/srv/irclogs.ubuntu.com/2011/11/17/#ubuntu-server.txt

swharperwhen i follow the instructions outlined in 4.1 of the server guide i get an error saying no root partition is defined00:07
swharperhttp://dl.dropbox.com/u/3136063/ubuntu1.jpg00:12
swharperthis is the current partition scheme00:12
swharperthe sandisk is the installer usb stick00:13
SpamapSswharper: after you split the physical drives up, you need to create md's00:28
SpamapSswharper: I don't see RAID instructions here https://help.ubuntu.com/10.04/serverguide/C/index.html00:29
swharperyeah im in the process of doing that now…  but for some reason im only seeing the 5gb partitions, except in 2 instances00:29
swharperhttps://help.ubuntu.com/11.10/serverguide/C/serverguide.pdf00:29
swharpersection 4.1 advanced install00:29
SpamapSHeh wow the numbering on that is weird00:30
swharperon the partition table?00:30
SpamapSswharper: no in the PDF00:30
swharperoh00:31
SpamapS4.1 is not really the section number00:31
SpamapSAnyway00:31
SpamapSOk so you need to do the 'Configure Software RAID' step00:31
atruno-does zoneedit cost money to host a website with your own domain ?00:33
swharperoddly this is what i get when i try to configure the sw raid00:35
swharperhttp://dl.dropbox.com/u/3136063/ubuntu2.jpg00:35
swharperfor some reason only 2 of the drives show the large partition00:35
swharpers00:35
SpamapSswharper: did you possibly not mark it as 'use as RAID' when you created the partitions?00:39
swharperthey're all marked as raid...00:39
swharperin the first screenshot00:39
SpamapSswharper: weird00:40
SpamapSswharper: possibly a bug w/ > 1TB partitions00:41
SpamapSswharper: I notice the drive model is different on sdf ..00:42
SpamapSswharper: maybe the WDC's have different geometry that isn't playing nice?00:42
SpamapSswharper: I have to leave, but my suggestion would be to try 999GB00:43
philipballewIs there any way to set up ssh when the network I am on wont allow for any ports to be opened?00:44
SpamapSphilipballew: ssh out to a box and forward back..   ssh -R 2222:127.0.0.1:22 my-remote-box00:45
* SpamapS disappears00:46
swharperfor some reason the bootable flag won't stay on either00:50
swharperonce i go into the raid config page00:50
qman__these days the bootable flag is largely irrelevant00:51
qman__I had a lot of trouble with the 11.10 installer trying to use disks that had been in a fakeraid00:54
qman__I ended up having to zero the whole disks before dmraid would behave and stop screwing things up00:54
swharperthats what im gonna try to do now00:59
swharperi want to 0 everything and start over01:00
swharperbut these disks have been partitioned a bazillion times01:00
swharpercan this be done from the installer?01:01
qman__technically yes but I'd suggest booting something else01:02
qman__like recovery mode and drop to shell, or systemrescuecd01:02
swharperhm01:02
swharperall ive got here is my install stick01:03
qman__well, back the installer up to before partitioning01:03
qman__then press alt+F201:03
qman__and pressing enter should give you a shell01:03
swharperok01:04
swharperdone01:04
swharperfsck not found...01:04
qman__fsck doesn't have anything to do with zeroing disks01:05
qman__but that shell might be a busybox, I don't remember01:05
qman__which is pretty much useless01:05
swharperit is01:06
qman__yeah, you'll have to boot recovery mode01:07
qman__reboot, and when it gives you options, choose repair a broken system01:07
qman__then when it gives you more options, choose to drop to a shell in the live environment01:07
swharperk01:08
qman__the versions in lucid and earlier are annoying but work01:08
qman__the newer ones may have been fixed, I don't know01:08
swharperhmm one of the options is "assemble raid array"01:10
swharperfrom rescue mode01:10
qman__don't do that01:10
swharper"device to use as root file system"01:10
qman__you don't want to load any of the stuff on your disks, you just want the installer environment01:11
swharperso probably sda1? which shoudl be the usb disk01:11
swharperthat or do not use a root file system01:12
qman__worth trying I guess01:12
qman__do not use01:12
qman__that's what you're after01:12
swharperk01:12
swharperok dropped into the shell01:12
swharperits busybox though :P01:12
qman__no, it should be dash01:12
qman__and '/bin/bash' should work01:12
swharperhm01:13
qman__well, it did in older versions01:13
qman__I honestly have not used the current versions, most of my systems are lucid01:13
qman__in any case, it's not needed01:13
qman__if dd is there you're good01:13
swharper '/bin/bash not found'01:13
qman__dd if=/dev/zero of=/dev/sd? bs=2M01:13
qman__where sd? is the disk you want to zero01:13
swharperright01:14
swharpercool01:14
swharperthanks01:14
twbqman__: in examples recommend /dev/sdz9 to avoid users idiotically copy-and-pasting what you write01:14
twb*to avoid explosions when01:14
qman__valid point, just me thinking in shell01:15
twbbtw, boot flag is important to /usr/lib/syslinux/mbr.bin01:15
swharperdamn, no diskutil01:15
qman__pretty sure that command doesn't expand as-is though01:16
swharperhow can i get a list of drives01:16
qman__fdisk -l01:16
swharperth01:16
swharperx01:16
twbAlso if his problem is that he lands in initramfs after mdadm finds /dev/md2p1 instead of /dev/md0 and /dev/md1, the problem is that lucid defaults to 0.9 mdadm on-disk format; manually create the array using 1.x format and it'll be fine01:16
twbfdisk -l is worse than /proc/partitions IMO01:16
twbqman__: btw als re "zeroing disks", you probably only need to zero the first and last few blocks -- although doing the latter in dd is a bit fiddly.01:18
swharperitll take awhile to zero 1.5tb, yes?01:18
twbswharper: yes, like an hour01:19
swharperk01:19
swharperfml01:19
swharper:)01:19
swharper7 hrs01:19
qman__twb, while that usually works, dmraid is particularly thick and you have to find the magic places where it defines the fake raid01:19
qman__and in that case it's simpler just to zero it01:19
twbqman__: by dmraid do you mean the mdadm parts of d-i partman?01:19
qman__possibly01:19
twbqman__: or more like mdadm --assemble --scan01:20
qman__whichever is used to detect fakeraids and assemble them01:20
qman__used to be dmraid -ay01:20
twbWell fakeraid (as distinct from mdadm) can FOAD01:20
qman__agree01:20
twbLike CCISS or whatever,  I hate that stuff, don't use it01:20
twbIf your RAID card didn't cost hundreds of dollars and include a BBU or a flash-type thingo, don't use it01:21
qman__but someone decided that when I say "No" to "RAID arrays found, do you want to assemble these arrays" I actually meant yes01:21
twbqman__: lame01:21
twbqman__: if it were me I'd go buy a 4port pcie sata card and ignore the southbridge ports :P01:21
qman__because they show up in the partitioner01:21
twbYou probably need to blcaklist the cciss driver or something01:21
qman__which wouldn't be a problem, except that it completely breaks the partitioner01:21
qman__it doesn't even use the chipset01:22
qman__it reads the data and assembles it in software01:22
qman__I01:22
qman__I've recovered data from nvraids and such this way with non-fakeraid controllers01:22
qman__I know for a fact it can do this with nvraid and AMD raid, not sure if intel's stuff works or not but it tries01:23
patdk-lapqman__, heh? dmraid offers a wipe raid id from drive option01:24
patdk-lapcciss driver is a real raid01:25
patdk-lapI forget what the fakeraid one is called01:25
qman__didn't know it could do that01:27
qman__but finding that out otherwise would have required reading the (rather large) manual for a piece of software I don't intend to use01:27
qman__I start all the zeroings and walk away, it's done like 20 minutes later01:28
patdk-lap20min?01:30
patdk-lapwhat are you using? 80gig drives?01:30
twbpatdk-lap: it's not real if I need a special bloody driver to create /dev/cciss0 instead of /dev/sda01:31
patdk-laplooks like -E01:31
qman__the last time, they were 250s01:32
twb(Well, OK technically it probably is h/w raid, just the raid card doesn't bother to emulate a SATA bus.)01:32
qman__20 minutes may be slightly exaggerated, but it wasn't enough time to cause an issue01:32
patdk-laptwb, that is true, but what hardware raid does bother to?01:32
twbpatdk-lap: you're not making me feel better :-/01:33
lifelesstwb: sata attached raid cabinets do :)01:34
twbHaha, SANs exporting themselves as a big iSCSI or smoething ;P01:34
=== lifeless is now known as subunit
=== subunit is now known as lifeless
patdk-laphmm, interesting01:35
patdk-lapmy old adaptec ones show up as sda01:35
twbpatdk-lap: yeah that's what I expect01:35
patdk-lapbut that is just cause the adaptec driver displays it to linux as a scsi device01:35
twbOh.01:35
patdk-lapya, used to all my hp's just doing cciss01:35
patdk-lapbut then, used to freebsd, and freebsd never does anything consistant :)01:36
patdk-lapevery driver names it after itself :)01:36
patdk-lapthat really annoyed me changing nics01:36
qman__the hardware controller has to be really good for me to bother using it, because mdadm is so featureful and compatible01:36
twbqman__: hear hear01:36
twbIt shits me that $sales can't convince $customer to go mdadm01:37
patdk-lapqman, for hardware raid, it's all about the bbwc01:37
twbBecause the world has taught $customer that only hw raid is any good01:37
patdk-lapif you don't get bbwc, mdadm is the way to go01:37
twb+101:37
patdk-lapa person I deal with, had some servers colo01:37
patdk-lapand they reinstalled them with dmraid01:37
patdk-lapwebserver couldn't even handle the traffic of a single user01:38
patdk-lapreinstall with mdadm, they where fine01:38
twbhaha01:39
qman__yeah, the write cache is the only good reason to use hardware, and since most linuxes and such have much better disk caching in general than windows, it's not even that painful to not have01:41
patdk-lapdepends what you write01:41
patdk-laplots of fsync calls, you need that write cache01:41
qman__yeah01:41
patdk-lapbut if not, it doesn't matter01:41
patdk-lapbut these days, if you do lots of fsyncs your normally looking at ssd instead :)01:42
qman__that was one of the things I first noticed the very first time I used linux01:43
qman__that the disk was not thrashing itself to death, and the system freezing waiting on disk operations01:43
qman__system not freezing*01:43
twbif you do a lot of fsyncs you need your code fixed01:44
patdk-lapa database?01:44
patdk-lapyou always fsync each transaction01:44
patdk-lapbe it to a temp commit log, or the table itself01:45
twb>hand waving<01:45
twbThis is not my area of expertise; I just heard a lot of yelling because people were Doing It Wrong and when they use a modern fs their shit explodes01:46
iggi__anyone know of a place to get support for ZeroC ICE in IRC?02:33
=== iggi__ is now known as iggi_
=== Jasonn is now known as osum
=== osum is now known as Jasonn
=== Jasonn is now known as hopper
=== hopper is now known as hopp3r
=== hopp3r is now known as grassy
=== grassy is now known as hopp3r
swharperfrom what im reading it'll take a little over a day to zero a 1.5tb drive :P04:00
swharperx704:00
swharperblah04:00
dorkanyone know of any issues w/ oneiric server failing boot after initrd saying "Mount: too many levels of symbolic links"04:20
twbswharper: are you doing it now, with dd?04:28
twbswharper: send it a USR1 and it'll give you a progress report04:28
twbHmm, caveat: busybox dd might not...04:28
dorkany ideas? getting "Mount: too many levels of symbolic links" when in recovery kernel, regarding /run04:43
dorkthis box hasn't been touched since the last wave of problems 2 weeks ago04:43
dorkno promising search results04:44
qman__fsck?04:50
dorkclean04:50
qman__if it's not mountable, not many other options04:50
dorkactually it's about /run04:50
dorktoo many levels of symbolic links04:50
dorksome loop going on here04:50
qman__does it work if you load a different kernel maybe?04:51
qman__or perhaps boot live and chroot, then deal with it?04:51
dorkyeah i just odnt know how to deal with it04:52
dorki can chroot in04:52
dorkbasically /run is symlinking to /var/run04:52
dorkand when i cd to either i get that error04:52
qman__might have managed to have inifinitely self-referencing symlinks04:53
twbdork: /var/run moved to /run because stupid new init systems can't manage to even mount /var without having dbus running first04:53
twbdork: depending on your release and if you have upgraded from an older one, maybe your box didn't handle the transition well04:54
qman__I don't have any newer-than-lucid systems to look at04:54
dorkthe upgrade was horrible04:54
dorki had a whole bunch of problems spent 16 hours at the dc04:54
dorknow i'm here again04:54
dorkafter the box hasn't been touched04:54
dorkthough this problem didn't exist until days after i managed to iron out the upgrade related problems04:55
dorkany suggestion on the best approach for this04:55
qman__unfortunately I don't have any experience with this and I don't have time to get out my laptop (only system running oneric) and cross-check things with you04:56
swharpercan i send a USR1 in mid process?04:57
qman__but that's where I'd start, reference a working system and see what those directories look like04:57
dorkhttp://uksysadmin.wordpress.com/2011/10/14/upgrade-to-ubuntu-11-10-problem-waiting-for-network-configuration-then-black-screen-solution/04:57
twbswharper: sure04:57
twbswharper: but if the client doesn't like it, it'll bomb04:57
swharperack04:57
swharpereff it04:57
twbShrug04:57
qman__I use kill -SIGUSR1 to get dd status fairly often04:57
swharperim doing one of the drives using diskutility on my mac04:57
twbIf I were you I'd just blat the start and end of disk04:58
twbqman__: yes but does that work with busybox dd04:58
swharperand its progress is showing 1 day, 13 hrs04:58
qman__that I don't know04:58
qman__that seems way too long, even for 1.5TB disks04:58
swharperits doing 3 passes04:58
swharperover usb204:58
qman__yeah, that's a bad plan04:59
qman__last one I did was 250GB disks on SATA204:59
qman__and you only need 1 pass04:59
swharperah04:59
swharperi guess i could cancel this one04:59
qman__nothing is going to mistakenly read old data after a single zero pass04:59
twbswharper: don't do USB204:59
qman__and even data recovery tools are going to be hard pressed to get much after it04:59
swharperdisk utility gave me 5 options i believe....04:59
twbAt least get esata04:59
qman__in short05:00
twbIf you're trying to wipe the drive, use an angle grinder not dd05:00
swharperwell the server running dd is esata05:00
qman__if you're worried about data passed a single zero pass, you should just destroy the disks physically05:00
twbRight05:00
qman__past*05:00
swharperok05:00
swharperthere was another option that did 25 passes05:00
swharperglad i didnt choose that :)05:01
qman__options for the paranoid, that haven't been relevant since disks were < 1GB05:01
swharperok i stopped it05:01
swharperon the mac05:01
swharperill redo with 1 pass05:01
qman__no need, it's probably good05:01
qman__I just know that the first 200MB is not enough to clear out an intel fakeraid05:02
qman__and I only suggested that solution under the impression that it wouldn't take more than a couple hours for all of the disks, if run simultaneously05:03
swharperhm05:05
swharperwell dd has been running for almost 305:05
qman__send a siguser1 and find out how many blocks it's done05:05
qman__even if it stops it, you can start again at that point with switches, or just leave it be and move on05:06
swharperwhile thart proc is running in the same shell?05:07
qman__no, need a second shell05:07
qman__well05:07
swharperim in recovery mode...05:07
qman__unless you ctrl z, bg 1, kill -siguser1 pid05:07
qman__and that's provided all those are there, which they may not be in a busybox05:07
swharperid have to start it over then, yes?05:09
qman__dd supports arguments which tell it where to start and finish05:10
swharperalright i stopped it05:10
qman__if it does die, you'll see the spot where it stopped05:10
swharperdisk utility is giving me 12 hours on the usb2 cartridge05:11
qman__USB is really slow05:12
swharperyeah05:12
qman__USB 2.0 runs at 480mbps data rate, but actual throughput is much less05:12
swharpernow that that proc is stopped can i see how far dd got?05:12
qman__ctrl z?05:13
swharperyeah05:13
qman__that just pauses05:13
swharperhm05:13
swharpersays stopped05:13
qman__you must bg 1 or fg 1 to resume05:13
qman__in background or foreground respectively05:13
qman__in background allows you to run other commands, such as kill -siguser105:13
cwillu_at_workjust bg or fg will work05:13
swharperbg 1 says no such job05:13
cwillu_at_workjust do bg, if there's a job that can be backgrounded, it'll be backgrounded05:14
swharperbg worked05:14
qman__do you know the pid of the dd process?05:14
swharpernow kill - siguser1 pid?05:14
qman__without that space, yes05:14
qman__kill -siguser1 pid05:15
swharperright, ok05:15
qman__it should cause it to display the position05:15
swharperbad signal name 'siguser1'05:16
cwillu_at_work"killall -USR1 dd" or "kill -USR1 <pid>"05:16
* cwillu_at_work hands qman__ a proofreader05:17
qman__the implementation must be different from systemrescuecd05:17
qman__because the things that I said are true in systemrescuecd05:17
cwillu_at_workthen systemrescuecd made gratuitous changes to how things work05:17
swharper51008205:18
cwillu_at_work(or more likely, has kill as a shell builtin, that doesn't match bash's or the standard kill binary)05:18
qman__it should say blocks in, blocks out, bytes transferred05:18
cwillu_at_workswharper, what was the dd line you ran originally?05:19
swharpernow 511328+0 records out05:19
cwillu_at_work511328 * 512byte blocks, assuming the default wasn't changed on the command line05:20
qman__I told him to use bs=2M, for performance reasons05:20
cwillu_at_workokay, so 511328 * 2M05:20
cwillu_at_workit's written a terabyte05:21
swharperdd if=/dev/zero of=/dev/sdh bm=2M05:21
swharperwas the original05:21
cwillu_at_workswharper, how big is the drive?05:21
swharper1.5tb05:22
cwillu_at_workokay, it's 2/3's done05:22
swharperok05:22
swharpercool05:22
cwillu_at_workswharper, also, you meant bs=2M, right?05:22
cwillu_at_work(bm isn't a thing)05:22
swharperyes, sorry05:22
cwillu_at_workI usually use bs=1M, just so that the numbers are directly meaningful :p05:23
swharperi can have dd running on all these drives simultaneously05:23
cwillu_at_workyep05:23
cwillu_at_workbut if they're all connected via usb, you're not gonna get done any faster05:23
swharperno…they're not in the server05:23
qman__it will if they're over SATA though05:23
swharperthey're all sata05:23
swharperi yanked one out and put it in a cradle05:23
swharperconnected to my laptop05:24
qman__because with SATA, it's one disk per channel, unless you've got a multiplexer05:24
cwillu_at_workokay;  just rerun it as "dd if=/dev/zero of=/dev/sdwhichever bm=1M &" for each one05:24
cwillu_at_workand then "killall -USR1 dd" will spit out the numbers for each one05:24
swharperhow do i make it a background process from the get go05:25
cwillu_at_workswharper, run what I told you :p05:25
qman__the ampersand on the end05:25
swharperah, right05:25
swharperthanks05:25
qman__anyway, difference noted05:27
qman__I usually do this kind of thing from systemrescuecd because it's convenient05:27
swharperok, got em all hummin now05:32
swharperawesome05:32
=== smb` is now known as smb
uvirtbotNew bug: #891389 in bind9 (main) "CVE-2011-4313 improper assert" [Medium,Fix released] https://launchpad.net/bugs/89138909:00
uvirtbotNew bug: #891472 in libvirt (main) "apparmor profile for libvirt does not allow hooks to be executed" [Undecided,New] https://launchpad.net/bugs/89147209:00
uvirtbotNew bug: #891527 in cobbler (universe) "cobblerd fails to start: NoSectionError" [Undecided,New] https://launchpad.net/bugs/89152709:12
Davieyhey adam_g o/09:14
Modrishi, i install ubuntu server on "hyper v 2008 r2" with legacy NIC., but my ping responce time is dramatically from 1 to 2000ms all time09:18
Modrisubuntu desktop on the same hyper-v respond nice 1ms09:18
Modrisi'm not linux expert. just need configure firebird on linux, i take ubuntu desktop and all is good, now i want make it on server edition and ... see previus post my problem.09:20
DavieyModris: Is hyperv host overcomitted?09:23
koolhead17hi all09:23
Modrisexcuse my bad english... overcomitted is what? that is standart hyper-v09:26
Modrisi try http://www.panterlo.com/2010/10/10/ubuntu-10-10-and-hyper-v-r2/ but without success... now i go back to standart installation09:29
lynxmanmorning o/09:31
koolhead17hola lynxman :D09:32
lynxmankoolhead17: hey :)09:33
DavieyModris: sorry, i mean - is hyperv host server doing too much?09:38
DavieyDo you have too many virtual machines, and not enough resources to go around?09:38
ModrisDaviey: No, hyper-v is in idle, also work ubuntu-desktop and ping is <1ms all time, and one xp_test_pc and pint to it is <1ms too09:44
DavieyModris: we don't really test against hyper-v, so we kinda lack the experience and potential issues.  This means we can't be a great deal of help.  Sorry :/09:45
Modrisok, thanks... then You suggest go-google? and search or maybe hyper-v irc, but i think they are dont specialize on ubuntu :-)09:47
DavieyModris: I'd be suprised if other distro / OS's didn't see the same behaviour TBH09:55
ModrisDaviey: i think problem is with nic drivers... if ping response time with ubuntu-desktop also was bad, then i just take it and don't search for solution, but with desktop edition all is right and that's why i keep looking for solutions09:57
DavieyModris: Hmm, can you not provide a different virtual nic?09:57
Daviey(kvm you can do this, so assume you can with hyper-v?)09:58
Modrisinb hyper are only two nic - 1) network adapter 2) legacy network adapter i try both but by default ubuntu-server can see only legacy network adapter09:59
Modrismaybe need add network adapter too and then give drivers by hand... but driver in linux for me is not clear enought10:01
Modrisin http://www.panterlo.com/2010/10/10/ubuntu-10-10-and-hyper-v-r2/  are talking about synt adapters, but ... i try step-by-step without success10:02
Modriswhat virtualization platform You use for test ubuntu guests?10:02
rbasakIs the desktop kernel usable on server? Might that work?10:21
Modrisrbasak: maybe, how know that? for desktop i use 11.04, but for server 11.10 maybe that is point of solution?10:27
ModrisWhat changes is between ubuntu 10.04 and 11.10 who can affect /etc/initramfs-tools/modules in http://blog.allanglesit.com/2010/05/ubuntu-and-hyper-v-the-paths-to-enlightenment/ are solultion for network problems, but it don't work for 11.1010:35
Modrisi dont try it for 10.04, but will to figure out work or not with it.10:35
RoyKhttp://i.imgur.com/AIMWw.jpg10:57
AdvoWorkon my one system i access files by http://IP:8080/dir/dir etc  but on my other one :8080 doesnt work, i edited /etc/apache2/ports.conf and changed the listen to 8080 but now it says a file I know is correct is not actually there, any suggestions please? tried editing /etc/apache2/sites-available/default and changed virtual hosts to <VirtualHost *:8080> and added NameVirtualHosts *:8080 and restarted apache but then get: [warn] NameVirtual11:53
AdvoWorkHost *:80 has no VirtualHosts11:53
AdvoWorkactually, the file now works since doing that last bit, but i still get the warn message11:54
koolhead17https://help.ubuntu.com/10.04/serverguide/C/httpd.html11:57
adacHi guys. I was wondering on LTS server versions... I have a lot of updates now shown...but since months there has been noone marked as "critical" anymore. Does ubuntu not support or do packages not being flagged with "critical" at ubuntu at all?12:49
sorenWhat do you mean "marked as \"critical\""?12:50
adacsoren, I guess critical should mean apckages that have a security sissue fixed12:52
sorenBut where is it marked as critical? Where do you see this mark?12:53
adacsoren, it normaly shoudl be set somewhere when you do a apt-get update12:55
adacthen for example wehn you login via ssh it shows you12:55
adacif i remember correctly12:55
adac(since it was long time there was any critical anymore)12:55
adacat least it is like that in debian12:56
adac23 packages can be updated.12:59
adac19 updates are security updates.12:59
adacsoren, ^^12:59
adacwhen you login via ssh12:59
adacsoren, http://superuser.com/questions/199869/check-number-of-pending-security-updates-in-ubuntu13:02
sorenSure. "Security updates".13:05
sorenadac: If there are known security issues, they get fixed. There are (awesome) people assigned to take care of just that.13:06
adacsoren, is "security" and "critical" upgrade a difference?13:06
adacsoren, yes but my point is that i get noticed about if there are security upgrades13:06
sorenadac: If you don't see any security updates, you either don't have any packages installed that have required updates, you're offline, or you're running an unsupported version of Ubuntu.13:06
sorenadac: Of course it makes a difference.13:07
sorenadac: You asked specifically about a type of updates marked as "critical".13:07
adacyes i thought this might is the same13:07
adacok i see so i hve to check also for securtiy upgrades13:07
sorenadac: It *is* the same, but AFAIK, nothing on ubuntu server calls them "critical" updates rather than "security" updates.13:08
adacsoren, in the nagiso plugin they are called critical13:09
adacso tehrerfor i might confused this13:09
sorenadac: Hence my question, "What do you mean \"marked as \\"critical\\"\""?13:09
adac"official nagios plugin"13:09
adacsoren, yeah i got it thank you!13:09
sorenWe have an offical nagios plugin?13:09
sorenWow.13:09
sorenI didn't realise.13:09
adacsoren, someon of packed it. so its original packed ubuntu nagios plugin13:10
adacsomeone of you13:10
adacthere are a lot of plugins who are not in this package13:10
adaci would rather cal them unofficial therefore13:10
adacsoren, so what command does show me the "security" updates pending?13:14
spiekeyHello!13:40
spiekeyi have a QLogic FC Hostbus adapter and a SAN attached to it.13:41
spiekeyi would like to use multipath and i think therefore i need device-mapper13:41
spiekeybut my devices wont get listed in /dev/mapper/    :-(13:41
spiekeyany ideay why? Do i have to use dmsetup?13:41
sorenadac: Might I ask why it's important? Do you not want general updates, but only security updates?13:44
adacsoren, exactly. my nagios installation shoudl only warn me if there are security upgrades available. I dont care about other ones (since this would then result in nearly daily notifications)13:45
sorenadac: Then why don't you disable them?13:46
zulgood morning13:47
adacsoren, I first need to know with which comand line command i can show if there are security updates. then i can answer your last question13:49
sorenadac: You're holding my answer hostage until you get an answer to a question that doesn't apply at all once you disable the non-security updates? Seriously?13:50
adacsoren, well I need to check first if tehre are any security updates at the moment. then i can tell you if the "orignal" nagios plugin simply fail to detect them.13:52
adacthen i can anser you if your idea would solve my probelm when using the original nagios plugin (the spippet in apt-check)13:52
adacshipped13:52
sorenadac: If you don't need non-security updates, just disable them, and then any update "apt-get upgrade" suggests will be security updates. Simple.13:53
sorenI don't know what the nagios plugin does to filter out non-security updates.13:53
adacsoren, you eman like disable them in the sources.list?13:54
sorenyes13:55
adacsoren, i thin that wouldnÄt still show me the security upgrades, since apt-cron already downloaded all packages to upgrade13:58
adaccan i clean this somehow?13:58
adacapt-get clean all13:58
adacyes that did the trick13:59
adacseems that there are 64 securty upgrades13:59
adac46 sorry13:59
adacsoren, oh lol! now also nagios shows me 46 critical upgrade14:01
adacs14:01
adachow is that possible14:01
adacsoren,  with only security repo i have 64, and with the others additinaly enabled i have 54. when i have only securtiy upgrades enabled nagios does complain. when I have all enabled (all repos) then nagios doesn't. Maybe because he fetches the security packages from another repository?14:07
sorenAs I said: I don't know what the nagios plugin does to count those updates.14:07
adacsoren, yeah i see14:09
adacsoren, still i would like to know if there is a command that shows me avaliable security upgrades14:10
sorenYour nagios plugin.14:11
adacsoren, lol14:17
adacsoren, no seriosly via ssh  login on another private server also the different types of updates are shown. what command is used on that?14:18
sorenadac: "shown"? You mean in the info you see at login?14:32
adacsoren, right14:33
sorenadac: landscape-sysinfo14:33
adacsoren, tank you!14:34
adacthank14:34
jpdssoren getting tanked, bad idea.14:34
zulDaviey: ping14:35
sorenjpds: :)14:35
Davieyzul: hola14:35
zulDaviey: so im thinking about nova/swift/glance/keystone SRU14:35
Davieyeeek14:36
zulso there isnt a tarball for 2011.3.1 so i was thinking of doing a snapshot14:36
zulso something like 2011.3.1~gitXXXX14:36
zulwhat do you think?14:36
zuland document the shit out of everything14:37
Davieyadac / soren : Or, sudo /etc/update-motd.d/90-updates-available ?14:37
adacjpds, hehe. what does soren do when he is tanked?14:37
Davieyzul: Is it worth finding out WHY there isn't a snapshot?14:38
zulDaviey: because they dont do stable releases14:38
sorenDaviey: Oh, it's a separate script now?14:38
adacDaviey, don't have this binary14:38
zulttx: ^^^14:38
* soren is living in the past14:38
Davieybut otherwise, yeah - that versions tring seems safe.14:38
adacor script14:38
zulsoren: derpa derpa14:38
sorenzul: derka derka derka14:39
Davieysoren: you aren't still wearing flares, and sporting a mullet are you?14:39
zuli still laugh when i see that14:39
ttxzul: the only 2011.3.1 being considered is Keystone so far14:40
ttxdoesn't mean you can't release 2011.3+chuck14:40
ttxinstead of 2011.3.1~chuck14:41
sorenDaviey: Not that far in the past, no.14:41
ttx(nova code still shows 2011.3 as version, not 2011.3.1)14:41
zulhow about 2011.3.1+git2011111714:41
sorenNo. Not +.14:42
ttxzul: because there is no such thing as nova 2011.3.114:42
ttxand there might never be14:42
zulhow about 2011.3.1~git<git hash>14:42
ttx2011.3+git2011111714:42
sorenWhat ttx says.14:42
Daviey2011.3+gitFOO sounds better i guess14:42
zulk14:43
Davieyzul: fancy rebasing https://launchpad.net/ubuntu/+source/nova/2011.3-0ubuntu6.1, and re-uploading for SRU?14:49
zulDaviey: thats the plan14:50
jamespageroaksoax: $insert_cobbler_system_definitions in /etc/cobbler/dnsmasq.template does not appear to be working in oneiric14:50
jamespagedo I need to poke something to make it setup static entries for systems I have configured?14:50
roaksoaxjamespage: what are you configuring on each of the systems?14:51
jamespageroaksoax: I'm configuring an IP address for each of the interfaces registered for a given system14:52
roaksoaxjamespage: /var/lib/cobbler/cobbler_hosts14:54
roaksoaxjamespage: so they appear there ^^14:54
stgraberhallyn: so, looking at what we need to do to get rid of lxcguest this cycle :) on top of getting Daniel's patch in the kernel (shutdown/reboot) and mountall modified to be LXC aware, we also need to do something about lxc-is-container and the consoles spawned by upstart15:30
stgraberI can't remember us discussing these two other things at UDS15:31
stgraberI think it might be worth renaming lxc-is-container to some kind of universal is-container command that'd return lxc / libvirt-lxc / openvz / ... depending on what's in use15:31
stgraberand move that to some core packages15:32
stgraber(or merge into a similar command, not sure if we already have something like that for VMs)15:32
stgraberfor consoles, I think it'd be interesting to make upstart a bit more clever so it doesn't spawn gettys on non working devices and spawns a getty on /dev/console if it's a container15:34
hallynstgraber, yes the console thing occurred to me ont he flight out from orlando15:41
hallynfor lxc-is-container, i think in the session i said that would be the one thing left in lxcguest15:41
hallynbut i suppose we can add something to either upstart or coreutils instead15:42
hallynthe console thing gets interesting (in a bad way :) when you try to fire up lxc with smoser's cirros, btw15:42
stgraberI'd really like to see lxcguest go away completely, otherwise people will expect lxc-is-container to be around and will fail when they don't use our template :)15:42
hallynand so yes, if we could find an intelligent way to fire up getty on consoles which happen to be up, that'd be neat15:43
hallynstgraber, hm, i see, our work items in the blueprint are insufficient for that15:44
hallynand hwo did you end up owning the mountall one?  (not that i mind :)15:44
stgraberbecause mountall is a foundations team thing :)15:44
hallynyay15:45
stgraberso it should be easier for me to nag jhunt_ about it :)15:45
hallynnoted those into the blueprint so i don't forget again15:49
stgraberthanks15:49
EMKOi made a new user with root how do i add this user so it can use sudo i tried to add it to group admin but that doesnt exist15:51
roaksoaxzul: just want to run it with you so I'm not installing files that shouldn't be15:57
roaksoaxzul: http://paste.ubuntu.com/741305/15:57
zulroaksoax: what is this?15:57
roaksoaxzul: cobbler15:57
roaksoaxzul: lp #891527 let me to find other missing files15:58
uvirtbotLaunchpad bug 891527 in cobbler "cobblerd fails to start: NoSectionError" [High,In progress] https://launchpad.net/bugs/89152715:58
zulroaksoax: looks good?15:58
zuler...looks good15:58
roaksoaxzul: alright ;)15:58
EMKOso when i use sudo do i use the roots password or the account im loged in with?15:59
uvirtbotNew bug: #857956 in glance "[SRU] Control file needs python-httplib2 dependency" [Medium,Fix committed] https://launchpad.net/bugs/85795616:07
hallynzul, are you able to run the libvirt qa regression test on precise and have it pass?16:35
zulhallyn: i havent tried recently16:35
hallynI've tried on a host and in a vm.  Using the oneiric version of libvirt on precise!  still get a heap of failures16:36
hallynzul, do you have something you can try on?16:36
hallyni'd like confirmation that i'm nto going nouts,16:36
zulhallyn: i can later this afternoon16:36
hallynbut i'm thinking it's some other change now16:36
hallynok, thanks16:36
hallyni'll sit on the libvirt merge in the meantime16:36
zulis it a big one?16:38
hallynwell it's to 0.9.7-2...16:40
hallynnot particularly big,16:40
hallynand it doesn't introduce NEW failures over any other libvirt in my tests.  but if it did, they might be getting masked by all my inexplicable failures16:40
hallynyou think i should just push?16:41
zulhehe16:41
hallynI was using it on mjy laptop with no probs16:41
zulok ill take a stab at it this afternoon16:41
hallynok16:41
hallyni wonder if the cahnge about default admin users may have affected it16:41
hallynhm, lemme try the proposed precise package on the oneric vm16:44
hallynyou know i've never used synergy before.  i'm loving it.  of course it's completely insecure, but that's the thrill isn't it :)16:45
hallynzul, if you also want to run against the merged pkg, it's in ppa:serge-hallyn/virt and source is at http://people.canonical.com/~serge/libvirt_0.9.7-2ubuntu1-package.tar.gz16:52
zulk16:53
ZanzacarI have been trying to use screen for multiple tty sessions and I am kind of getting lost in it does anyone have any other recommendations?17:04
JanCZanzacar: byobu makes using screen easier17:04
robbiewhuats: ping17:05
ZanzacarJanC: I will look into that17:05
huatshey robbiew !17:06
huatshow are you ?17:06
robbiewgood :)17:06
micahgzul: is there a reason cobbler doesn't use distro-info and hard codes release names?17:13
zulmicahg: no there isnt, it was a redhat project17:14
micahgok, well, FYI, distro-info will probably be something that's SRUd, so things taking advantage of it can have an up to date release list17:15
hallynDaviey, are you around today?17:50
zulDaviey: lemme know when you are around as well..17:54
negronjlSpamapS: ping17:57
SpamapSnegronjl: pong, sup?17:58
negronjlSpamapS: Re: https://bugs.launchpad.net/bugs/720302  Can you tell me what would be a use case scenario for this ?17:58
uvirtbotLaunchpad bug 720302 in juju "Juju should provider leader selection support" [Wishlist,Confirmed]17:58
SpamapSnegronjl: ceph is one example..18:02
SpamapSnegronjl: there are some actions that can only happen once per cluster.18:03
SpamapSnegronjl: so a leader is needed to only have those actions happen on the leader.18:03
negronjlSpamapS: ...enough said ... I totally get it now18:03
SpamapSnegronjl: you can fake it now with relation-list and sorting..18:03
SpamapSnegronjl: but with leader election, we'd provide a way to detect that you're the leader *before* any peer relationships were established.18:03
negronjlSpamapS: perfect ... that would be awesome to have.18:04
SpamapSnegronjl: and perhaps more important, hooks for when leader changes.18:04
hallynahs3, I've sent an email inquiring about the xml file copyrights.  Meanwhile http://people.canonical.com/~serge/netcf-0.1.9-package-v2.tar.gz should address the other concerns and is lintian-approved :)18:13
=== medberry is now known as mka
=== mka is now known as medberry
ahs3hallyn: groovy.  i'll try to take a look later today (/me is arguing with virtio right this minute...)18:14
malac0dacan anyone gimme a hand with setting up apache?18:27
SpamapSmalac0da: can you maybe be more specific what you want to do with apache?18:28
malac0daim having 2 issues18:28
adam_gzul: hi18:28
malac0dai have it set to just an index of files(not the directory i want which is problem 1 but i can live with) but it wont let me download the files it says its forbidden18:29
zuladam_g: hola18:29
SpamapSmalac0da: probably because the files are not accessible by the 'www-data' user which apache runs as.18:30
malac0daso the solution being?18:30
adam_gzul: hey, regarding bug #891445 is there any reason why the sysv init script from squid was converted to upstart job for squid3, rather than the init script from squid3?18:31
uvirtbotLaunchpad bug 891445 in squid3 "package squid3 3.1.15-1ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,Confirmed] https://launchpad.net/bugs/89144518:31
zuladam_g: not really18:31
malac0dathe folder it is set to access is the default /var/www but i wanted to move it to /home/user/www18:31
malac0dabut for some reason it wont18:31
=== nxvl_ is now known as nxvl
zuladam_g: patches accepted18:33
malac0daI added DocumentRoot... and <Directory ... and still goes to default location18:33
adam_gzul: cool. thanks. i might touch up the squid3 upstart some more if you dont mind18:34
zuladam_g: i dont18:34
malac0daSooo...I guess I will just go somewhere else then?18:51
SpamapSmalac0da: we're busy people, please be patient. :)18:51
SpamapSmalac0da: after changing configs, did you reload the server configs? (sudo service apache2 reload) ?18:52
malac0dayeah18:52
genii-aroundmalac0da: For webserver specific help there is also##httpd18:52
genii-aroundEr #httpd   rather18:53
raubvogelIs nscd being started by upstart or what? 11.0418:53
malac0dashould the DocumentRoot be in apache2.conf?18:53
raubvogelOr insserv18:54
raubvogelmalac0da: https://help.ubuntu.com/community/ApacheMySQLPHP https://help.ubuntu.com/10.04/serverguide/C/httpd.html18:54
filo1234hi18:54
SpamapSraubvogel: insserv is not run in Ubuntu18:54
SpamapSraubvogel: most likely nscd is started by upstart's sysv compat mode calling its start script in /etc/init.d18:55
raubvogelSpamapS: and it seems to be calling it in the wrong order if I want to have kerberos, ldap, and autofs (for NFS)18:56
SpamapSraubvogel: nscd is just an enhancement is it not?18:57
SpamapSraubvogel: so what you probably want is for it to start very very late18:57
raubvogelSpamapS: That is exactly what I had in mind.18:58
raubvogelI would want to do, say update-rc.d nscd defaults 10 1018:58
raubvogelbut it seems that is not the proper way18:58
raubvogeli.e I am supposed use upstart18:58
SpamapSraubvogel: looks like the init.d script just has it starting at the normal "20" position.18:59
SpamapSraubvogel: 10 10 ? no you'd want like, 9018:59
raubvogelSpamapS: I threw that out there because when I check rcN.d, everything is either 01, 02, or 0319:00
raubvogelNobody in the later positions19:00
SpamapSraubvogel: are you running insserv then?19:00
SpamapSraubvogel: its not supposed to run, but it will cause exactly that to happen19:00
SpamapSlrwxrwxrwx 1 root root  14 Nov 17 11:00 S20nscd -> ../init.d/nscd19:01
raubvogelSpamapS: I hope not. But then again I am not the only one who can rooy there19:01
SpamapSThats what it normally looks like.19:01
SpamapSraubvogel: what version of Ubuntu ?19:01
raubvogel11.0419:01
SpamapSraubvogel: yeah something's wrong if you have 01 02 03 ...19:01
raubvogelI agree; i checked my own desktop and it has sane values like yours19:03
adam_gzul:  in case you were going to do it, please hold on that squid3 merge request19:04
SpamapSraubvogel: do you have /etc/init.d/.legacy-bootordering ?19:04
SpamapSraubvogel: thats the file that controls whether or not insserv is used19:04
zuladam_g: ack19:04
SpamapSraubvogel: to be fair, insserv *can* sort of work w/ upstart. Its just that it usually doesn't ;)19:04
raubvogelYep. That file is there19:05
raubvogelWhat is the best way to deal with upstart then?19:05
EMKOif php-fpm runs as user www-data what does that mean19:05
SpamapSraubvogel: in your case, I think you probably just need to manually make it 90 so it starts late19:05
matrix3000im getting excited for 12.04 :)19:06
SpamapSEMKO: need more context.. ??19:06
EMKOwhat can user www-data do? im just so confused with this user permissions stuff19:06
EMKOcoming from windows to linux :(19:07
raubvogelSpamapS: update-rc.d  is a valid tool?19:08
SpamapSEMKO: www-data just isolates the web server from all the other users on the system. So you can grant read access to the web server for files you want the webserver to be able to show, for instance.19:09
SpamapSraubvogel: definitely!19:09
raubvogelEMKO: It is wise to seperate services and have non root users running said services19:09
EMKOso when i upload site files like say index.php  i have to make this file belong to www-data ?19:09
raubvogelEMKO: it depends on what the file does. As a hard and fast rule yes.19:10
SpamapSEMKO: no, you just have to make it readable by www-data .. so you can make its group www-data and do 'chmod g+r index.php'19:10
raubvogelIf the file/directory does not need to be changed by web, read-only will do19:11
SpamapSEMKO: sites I've run in the past had all the code owned by a 'publisher' user, group owned by 'www-data', that way the publisher was the only one who could write to the code19:11
EMKOoh19:12
malac0dai got it move the folder where its looking but still doesnt let it download anything19:18
SpamapSmalac0da: make sure that www-data can access /home/foo/whatever19:20
SpamapSmalac0da: note that /home/user may not be world-accessible, even if /home/user/www is19:21
SpamapSmalac0da: ls -ld /home/user .. is it world executable ?19:21
malac0dait shows the list of files in the directory and will display the index.html but wont let its download from there to my computer19:22
malac0daare you looking for the drwxr-xr-x ?19:22
SpamapSmalac0da: ahh19:23
SpamapSmalac0da: the files themselves, are they readable by the webserver?19:23
SpamapSmalac0da: note that there may be some logs in /var/log/apache2 that will help19:23
malac0dayes i just cant copy them from where they are to here19:23
SpamapSmalac0da: are you *sure* they are readable by the webserver? being able to list the dir doesn't count as being readable19:23
malac0dawell it opened html file and displayed it if i added index.html19:24
EMKOso i should make the www folder where i keep my site under home username? and add this user to www-data and when i make files give group +r so www-data user can read these files?19:25
SpamapSmalac0da: it opened index.html , but I assume you want to download some other file.19:27
malac0dayeha19:27
SpamapSmalac0da: those other files might not be readable by www-data.. please make *sure* they are. Can you ls -l the dir and paste bin it? (hint: apt-get install pastebinit ; ls -l | pastebinit) ;)19:28
malac0daso inside the www i should do the ls -l correct19:32
malac0dacuz it only gave me -rw-------- 1 root root ...19:32
SpamapSheh19:33
malac0dacant find pastebinit either19:33
malac0daprobably dont have the repository19:34
SpamapSmalac0da: its in universe, been around forever19:34
ZanzacarHi I would like to track my childs web usage, I was thinking about using wireshark but does anyone have any recommendations?\19:34
SpamapSmalac0da: anyway, -rw--------- root root means *not* accessible by www-data19:34
SpamapSZanzacar: dansguardian19:35
EMKOso when i do chmod g+r this gives all the groups that his user is in the ability to read the file?19:35
malac0daah so how can I change that19:35
patdk-wkwouldn't enforcing the usage of a proxy bebetter?19:35
=== JanC_ is now known as JanC
SpamapSEMKO: yes19:35
SpamapSEMKO: wait, no19:35
patdk-wkI personally don't believe in tracking, think it's more of a pain than it's worth, if you can't trust them on the internet, you shouldn't let them on19:35
SpamapSEMKO: chmod g+r gives the group that owns the file, access to read the file19:35
patdk-wksame goes for life for that matter19:36
patdk-wkif they can't access it at home, they will access it elsewhere19:36
SpamapSIts a touchy issue and there are people on all sides of the argument19:37
EMKOhow do i make a file thats owned by a group then?19:37
SpamapShaving an 8 year old.. I just make sure I'm around when he is browsing the web at home.19:37
SpamapSEMKO: chgrp groupname filename19:38
malac0daso thats how I solve my problem?19:38
JanCI agree about the "being around" stance, plus make sure they understand they can ask questions about whatever weird things they might find...  ;)19:40
Davieyhallyn: here19:40
Davieyzul: here19:40
SpamapSmalac0da: chown -R user.www-data /home/user/www19:40
SpamapSmalac0da: followed by19:41
SpamapSmalac0da: chgrp -R g+r /home/user/www19:41
SpamapSmalac0da: that should do it19:41
zulDaviey: essex has a couple of bugs but at least it runs now :(19:41
patdk-wkguess I'm the evil one?19:41
patdk-wkmy son browses the web for hours on end using his ipad19:41
Davieyzul: That could be worse :)19:41
patdk-wkhe is 4years old19:42
patdk-wkbut normally sticks to youtube19:42
zulDaviey: api-paste.ini was out of date as well19:42
malac0dasecond one i got an invalid group19:42
Davieyzul: ah, we had that last cycle. :/19:43
Davieyzul: We probably need a test case to check that19:43
zulDaviey: well now its pulling the one from the source rather than in debian19:43
Davieyzul: uh?19:44
EMKOSpamapS: so i have to do this everytime i put a file on the server?19:44
zulDaviey: there was a debian/api-paste.ini nova ships its own etc/nova/api-paste.ini which is better tracked so we are going to ship that one instead19:45
hallynDaviey, were you going to retry the syslog-ng upload, or was there a complication?  (since rmadison shows the 3.3.1 source pkg :( )19:46
SpamapSEMKO: pretty much. :)19:46
SpamapSEMKO: note that you can always add www-data to the group that you want to give file ownership to.19:46
malac0daSpamapS: the second command didnt work...says invalid group: 'g+r'19:47
SpamapSmalac0da: oops, I meant chmod, not chgrp19:48
EMKOso what did i do by adding the user im creating the files with to the www-data group?19:49
malac0daalright that worked19:49
malac0dano anything i put there shoudl be able to be downloade19:49
malac0dad19:49
matrix3000any documentation i should read to cache ldap authentication information on the local machine so that if the ldap server becomes offline that the user can still login to their machine19:52
SpamapSEMKO: nothing really19:52
SpamapSEMKO: you want the other way around, you want www-data to be added to the user's group.19:53
SpamapSEMKO: you want to enable www-data to access your files.19:53
EMKOohh19:53
SpamapSmalac0da: not if you put root owned files there again19:53
Davieyhallyn: ah, yes - you repacked it right?19:53
hallynDaviey, well I let bzr bd do it for me19:54
EMKOok things makes a lot more sence thanks SpamapS19:54
hallynhttp://people.canonical.com/~serge/syslog-ng-merge-3.3.1.tar.gz19:55
malac0dawhen I move stuff into there or upload via ftp how can i avoid that?19:55
malac0daor is it just easier to remember those two commands everytime i add something?19:56
SpamapSEMKO: note that you have to stop/start apache to get it to pick up any new group ownership.19:58
SpamapSmalac0da: you should *not* be transferring files as root. ;)19:58
SpamapSmalac0da: I'd suggest that you follow EMKO's lead.. create a user that will own the web content, and add the www-data user to that group.19:59
geolrHi all, I intend to use my old eee 4g netbook as a homeserver for a while, and I a not very experienced. Now, I want to serve files from an external USB harddisk. From way back when I started using linux I recall editing fstab. Is that a good idea in order to make the usb-disk using always the very same mountpoint? Thx a lot!19:59
malac0daI cant even login as root at this point so i dont know how i am doing it19:59
malac0dai am logging into it via the same user the the folder is under20:00
malac0danvm i can still access root was just doing it wrong20:02
malac0dabut im not logged in as root when transferring it20:02
malac0daor is it because the user i was using has admin rights?20:04
EMKOim using nginx so i would just make nginx run as user www-data and i should be fine20:07
SpamapSEMKO: it runs as www-data by default in the packaged version20:10
EMKOmine ran as nginx20:10
EMKOphp-fpm ran as www-data20:10
EMKOor i can just add nginx to the group and it should work with both right?20:12
Davieyroaksoax: How does your new fence agent work?20:12
roaksoaxDaviey: same as all fence-agents :)20:12
SpamapSEMKO: well with fpm .. you don't need nginx to be able to access the files20:12
roaksoaxDaviey: bzr branch lp:~andreserl/+junk/random20:12
SpamapSEMKO: since its talking to php-fpm over a socket20:12
Davieyroaksoax: what out of band power method is it using?20:12
ErtanERBEKHi Everyone20:13
EMKOoh20:13
roaksoaxDaviey: the fence-agent is for a sentry switch CDU20:13
ErtanERBEKcan I use CPU limit with Ubuntu Virtualization ?20:13
roaksoaxDaviey: fence_cdu -a <IP or host> -n <id on power device> -l <user> -p <pass> -o <action: on|off|status>20:13
Davieyroaksoax: ahhh20:13
Davieythanks20:13
roaksoaxDaviey: so basically, a template has to be added into cobbler to do that, and that's it20:14
roaksoaxDaviey: I'm gonna add that later on as I wanna submit the fence-agent to upstream20:14
malac0dawell i give up for now20:15
malac0dathanks for the help20:15
RoyKErtanERBEK: you can only limit the number of cores available to the guesst20:15
ErtanERBEKRoyK, I know. But I need Core based MHZ limit20:16
ErtanERBEKcan I use20:16
ErtanERBEKsome time  any Virtual Quest have some software problem and use CPU Full speed20:17
loxsis there some (easy) way to have MTA (postfix) users in a text file or sqlite database? I don't really like the idea to manage mysql only for 2 users20:17
raubvogelloxs: I have setup many postfix thingies without ever touching mysql20:19
raubvogelkerberos and ldap yes but no mysql20:20
RoyKErtanERBEK: then go get an IBM POWER7 machine - those support partial cpu allocation (down to 1/10 cpu iirc)20:20
raubvogelloxs: virtual domain or system users?20:20
RoyKErtanERBEK: but you probably won't be able to use anything like intel or amd to do that20:21
loxsraubvogel, well, I don't really like having the same password/username for both things20:21
loxs(security reasons)20:21
raubvogelloxs: then do virtual host approach and be done with it20:21
ErtanERBEKRoyK, I am use ome server both AMD or Intell20:21
raubvogelpostfix+dovecot should do the trick together20:21
ErtanERBEKsorry20:21
raubvogelat least that is what we do ;)20:22
RoyKErtanERBEK: then you won't be able to allocate anything less  than 1 CPU20:22
ErtanERBEKI am use oem server both AMD and INTEL20:22
loxsraubvogel, but most (all?) guides I see involve mysql/postgres for doing virtual users20:22
loxsraubvogel, and yes, I installed dovecot-postfix (the package) but now can't see where to go for this thing20:22
ErtanERBEKRoyK, yes, you are true20:23
raubvogelloxs: did you tell postfix to use dovecot for auth?20:23
raubvogel(sasl, tls that thingie)20:23
ErtanERBEKRoyK, I can only separate Core based20:23
RoyKErtanERBEK: that's a processor issue (or lack of functionality) - IIRC IBM is the only one supporting that20:23
loxsraubvogel, not yet, but I have a guide that gives like 10 commands to do that.20:23
ErtanERBEKI know that20:23
ErtanERBEKbut if I use brand based Server then I can use VmWare or Windows HyperV20:24
ErtanERBEKyes I know Ubuntu Server Power Full system and  have many unic feature20:25
ErtanERBEKbut I thik some development for Virtualization system20:26
raubvogelloxs: this is kinda how they play together: http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL20:26
geolrHi all, where to start: How to mount a usbdisk such that I can use it to serve files with samba? Thx!20:26
ErtanERBEKRoyK, Thank you for your help..20:26
loxsraubvogel, thanks, I'll go read that20:26
luciano_geolr: you can moun it and then add it to smb.conf20:26
RoyKErtanERBEK: you can't do sub-cpu virtualisation in software without a rather bad penalty - essensially, you don't want that...20:26
luciano_as a normal share20:26
raubvogelloxs: this is the first thing I read when I setup postfix and virtual hosting : http://www.howtoforge.com/linux_postfix_virtual_hosting20:27
raubvogelIt is a bit dated but should give you an idea of how to setup virtual hosting/domains20:28
loxsthanks20:28
raubvogelIf you are going to have a file holding passwords, a la /etc/shadow, dovecot can read it20:29
raubvogelpostfix could not care less; it only wants to know where to put mail, which domains it should answer for, and who are the valid users20:29
ErtanERBEKRoyK, maybe Ubuntu Server team add VirtualBox system to Ubuntu Server20:29
raubvogelFor authentication, you let dovecot do it for you20:29
ErtanERBEKthen we can use CPU based limit20:30
raubvogelsince ti can authenticate against local file, pam, ldap, kerberos, and even dilled pickles20:30
RoyKErtanERBEK: you can use virtualbox on ubuntu20:30
ErtanERBEKBut I can't with server system20:30
RoyKwhy not?20:31
ErtanERBEKdo you know , how to install ubuntu server gNome GUI20:31
RoyKno need for that - all you need is are the x libs20:31
ErtanERBEKrealy20:31
RoyKreally...20:31
ErtanERBEKthis is good news20:31
RoyKit's like that for all X software20:31
RoyKand you can batch-start virtualbox VMs with VBoxManage20:32
loxsraubvogel, thank you. That really helped me.20:32
ErtanERBEKbut I can't use Virtual Machine Manager with Virtualbox, right ?20:32
RoyKbut then - I didn't know you could do cpu limitations with vbox...20:32
RoyKErtanERBEK: yes, you can20:32
RoyKErtanERBEK: just use remote X20:32
raubvogelloxs: cool. If you have questions, ask them away20:32
RoyKErtanERBEK: is your client linux or windows?20:33
ErtanERBEKLinux20:33
ErtanERBEKI am alrady use Ubuntu 11024 with Unity20:33
uvirtbotLaunchpad bug 11024 in rhythmbox "Files are not selectable, hence not playable" [Medium,Fix released] https://launchpad.net/bugs/1102420:33
RoyKthen just ssh into the machine and try to launch xeyes or something20:33
RoyKit should forward X11 over ssh automatically20:33
ErtanERBEKso, what we need20:34
ErtanERBEKIntall Ubuntu Server20:34
ErtanERBEKInstall X20:34
RoyKErtanERBEK: ssh into the box, start xeyes, if it's not installed, install x11apps (IIRC)20:34
RoyKnot X20:34
RoyKjust the x libs20:34
ErtanERBEKInstall openssh20:34
RoyKnot X itself20:34
ErtanERBEKonly libs right20:34
RoyKX itself is an X server made for showing stuff on a local display20:34
RoyKErtanERBEK: just do what I just said - ssh into the box, start xeyes20:35
RoyKif it's not installed, install what it told you to install20:35
ErtanERBEKok, I understand it20:35
RoyKthen log out and in again and try once more20:35
ErtanERBEKyou mean remote login right20:36
ErtanERBEKI understand you20:36
ErtanERBEKthis is realy good think20:36
RoyKI mean 'ssh user@ip-or-hostname-of-your-server20:36
adam_gzul: do we care if squid3's default out-of-the-box config doesn't match the functionality of the original squid(2) pkg?20:37
adam_groaksoax: ^20:37
matrix3000ssh -x user@hostname ?20:37
matrix3000doesn't that get you x20:37
zuladam_g: i guess we can test it properly next week when we have the orchestra stuff up20:38
adam_gzul: well, orchestra ships with its own squid configuration (which needs to be updated for squid3, btw).. so that wont tell us much20:39
roaksoaxadam_g: not really, afaik it should be compatible already, isn't it?20:39
ErtanERBEKmatrix3000, and RoyK I understand thank you Dear Friend20:39
Davieyadam_g: do you know what config changes need to happen for squid -> squid3 transition?20:39
adam_gthe main difference that ive noticed so far between the two, is squid3 doesn't populate /var/spool/squid with its directory structure out-of-the-box20:39
roaksoaxadam_g: and squid3's one thing, while orchestra's squid config is other thing20:39
Davieymvo might also like to know for squid-deb-proxy.20:39
RoyKmatrix3000: from the manual      -x      Disables X11 forwarding.20:39
adam_gDaviey: started working on some bugs on squid3, gonna check orchestra after thats done20:40
RoyKmatrix3000: -X will forcibly enable it - normally it should be enabled by default20:40
geolrluciano_: you think the mount will be the same upon next reboot20:40
zulbbl20:40
ErtanERBEK-X      Enables X11 forwarding.  This can also be specified on a per-host basis in a configuration file.20:40
luciano_geolr: no.. only if you define in fstab20:40
ErtanERBEKupper case20:40
luciano_define it *20:40
adam_groaksoax: no, orchestra now depends on squid3 and its squid conf is not compatable, and orchestra's postinst needs fixing (was gonna get to these later today)20:40
matrix3000sorry ment X20:41
matrix3000wasn't maying attention to caps20:41
RoyKErtanERBEK: in /etc/ssh/ssh_config or in $HOME/.ssh/config, set ForwardX11 yes20:41
KHendrikok this might be the single most stupid question of the day but what could cause a server installation to take 10 hours and make it in general react very slow? (acer h341 intel atom D410 raid 10 (4x1TB) 2 GB RAM)20:41
ErtanERBEKRoyK, I konow It20:41
RoyKKHendrik: faulty hardware? :)20:42
RoyKKHendrik: btw, I'd strongly suggest using dedicated data drives instead of mixing root and data - REALLY!20:42
RoyKKHendrik: if you only have room for 4 drives, use an USB pen for the root20:42
KHendrikwhy?20:43
roaksoaxadam_g: ok, let me know how it goes20:43
RoyKKHendrik: it REALLY helps whenever the shit hits the fan or the day you want to extend the raid set to have it on whole drives and not partitions, beleive me on this...20:43
KHendrikif the root pendrive fails everything would fail that#s kind of what i don#t want20:43
RoyKKHendrik: also, with 4 drives, you can choose RAID-6 if you're paranoid, so that _any_ two drives can die, and not just one on each side of the mirror20:44
RoyKor you can use raid-5 if you want the extra space...20:44
RoyKKHendrik: with the raid on whole drives, you can replace each drives with a bigger one, one by one, and once all are replaced, poing, and you have more room to resize2fs the filesystem on md020:45
RoyKKHendrik: to do that with partitons, you'll have to struggle through a few of Dante's hells unless you're a partition table expert :P20:46
sixstringHow do I change runlevels on an /etc/init.d/ script? I'm used to chkconfig, but it's not on my system. (Ubuntu oneiric) Googly isn't understanding me today.20:47
KHendriki only have 2 partition per hdd 2GB of Swap the rest is ext 4 and i map all the 2gb to a raid 10 and the rest also as a separate raid 10 with ext420:48
RoyKyes20:48
RoyKmeaning the md device resides on partitions20:49
RoyKwhich is exactly what I would recommend against20:49
sixstringFreaky. I can "apt-get install chkconfig", but it's way different from Centos5. I think I can grok the docs now, anyway.20:50
RoyKKHendrik: get a couple of usb plugs for the root, you probably won't read much from them anyway, and the only writes that go there are logs and perhaps swap (if you've designed the system badly or are abusing it for things it shouldn't do)20:50
sixstringOr...maybe using chkconfig on Ubuntu doesn't make any sense. Because "chkconfig -l jenkins" is returning "0:off  1:off  2:off  3:off  4:off  5:off  6:off". How the heck is it starting automatically, then? I am totally confused.20:51
RoyKsixstring: I guess chkconfig may not be compatible with upstart20:53
RoyKnope - doesn't seem so20:53
RoyKmeaning - if the service is started by a SysV script, chkconfig will tell you, if it's started by upstart, it won't20:54
sixstringRoyK: I'm just now finding hints about that on Google. Thanks.20:54
sixstringhttp://slashzeroconf.wordpress.com/2008/02/16/chkconfig-for-ubuntu-sysv-rc-conf/ seems to be pointing the right direction.20:54
=== gustav- is now known as beerbo
=== beerbo is now known as beerbro
sixstringRoyK: If you know off the top of your head, you'll probably save me a quarter hour on Google: Which tool can I use on ubuntu to set runlevels?20:56
RoyKsixstring: generally, you don't change runlevel, but if you need to, frankly, I don't remember how...20:59
sixstringOK, thanks, RoyK.20:59
guntbertsixstring: runlevel have almost no meaning on ubuntu20:59
* sixstring tosses a virtual donut to RoyK.20:59
guntbert!runlevel20:59
ubottuIn Ubuntu all runlevels except 0,1 and 6 are by default equal. Also keep in mind that Ubuntu now uses !Upstart instead of System V init so there is normally no /etc/inittab.20:59
guntbertsixstring: use telinit20:59
* sixstring scratches his head.21:00
RoyKdefault runlevel is set in /etc/init/rc-sysinit.conf21:00
sixstringI dunno. This is going to take me a bit to understand. I'll dig into /etc/init/rc* to see if that makes sense. The only drawback to linux is that various flavors do things differently.21:01
sixstringBut I guess multiple flavors is a good thing, right?21:01
* sixstring tosses guntbert a virtual donut of a different flavor.21:01
RoyKsixstring: solaris 9 and solaris 10 are quite different in this aspect as well :P21:02
RoyKand good old sysv scripts don't take dependencies into account, which is somewhat non-optimal21:03
sixstringThanks for the education, fellas. I'll have to punt for today. Maybe I'll figure it out tomorrow. :)21:03
Skaagis there a key I can press during boot time to load into single user mode?21:14
guntbertSkaag: from the grub menu, yes21:15
SkaagI just see the ubuntu logo, no grub menu21:15
Skaaghow do I invoke the grub menu?21:15
Skaagif I press ESC, the logo vanishes and I see the normal boot text (services being started, etc)21:16
guntbertSkaag: press <shift> durin boot until the menu appears21:16
Skaagawesome. thanks :)21:16
guntbertSkaag: you're welcome :-)21:17
SkaagI have another problem with a certain type of older SuperMicro servers I have, where the ubuntu prompt is showing up garbled21:21
Skaagthe detected resolution is 648x483 or so21:22
Skaagthose numbers seem suspicious to me. I would imagine it should be 640x480, but it's not. Is it possible Ubuntu is trying to set a strange video mode that the remote KVM chip can not deal with?21:22
SkaagAnd if that is the case, how do I tell ubuntu not to mess with the graphics card?21:23
args[0]how can I check the temperature of my CPU?21:25
RoyKargs[0]: lmsensors?21:25
args[0]thanks RoyK I'll look into that21:25
hallynzul, how did the qa regression testing go?21:26
zulhallyn: havent gotten to it yet battling essex ill look at it tonight21:27
hallynok, thx21:27
ErtanERBEKRoyK,21:35
ErtanERBEKI am try now21:35
ErtanERBEKsystem download 260 MB lib :D21:35
ErtanERBEKwith Virtualbox-4.1 ( Oracle Version )21:35
RoyKErtanERBEK: you'll need some libs, yes21:36
ErtanERBEKthis is not important if change my system stability21:37
RoyKErtanERBEK: it won't effect stability21:39
loxshmm, in what package is the   dovecotpw command?22:01
ErtanERBEKRoyK, Thank you for your good information22:16
ErtanERBEKI installed VirtualBox22:16
ErtanERBEKand now22:16
ErtanERBEKworking properly22:16
ErtanERBEKI can use CPU MHZ limit22:16
ErtanERBEKThank you22:16
adam_gzul: i just pushed some more changes to the branch linked on Bug #89144522:39
uvirtbotLaunchpad bug 891445 in squid3 "package squid3 3.1.15-1ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,Confirmed] https://launchpad.net/bugs/89144522:39
adam_gzul: should be good to upload if you want to review22:39
jdstrandzul: feedparser review completed22:57
jdstrandzul: it looks good, but you'll want to enable the test suite in the build. see my comment in the bug22:57
jdstrandzul: bug #87952022:57
uvirtbotLaunchpad bug 879520 in feedparser "[MIR] python-feedparser" [Undecided,Incomplete] https://launchpad.net/bugs/87952022:57
zuljdstrand: cool i will do so23:08
zuladam_g: ill take a look23:08
jdstrandzul: squid3 promoted, squid demoted, seeds adjusted and bugs marked Fix Released23:28
jdstrandzul: fyi, squid3 has a bunch of these in the build log:23:29
jdstrandg++: warning: switch '-fhuge-objects' is no longer supported23:29
jdstrandseems innocuous, but I thought you might want to know23:29

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!