:37 |
| twb | If it's just some libraries, it doesn't hurt to leave them installed | 02:37 |
| ttt | anybody know how change password trough command line for ochestra web browser interface? | 02:38 |
| twb | ttt: where is it stored? flat files, ldap? | 02:39 |
| ttt | well | 02:40 |
| ttt | ok | 02:40 |
| ttt | in /etc/cobbler under u 11.10 server | 02:40 |
| ttt | user.conf ? | 02:41 |
| twb | Dunno, then | 02:41 |
| ttt | theres any command line promt program jsutto change it i jsut tried the one i configured and the login page jsut comebakc to the same login page.. | 02:41 |
| twb | ttt: sorry, I don't use that software, and it sounds like a software-specific password | 02:42 |
| tdignan | Right now I'm using google apps. Is it possible to stick my own postfix installation as the 10 priority MX record and have it fallback on google apps? | 05:43 |
| lifeless | depends on what you're using google apps for... if for mail delivery, you'll have to send it to google at some point | 05:44 |
| tdignan | i want to move over to my own server for mail delivery, receive, and transfer | 05:45 |
| tdignan | i've got only one server though, so I'm asking if there's a way to kind of back up the receiving end | 05:45 |
| twb | In theory yes; in practice depends what google does | 05:46 |
| twb | Certainly my MTA acts as a secondary for some of my customers, accepting mail on their behalf and relaying it to them when they come back online | 05:46 |
| tdignan | http://pastie.org/2786323 here's my new mx | 05:47 |
| tdignan | is this worth a try? | 05:47 |
| twb | Christ, can't you just give it in dig notation? | 05:48 |
| tdignan | sorry, 1 sec | 05:48 |
| tdignan | http://pastie.org/2786328 | 05:49 |
| twb | Thanks, although I don't know the answer, since I don't use google :-) | 05:52 |
| tdignan | What concept should I research so I can better understand this problem? | 05:53 |
| twb | Though it is always a good idea to have a null-mx as first entry and a tarpit as the last entry | 05:53 |
| CrazyGir | why would update-rc.d say this Adding system startup for /etc/init.d/drbd ... | 06:30 |
| twb | CrazyGir: because someone ran it? | 06:30 |
| CrazyGir | when running update-rc.d drbd disable | 06:30 |
| CrazyGir | ...sorry, didn't expect that linebreak | 06:30 |
| twb | IIRC disable isn't guaranteed to continue working; maybe they broke it | 06:31 |
| CrazyGir | wtf? | 06:31 |
| CrazyGir | why would that be | 06:31 |
| twb | Can't see that mentioned in the sid version of the manpage tho | 06:31 |
| twb | So: I don't know why you got that behaviour. | 06:32 |
| twb | Are you on lucid, or what? | 06:32 |
| CrazyGir | hrm | 06:32 |
| CrazyGir | should be lucid, but this one particular might be running 11.04 - what is the ubuntu way for checking/confirming? | 06:32 |
| CrazyGir | I would expect uname -a to tell you | 06:33 |
| twb | lsb_release -a | 06:33 |
| CrazyGir | bah, this particular system is natty | 06:33 |
| CrazyGir | and I'm so going to wipe and reinstall with lucid :) | 06:34 |
| twb | I doubt that'll help | 06:34 |
| twb | But whatever | 06:34 |
| CrazyGir | it'll help with a few things | 06:34 |
| twb | Granted | 06:34 |
| CrazyGir | I find 10.04 to be far more stable | 06:34 |
| twb | I meant with the issue youmentioned | 06:34 |
| CrazyGir | yep | 06:34 |
| CrazyGir | I've found the drbd packages in ntty to be questionable | 06:35 |
| twb | I wasn't enthusastic about drbd in the first place | 06:35 |
| twb | SANs are hard work | 06:35 |
| CrazyGir | yea they are | 06:35 |
| twb | In the end I just told <customer> "you don't really need this, just buy a beefy box and run samba, it'll be less headache" | 06:35 |
| CrazyGir | I am looking to try out the qlogic-build-it-yourself route | 06:36 |
| tdignan | Well, I've got postfix and dovecot both working. I ended up deleting all my google MX's | 06:36 |
| tdignan | so I have only one 10 MX rec. | 06:36 |
| CrazyGir | eg, you get a bunch of FC HBAs, run their drivers, have at least 3 systems, and you get your own SAN cluster | 06:36 |
| twb | tdignan: dig mx cyber.com.au +short <-- re null-mx + tarpit | 06:36 |
| tdignan | twb: thank you | 06:37 |
| twb | Basically just make sure your first one returns REJECT not DROP on 25; and the last one I just use some other guy's tarpit | 06:37 |
| twb | Cuts out some of the spammers that don't follow correct MX logic | 06:38 |
| tdignan | so 20 and 30 are your actual mail servers | 06:38 |
| twb | Yep | 06:38 |
| tdignan | i'm going to google how to make this null mx | 06:38 |
| tdignan | thanks a bunch | 06:38 |
| twb | Actually the same one; the exetel one is the backup DSL line | 06:38 |
| twb | That plus an RBL or two, plus greylisting, is about all the antispam we do | 06:39 |
| twb | A couple of our users who interact with normal people, and have had the same email address for twenty years, we use crm114 for them, but overall I am against body scanning | 06:39 |
| * CrazyGir <3 openbsd's spamd + pf + tarpitting + open-smtpd | 06:39 | |
| SpamapS | mtaylor: very belated "pong" .. ;) | 06:40 |
| tdignan | ah cool | 06:40 |
| tdignan | I can break out the body scanners here, this is meant to be my own private email for my business | 06:40 |
| twb | CrazyGir: I threw out all my ancient obsd and sol routers and just put in a single ubuntu box :-) | 06:40 |
| CrazyGir | you could have just upgraded them too | 06:40 |
| CrazyGir | or one | 06:41 |
| CrazyGir | :P | 06:41 |
| CrazyGir | sorry, but OpenBSD's correctness and simplicity trump ubuntu anyday - not that ubuntu doesn't have its places or successes, but it fails (miserably) in the correctness/simplicity categories | 06:41 |
| twb | Sure but I like a homogeneous network and I didn't want to have to learn those | 06:42 |
| CrazyGir | indeed | 06:42 |
| CrazyGir | are you using puppet for that homogenous network? | 06:42 |
| twb | Nope, too lazy | 06:42 |
| CrazyGir | you are so silly | 06:43 |
| CrazyGir | (to claim laziness) | 06:43 |
| twb | puppet doesn't even have a versioned wire protocol | 06:43 |
| twb | And the puppet devs respond to every issue with "upgrade to latest version on both ends" | 06:43 |
| twb | And of course then you need ruby on every goddamn host | 06:43 |
| CrazyGir | and that prevents you from simplifying maintaining your homogenous network how? | 06:43 |
| twb | If I had 1000 hosts I might bother; I have more like 20 | 06:43 |
| twb | And most of them are actually just jails | 06:44 |
| CrazyGir | still silly, in my opinion | 06:44 |
| twb | Shrug | 06:44 |
| SpamapS | twb: I think the tipping point for needing something like puppet is around 20 servers actually. | 06:44 |
| twb | Have you tried to write a parser for sysctl.conf in puppet? | 06:44 |
| CrazyGir | there's so much (ridiculous) redundancy in sysadmin work | 06:44 |
| twb | Or did you just do what every other bastard did, and just use the exec plugin? | 06:44 |
| twb | At that point you're really just using puppet as a glorified clusterssh | 06:44 |
| * SpamapS still prefers using OpenBSD for firewalls, as its a nice "air gap" to have a different OS protecting your network. | 06:45 | |
| twb | SpamapS: I have actual air gaps | 06:45 |
| SpamapS | twb: note, Juju is the new glorified clusterssh. :) | 06:45 |
| CrazyGir | I'm not so advanced, so right now puppet is a glorified fileserver + automating user/package configuration + some specialized scripts for special services | 06:45 |
| lifeless | SpamapS: bwah | 06:45 |
| CrazyGir | but I believe, once I have configured a system/service/role, I should not be doing it again | 06:46 |
| CrazyGir | I should be adding to it | 06:46 |
| twb | Most of the package configuration I do via .deb from the internal PPA repo | 06:46 |
| CrazyGir | it's like rewriting an authentication module for your webapp, just cause you are redeploying | 06:46 |
| CrazyGir | so silly | 06:46 |
| twb | And all the jails are based off a local template that has e.g. ldap pre-configured | 06:46 |
| CrazyGir | :) | 06:46 |
| CrazyGir | to each and his own | 06:46 |
| SpamapS | CrazyGir: I believe you and twb are agreeing on principle, but not on method. | 06:46 |
| CrazyGir | sounds like it | 06:47 |
| twb | I would be more enthusiastic about puppet if I had the impression of *rigour* | 06:47 |
| CrazyGir | though my principles here also dictate that I centralize the configuration and make redeployment a less-than-one-hour sort of task | 06:47 |
| twb | Maybe it's just that I used to work with some puppet employees :P | 06:47 |
| CrazyGir | twb: if you have others you manage, you can also make them do it! | 06:48 |
| CrazyGir | hah | 06:48 |
| twb | I can deploy a new jail in about five minutes, FWIW | 06:48 |
| CrazyGir | no, I mean the whole rack | 06:48 |
| twb | Most of that is choosing a hostname | 06:48 |
| CrazyGir | :D | 06:48 |
| CrazyGir | I'm still working towards that dream, but I'm already pretty close, which is awesome to me, as I've only been working towards that goal for a few months now | 06:49 |
| onre | that's why there is a wikipedia article containing a list of names of moon's geographical features | 06:49 |
| twb | Most of my customers have one server and a couple dozen windows desktops, so puppet is not an attractive proposition for those | 06:49 |
| tdignan | ah, so the NULL mx is just a way of forcing the MTA to have to go down the list of priorities and try the next one | 06:49 |
| tdignan | ? | 06:49 |
| twb | tdignan: yes | 06:49 |
| twb | tdignan: it rules out anyone too lazy to try >1 MX | 06:49 |
| tdignan | excellent trick | 06:50 |
| twb | And the tarpit nails any anyone who tries to work from the bottom up, which is a common tactic because people often (stupidly) only put anti-spam on the first MX | 06:50 |
| SpamapS | hah that still happens? | 06:50 |
| twb | SpamapS: well, maybe my advice is old | 06:50 |
| twb | SpamapS: lot of greybeards here | 06:50 |
| SpamapS | I tend to just have my hosting provider's barracudas as MX's.. and then the @ that resolves to my webserver rejects anything not from those two barracudas. | 06:52 |
| twb | SpamapS: hard disks? | 06:53 |
| tdignan | i'm paranoid to just use someone's tarpit: if I do this on my other server: iptables -A input -p tcp -m tcp --dport 25 -j TARPIT -- will that interfere with my ability to send outgoing email from that machine, locally? | 07:02 |
| twb | tdignan: is that a separate host from the main MTA? | 07:03 |
| tdignan | yeah | 07:03 |
| twb | Should be fine | 07:03 |
| twb | It's -A INPUT of course | 07:03 |
| tdignan | I just want to preserve the ability on that host, to be able to shoot off an email | 07:03 |
| tdignan | that's fine, right? | 07:03 |
| twb | tdignan: I think so | 07:03 |
| tdignan | awesome, thank you for all your help | 07:03 |
| tdignan | I am new to using linux as a server other than apache and ssh | 07:04 |
| SpamapS | twb: no, they are spam filtering appliances | 07:04 |
| SpamapS | twb: by far the best I've seen | 07:04 |
| twb | SpamapS: bah | 07:04 |
| twb | https://secure.wikimedia.org/wikipedia/en/wiki/Barracuda_Networks | 07:04 |
| SpamapS | heavily cultivated blocklists | 07:04 |
| twb | Haha "spam firewalls" | 07:04 |
| SpamapS | Forgive them the terminology.. they really do obliterate anything else I've seen. | 07:05 |
| twb | It's based on clamd | 07:05 |
| SpamapS | and spamassassin :) | 07:06 |
| twb | I'm not a fan of either | 07:06 |
| SpamapS | but what you're paying for is their constantly updated and managed blocklists | 07:06 |
| twb | Mainly because whenever I ssh into a customer that uses them, 99% of the load is from clam | 07:06 |
| SpamapS | SA and clamd are just for the obvious stuff. | 07:06 |
| SpamapS | yeah, its an appliance.. its not your problem. :) | 07:06 |
| twb | I sell appliances, I know what they look like on the inside :-( | 07:07 |
| twb | "Appliance" just means "don't look, cthulu inside" | 07:07 |
| CrazyGir | hah | 07:07 |
| twb | Oh man, or those Thecus NASs. They have everything turned off in busybox, but they still use bash for all their scripts :-/ | 07:08 |
| tdignan | is there something I can install that will give me periodic reports on my system via email? | 10:03 |
| hydromet | hi, I'm trying to do a somewhat difficult installation of Ubuntu Server 11.04 amd64 onto a machine (a Mac Xserve) that has 32-bit EFI firmware only ... someone who wrote up instructions on how to do this suggested "downloading the network installer of your choice in ISO format" (from the Linux distro desired, in my case Ubuntu Server) ... | 10:29 |
| hydromet | I didn't see it on the Ubuntu web site, is there a specific network installer (in ISO disc image format)? | 10:29 |
| hydromet | what I have seen is only this file: | 10:30 |
| hydromet | ubuntu-11.04-server-amd64.iso | 10:30 |
| hydromet | thank you for any suggestions | 10:30 |
| patdk-lap | http://archive.ubuntu.com/ubuntu/dists/natty/main/installer-amd64/current/images/netboot/mini.iso | 10:36 |
| hydromet | thanks patdk_lap: | 10:42 |
| greppy | tdignan: logcheck is good, logwatch is handy as well. | 10:45 |
| jasonmsp | hey all. Anyone know why my server would be showing an open 3128 port attributed to squid-http (when scanned externally) but lsof, /etc/services and netstat don't show anything running? | 11:03 |
| jasonmsp | 11:03 | |
| qman__ | jasonmsp, either your server is running it and you just don't see it, or something is between your server and what you scanned it with/you scanned the wrong IP | 11:17 |
| tdignan | greppy: ah, thanks for the suggestions. | 11:18 |
| * tdignan 's wireless keyboard fails to transmit keystrokes when he turns his fan on :/ | 11:18 | |
| jasonmsp | qman__: thanks. The conclusion i've been coming to is that it is somewhere along the way. I've been using nmap. From a command prompt within the server it shows closed, from my present location it shows open. Is there a way to have nmap find out where the source along the way is? | 11:19 |
| qman__ | well, in order for it to show up as your server, it'd have to be a transparent device like an inline firewall or NAT router, or from your ISP if applicable | 11:21 |
| onre | or alternatively it's a backdoor. | 11:22 |
| qman__ | yeah, but nmap is pretty good at application detection, it'd have to be pretty sophisticated to fake being squid | 11:24 |
| tdignan | I've got logwatch installed and I see that it's created a file in /etc/cron.hourly | 11:30 |
| tdignan | I know how to edit user crontabs but have not used the /etc way before | 11:30 |
| tdignan | I'm sorry, I mean cron.daily | 11:30 |
| tdignan | what is the correct way to modify this to make it run every 3-4 hours, instead of daily? | 11:30 |
| uvirtbot | New bug: #884177 in lm-sensors (main) "fancontrol cannot read its own configuration file" [Undecided,New] https://launchpad.net/bugs/884177 | 11:31 |
| uvirtbot | New bug: #884173 in lm-sensors (main) "sensors returning a bogus temperature reading" [Undecided,New] https://launchpad.net/bugs/884173 | 11:33 |
| tdignan | nm, found it all in /etc/crontab | 11:35 |
| greppy | tdignan: logwatch is good for a daily status update, I depend on logcheck for hourly updates of things that I may need to be worried about. | 11:40 |
| tdignan | greppy: cool, trying it out now | 11:47 |
| tdignan | i made a new cron category called cron.quadly | 11:47 |
| tdignan | so stuff can run every 4 hours | 11:48 |
| SpamapS | woo, joined UDS plenaries just in time to see sabdfl praise Orchestra :) | 13:30 |
| SpamapS | http://video.ubuntu.com/live/ | 13:30 |
| ogra_ | SpamapS, and you were just mentioned ;) | 13:35 |
| sander^work | Where do I submit an bug? Getting lots of weird utf characters when choosing german language before login to phpmyadmin in ubuntu 9.10 server | 13:35 |
| ogra_ | 9.10 ? | 13:36 |
| ogra_ | thats EOL since a year i think | 13:36 |
| sander^work | Oh, ok. | 13:37 |
| sander^work | Is even the server version EOL ? | 13:37 |
| ogra_ | it wasnt an LTS, so it goes EOL after 18months | 13:37 |
| sander^work | ok | 13:38 |
| ogra_ | (hint: use LTS releases on servers :) ) | 13:38 |
| sander^work | I do now.. But at that time 10.04 wasn't released. | 13:39 |
| sander^work | I'll upgrade it. | 13:39 |
| ogra_ | yup, do that | 13:39 |
| * ersi hugs 10.04 | 13:40 | |
| * ersi cuddles 10.04 | 13:41 | |
| * SpamapS feeds a live mouse to 10.04 | 13:41 | |
| Ursinha | SpamapS: lol | 13:43 |
| \sh | sander^work, hopefully you don't have any nic bonding configs on your server | 14:16 |
| \sh | sander^work, be sure to read the release notes of lucid before you just upgrade...can be helpful for your dist-upgrade | 14:16 |
| lynxman | ersi: you're getting pretty personal with lucid aren't you ;) | 14:16 |
| ersi | sorry, can't talk - me and 10.04 is busy ;)' | 14:17 |
| * lynxman covers his eyes | 14:18 | |
| medberry | What #channel is the ITSM discussion going on? ubuntu-uds-bonaire1? or something else? lynxman ? RoAkSoAx ? | 14:19 |
| medberry | ah, cap b | 14:19 |
| lynxman | medberry: I'd say #ubuntu-uds-Bonaire1 | 14:19 |
| medberry | nod. | 14:20 |
| uvirtbot | New bug: #884240 in clamav (main) "I'm having the same issue." [Undecided,New] https://launchpad.net/bugs/884240 | 14:31 |
| pmatulis | funny bug | 14:32 |
| miceiken | Hey, after I did a release upgrade I got this error with PHP/PDO: SQLSTATE[HY000] [2019] Can't initialize character set UTF-8 (path: /usr/share/mysql/charsets/) | 14:48 |
| miceiken | Am I missing a package? | 14:48 |
| === beerbroy is now known as Hut-Josef | ||
| pmatulis | miceiken: should be in package 'mysql-server-core' | 15:36 |
| pmatulis | miceiken: but see http://is.gd/F44c6V | 15:37 |
| miceiken | pmatulis, neither of that worked | 16:00 |
| miceiken | mysql-server-core was already installed | 16:00 |
| RoAkSoAx | shang: are you at UDS? | 16:03 |
| RoAkSoAx | shang: if you are and wanna lookg fuyrther into the orchestra issue just let me know | 16:04 |
| The_Fred | hello | 16:17 |
| The_Fred | where can i get help with networking? | 16:18 |
| pmatulis | The_Fred: here, if you're using ubuntu server | 16:21 |
| The_Fred | pmatulis, I am using ubuntu desktop, but i removed network manager by mistake, and am trying to connect manually | 16:24 |
| pmatulis | The_Fred: edit /etc/network/interfaces, see the ubuntu server guide | 16:25 |
| The_Fred | when I do iwconfgi wlan1 key restricted XXX it thows: SET failed on device wlan1;invalid argument | 16:26 |
| The_Fred | thanks for the pointer pmatulis | 16:26 |
| RoyK | testing Condor, a cluster scheduler, I see it's got downloads for debian 5 or 6 - which one of those would match lucid best? | 16:49 |
| RoyK | huh - seems to be in the repos already... | 16:51 |
| RoyK | anyone here working with compute clusters? | 17:08 |
| === lifeless_ is now known as lifeless | ||
| RoyK | hm... condor looks like a good switchboard for parallel processing | 18:09 |
| SpamapS | condor? Isn't that the old thing that makes fork() possibly end up forking to another server? | 18:12 |
| RoyK | dunno yet - but it seems it's got some nifty features like stopping jobs and migrating them to idle hosts if the host running the job gets some more work, and even resume dead jobs | 18:13 |
| RoyK | seems a bit heavy on the network side, though | 18:13 |
| SpamapS | Mosix is the thing that I was thining of | 18:15 |
| RoyK | SpamapS: someone at work was talking about mosix - 'the way to go', but I started checking what open software were available for such a task... | 18:17 |
| RoyK | and since openmosix died three years ago, well... | 18:17 |
| SpamapS | Yeah | 18:17 |
| SpamapS | I think at this point if you have massive distributed jobs to run, hadoop is the king. | 18:18 |
| RoyK | I thought hadoop was mainly about storage | 18:18 |
| SpamapS | definitely not | 18:19 |
| SpamapS | HDFS is its default storage bit | 18:19 |
| Randolph | hi all | 18:19 |
| SpamapS | but you can store data in Cassandra, or CEPH | 18:19 |
| RoyK | doesn't seem to have the process migration thing that condor has | 18:21 |
| RoyK | or job migration | 18:21 |
| RoyK | SpamapS: seems the parallel computation bit isn't quite ready.... | 18:24 |
| SpamapS | uh | 18:25 |
| SpamapS | its driving the big data revolution | 18:25 |
| SpamapS | RoyK: hadoop is basically destroying traditional enterprise business intelligence .. | 18:26 |
| RoyK | SpamapS: still seems to lack a good scheduler... | 18:26 |
| SpamapS | "scheduler" ? | 18:26 |
| RoyK | for compute nodes | 18:26 |
| lickalott | gents, trying to install mysql and am getting errors with CVS and Docdb. I've tried cvs update and it fails. CVS isn't in the package manager. Kind of at stand still right now. | 18:27 |
| SpamapS | RoyK: like, so you can let 2 people fight over the same set of resources? | 18:27 |
| SpamapS | RoyK: we call that "the cloud" ;) .. | 18:27 |
| SpamapS | lickalott: cvs?! | 18:27 |
| lickalott | apparently it's needed for what our plans are for mysql. I'm kind of in and out of the conversation. lemme get some details... | 18:28 |
| RoyK | SpamapS: like if you have a job that will need to spawn 1000 processes across a compute cluster | 18:29 |
| RoyK | lickalott: are you using CVS? | 18:29 |
| lickalott | we are trying to test out a document database and docdb was the first package that he wanted to try | 18:29 |
| SpamapS | lickalott: I can't possibly see why you would want to use CVS | 18:29 |
| lickalott | so press without CVS? | 18:29 |
| RoyK | SCCS FTW! | 18:29 |
| RoyK | lickalott: CVS is a rather elderly version control system - there are others that work very much better :P | 18:30 |
| RoyK | like git or mercurial | 18:30 |
| lickalott | SCCS? | 18:30 |
| SpamapS | RoyK: how do you know you need 1000 processes? Hadoop takes a massive data set, breaks it up into pieces and farms out the pieces to processors. The job and the data do not dictate the number of processors.. that just becomes the way you speed it up. | 18:31 |
| RoyK | SpamapS: how would HADOOP know how to split those netcdf files? | 18:31 |
| SpamapS | RoyK: all jobs are made up of a map() and a reduce() function | 18:32 |
| SpamapS | RoyK: map() takes a chunk and returns the pieces | 18:33 |
| RoyK | what controls where those jobs are run? | 18:33 |
| SpamapS | the map() tends to run on very few nodes, reduce() runs everywhere | 18:34 |
| RoyK | and map/reduce is written in what? java? | 18:35 |
| SpamapS | I haven't written any map/reduce jobs, but I believe map() can break it up into big chunks which can be further mapped to smaller pieces | 18:35 |
| RoyK | lickalott: SCCP, not SCCS, it's an even more eldrich thing | 18:35 |
| SpamapS | Hadoop is java yes. | 18:35 |
| SpamapS | Tho I've written mini-map-reduce in PHP w/ gearmand used to do the job control/scheduling | 18:36 |
| patdk-wk | sccp is cisco's sip | 18:36 |
| RoyK | SpamapS: would this work for scientific data where you might have a terabyte of input data and only want to use, say, 50GB of that? | 18:37 |
| RoyK | patdk-wk: sorry, sccs, not sccp :P | 18:38 |
| RoyK | patdk-wk: btw, IIRC SCCS is a separate protocol, not related to SIP | 18:39 |
| patdk-wk | heh? sccp is what cisco uses instead of sip | 18:40 |
| RoyK | cisco uses SIP as well | 18:41 |
| patdk-wk | cisco normally defaults to sccp though | 18:42 |
| RoyK | that doesn't mean sccp relates to sip | 18:42 |
| patdk-wk | never said they are related | 18:43 |
| patdk-wk | other than they are both voip protocols | 18:43 |
| RoyK | in the same way that h.323 != sip | 18:43 |
| RoyK | 19:36 < patdk-wk> sccp is cisco's sip | 18:43 |
| patdk-wk | ya, sccp is ciscos voip protocol, vs using sip | 18:43 |
| patdk-wk | h.323 is a long way away from sip | 18:44 |
| RoyK | h.323 is technically asn.1 over IP | 18:44 |
| RoyK | which is ugly.... | 18:44 |
| === ejat- is now known as ejat | ||
| ^Mike\b | Is there a tool to know whether a reboot is needed to finish applying updates? On the desktop edition, it turns the power button red in the top-right corner, for example. | 19:13 |
| RoyK | ^Mike\b: logging in with ssh tells you | 19:16 |
| uvirtbot | RoyK: Error: "Mike\b:" is not a valid command. | 19:16 |
| * RoyK slaps uvirtbot | 19:16 | |
| RoyK | that's done with running landscape-sysinfo | 19:17 |
| ^Mike\b | ah, right | 19:17 |
| * ^Mike\b checks that those scripts are still enabled | 19:17 | |
| ^Mike\b | thanks | 19:18 |
| mgw | What is the most recommended way to handle virtualization when using Orchestra? | 20:05 |
| SpamapS | mgw: cobbler can manage VMs with koan. | 20:06 |
| SpamapS | mgw: but if you want large scale virtualization.. OpenStack may be a better choice. | 20:06 |
| miceiken | what do i do if a program wont quit when clicking ctrl+c | 20:07 |
| snap-l | miceiken: Try CTRL-Z | 20:09 |
| mgw | SpamapS: ty, we're looking to manage a few dozen physical machines | 20:09 |
| snap-l | and then run `jobs` to see what the job status is | 20:09 |
| snap-l | miceiken: You can then do a `kill %n`, where n is the job number | 20:09 |
| mgw | SpamapS : cobbler is part of Orchestra, correct? | 20:09 |
| SpamapS | mgw: thats a lot ... I'd go with OpenStack. | 20:09 |
| SpamapS | mgw: cobbler is the provisioning portion of Orchestra, and definitely the biggest piece. | 20:10 |
| snap-l | miceiken: If that doesn't kill it, you can try `kill -9 %n` | 20:10 |
| miceiken | thats what i did :P | 20:10 |
| snap-l | miceiken: And if THAT doesn't kill it, you might want to find out why it's not stopping. ;) | 20:10 |
| snap-l | miceiken: `strace -p _processnumber_` is a start | 20:10 |
| miceiken | [1]+ Stopped ./pipsqueek.pl ../etc/ | 20:15 |
| miceiken | miceiken@celeste:~/pipsqueek/bin$ kill 1 | 20:15 |
| miceiken | -bash: kill: (1) - Operation not permitted | 20:15 |
| snap-l | kill %1 | 20:15 |
| snap-l | %1 is special. It means job number, not process number | 20:16 |
| miceiken | ah | 20:16 |
| RoyK | miceiken: you won't be able to kill init (PID 1) and you probably don't want to :P | 20:16 |
| miceiken | haha | 20:16 |
| snap-l | Otherwise you're trying to kill the init process | 20:16 |
| snap-l | and that's a very, very bad thing | 20:16 |
| snap-l | Unless you relish having your machine crash spectacularly, in which case it's a great thing. | 20:17 |
| RoyK | snap-l: init is generally unkillable | 20:17 |
| snap-l | Highly recommended in that case. | 20:17 |
| miceiken | so, why isnt this working then :( | 20:17 |
| RoyK | kill -9 %1 | 20:17 |
| RoyK | a process stopped by ctrl+z won't listen to signals | 20:18 |
| RoyK | kill -9 is the 'gun against the head' type | 20:18 |
| lifeless | RoyK: it will hear CONT, won't it ? | 20:19 |
| RoyK | a normal 'kill' sends a SIGTERM, which is generally a good idea, but if the process has stopped listening, SIGKILL (-9) should work better | 20:19 |
| RoyK | lifeless: probably, and perhaps SIGSEGV | 20:19 |
| lifeless | RoyK: you can also try SIGHUP before KILL (or SEGV) | 20:20 |
| RoyK | SIGHUP won't help much either | 20:20 |
| RoyK | and SIGSEGV won't be of much help - the only difference is that it might produce a core dump (if ulimit allows that) | 20:20 |
| RoyK | and by default, ubuntu is set to not coredump | 20:21 |
| lifeless | it would trigger apport | 20:21 |
| virusuy | hi everyone! | 20:53 |
| mistergibson | is there a way for me to configure apparmor (or other utility) such that : if no apparmor profile exists for any executable that it will generate one as soon as it is run the first time? | 21:07 |
| mistergibson | I guess what I'm looking for here is SysTrace (that venerable and dead project) behavior *somehow*. I'd really like a big catchers mit for trojans here | 21:08 |
| mistergibson | firewall rules are not enough -- need app level learn modes and stuff. | 21:08 |
| JanC | mistergibson: apparmor has a "logging" mode | 21:21 |
| SpamapS | mistergibson: apparmor is meant to be selective, so if you want a more blanket policy, its probably advisable to contain untrusted users in VMs or containers. | 21:22 |
| SpamapS | JanC: right, but you still have to save the complaints as a profile. ;) | 21:22 |
| mistergibson | SpamapS: I don't have vms on this box | 21:22 |
| mistergibson | is there a utility that will 'catch' anything that is run? | 21:23 |
| SpamapS | mistergibson: Generally the regular permissions system can lock things down for blanket purposes | 21:24 |
| uvirtbot | New bug: #884428 in lxc (main) "new created ubuntu machines result in: "init: Unable to listen for private connections: Failed to bind socket "/com/ubuntu/upstart": Address already in use" [Undecided,New] https://launchpad.net/bugs/884428 | 21:28 |
| mistergibson | SpamapS: well, rather than just 'deny' something, I want to do something with it the first time it is run. | 21:36 |
| SpamapS | mistergibson: sounds very complicated. | 21:37 |
| mistergibson | SpamapS: potentially, but I'd like to be able at least to catch a list of all apps run and see if they have a profile ... if systrace can do it ... can't be that hard. | 21:38 |
| mistergibson | SpamapS: unfortunately, systrace source code is old and broken -- but it is *exactly* the kind of thing I need. | 21:38 |
| SpamapS | mistergibson: as JanC says, you can turn apparmor's complain mode on and use that to record it into a profile | 21:39 |
| mistergibson | SpamapS: so the complain mode will see a new app? | 21:42 |
| mistergibson | I know I can make a profile for any known path -- got that part, and run it in complain mode | 21:42 |
| mistergibson | what I'm fishing for is the critter lurking that I don't know the path of | 21:43 |
| mistergibson | thinking out loud here a bit : so, critterX runs somehow; unknown-thingy see it; observes it has no profile; auto-complain modes it. perhaps something like that. | 21:48 |
| mistergibson | more like profile autogen more than anything I suppose -- it would be a start | 21:49 |
| === pdtpatrick__ is now known as pdtpatrick | ||
| matrillox | hello | 23:01 |
| matrillox | upgraded to 11.10, applied latest apt-get update|upgrades and now interface eth0 does not come up on boot. help? thanks. | 23:03 |
| RoyK | matrillox: as a start, don't use a non-LTS for a server, and then, if you see errors, pastebin the logs when asking | 23:05 |
| p1ruj3 | hey, so had a entry in deny.hosts I needed to remove (local printer who freaked out) how do i rehash that file so the printer is no longer banned? | 23:08 |
| p1ruj3 | sudo network denyhosts restart | 23:13 |
| matrillox | duly noted RoyK | 23:14 |
| matrillox | anyway to downgrade back to a LTS version? | 23:15 |
| p1ruj3 | actually that didnt do it | 23:17 |
| greppy | matrillox: if by downgrade you mean reinstall, then yes, there is :) | 23:18 |
| matrillox | why yes, i did mean reinstall. that worked out well. | 23:19 |
| qman__ | matrillox, that's not to say 11.10 isn't supported, but it just came out, and bleeding edge is bleeding edge | 23:35 |
| qman__ | we need logs, config files, command output | 23:35 |
| matrillox | ah, 10-4. | 23:36 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!