[00:09] <smoser> jamespage, i just pushed a change to https://code.launchpad.net/~ubuntu-server-ec2-testing-dev/+junk/ec2-automated-tests.smello for the ec2-automated-tests . it seems that maybe because its +junk that i can't propse it for merging
[00:09] <smoser> anyway, i propose that for merging.
[00:10] <smoser> and my plan is to just copy 'smello' binary to each release.
[00:14] <SpamapS> smoser: right, +junks can't use merge proposals
[00:27] <chrislabeard> anyone have any ideas on why I can ssh into my server without a password but when trying to run rsync from same machine it gives me an error http://pastebin.com/11PypSGi
[00:29] <smoser> Daviey, updated https://wiki.ubuntu.com/PrecisePangolin/TechnicalOverview
[00:30] <triode3> hello all... any mdadm users here?
[00:30] <smoser> chrislabeard, no real help, only ftp://ftp.samba.org/pub/unpacked/rsyncweb/issues.html
[00:30] <smoser> and it suggests some things to check.
[00:31] <chrislabeard> a little confusing as to why rsync runs fine when I don't use ssh
[00:31] <chrislabeard> I guess I will look at these files
[00:31] <chrislabeard> thanks
[01:02] <twb> In sid I have a Unattended-Upgrade::Origins-Pattern -- but on my lucid box I only see Unattended-Upgrade::Allowed-Origins
[01:02] <twb> Can I use the former?
[01:03] <twb> I have an in-house apt repo that includes e.g. lucid openldap packages automatically rebuilt against openssl, and currently unattended-upgrades is upgrading from one of those to the newer one in lucid-security, thereby breaking sudo-ldap
[01:03] <twb> So the simple solution is to add my PPA's origin pattern, except that I don't understand the matching style of the Allowed-Origins variable.
[01:05] <twb> Hmm, I think it's just Origin and Suite, so I will try adding "Cyber IT Solutions lucid-cyber" to the list and see what happens.
[01:14] <twb> Why does unattended-upgrades recommend mailx?  AFAICT it just uses cron to send notification emails, and cron uses /usr/sbin/sendmail, not mailx
[01:15] <SpamapS> twb: perhaps because   * add "mailx" to suggests (LP: #137994)
[01:16] <twb> Oh WTF, there's an /usr/bin/unattended-upgrades *as well as* the /etc/cron.daily/apt that apt ships
[01:17] <twb> OK, I see, /etc/cron.daily/apt does everything except the actual package upgrade, and calls u-a to do that.
[01:18] <twb> I still don't see why u-a doesn't just emit to stdout and let cron take care of it :-/
[01:18] <SpamapS> Or use sendmail directly
[01:18] <twb> IMO that is wrong
[01:19] <twb> If you're invoked via cron, bypassing cron's mail configuration is naughty
[01:19] <twb> Otherwise e.g. if I change MAILTO=fred@telstra.com to /etc/crontab and you are still sending to root@localhost, I will lose your mail
[01:20] <SpamapS> wouldn't it be advisable to alias root's mail to an account that is watched?
[01:20] <SpamapS> I started at a company that hadn't done that for 4 years..
[01:20] <twb> SpamapS: yes, but that's orthogonal to my complain
[01:20] <SpamapS> I found SO much broken stuff going through and just running 'mail' as root
[01:20] <SpamapS> backups failing.. disks filling up... crazy
[01:20] <twb> SpamapS: the one that was fucking me was... lemme find the ticket...
[01:21] <ipl31> So can someone tell me if I have a snippet in my orchestra/cobbler preseed that is showing up in the d-i as $SNIPPET('snippet_name') does that mean it failed to compile?
[01:21] <twb> http://bugs.debian.org/645286
[01:21] <erichammond> twb: But cron doesn't allow me to specify custom subjects which makes all cron emails look equally uninteresting.
[01:21] <twb> erichammond: tough
[01:21] <twb> erichammond: if you care enough fix that in cron, not by patching individual jobs
[01:22] <SpamapS> ipl31: yes most likely. Do you have other snippets working that way?
[01:22] <twb> (FWIW the subject comes from the job, so the direct issue there is using cron.daily instead of cron.d)
[01:23] <SpamapS> twb: nice bug btw.. hah!
[01:23] <twb> The fix is grotesque
[01:23] <twb> s/fix/kludge/
[01:24] <SpamapS> twb: looks like they fixed it upstream for you
[01:24] <SpamapS> twb: but then dropped it
[01:24] <ipl31> SpamapS: This particular snippet is in last command and it is surrounded by two others that are working
[01:24] <twb> SpamapS: yeah, I seem to have missed that email
[01:25] <ipl31> Are there any code examples that show manipulating the interfaces file with snippets? That is essentially what I am trying to do
[01:25] <SpamapS> twb: best be subscribing to those next time. ;)
[01:25]  * SpamapS always forgets to subscribe to the bugs he files in Debian
[01:25] <SpamapS> ipl31: no but .. netcfg is pretty powerful
[01:25] <SpamapS> anyway, I'm late...
[01:25] <twb> It ought to have subscribed me automagically to the one I filed, surely?
[01:25]  * SpamapS disappears
[01:25] <SpamapS> twb: no, Debian's BTS does not subscribe you to bugs you file
[01:26] <twb> OH
[01:26] <SpamapS> yeah
[01:26] <twb> So it's just normally people hit group reply
[01:26] <SpamapS> exactly
[01:26] <ipl31> SpampS: does netcfg support bonding, vlans etc??
[01:26] <ipl31> SpamapS: does netcfg support bonding and vlans?
[01:26] <ipl31> sorry about the double post
[01:26] <SpamapS> ipl31: not sure..
[01:26] <SpamapS> anyway, I must be going
[01:26] <ipl31> SpamapS: thanks
[01:56] <twb> Sigh.
[01:56] <twb> Unattended-Upgrade::Allowed-Origins "Cyber IT Solutions lucid-cyber"; fails, because unattended-upgrades(1) assumes that the Origin is a single word.
[02:14] <zul> RoAkSoAx: eh?
[02:16] <RoAkSoAx> zul: eh what?
 Daviey: zul I think we'll also need to add user/password fields for each system so that users can change them
[02:17] <RoAkSoAx> zul: cobbler system, add user/password fields for each of the systems so administrators can change admin user/password of the system they are deploying
[02:18] <zul> im thinking im missing context here what was the problem
[02:20] <RoAkSoAx> zul: someone was asking how they can change the user/password for the machine they are deploying
[02:20] <RoAkSoAx> zul: and it makes no sense to manually edit a preseed file to do it
[02:20] <zul> ah ok
[02:20] <zul> yeah
[02:20] <RoAkSoAx> zul: so we should add user/pass to cobbler systems and then add a snippet that will automatically do that
[02:21] <zul> RoAkSoAx: probably worry about it tomorrow though :)
[02:21] <twb> Bah, symmetric crypto blows
[02:21] <twb> You need to add a public key infrastructure to it :-)
[02:22] <twb> Say kerberos, that was you can put a big sticker on the front "compatible with AD"
[02:22] <RoAkSoAx> zul: lol yeah it's  should be fairly easy though
[02:22] <twb> What could POSSIBLY go wrong
[02:27] <twb> There should be a better way to handle dkms/m-a updates to a bastion where you don't want to install gcc
[02:28] <twb> Specifically, I scripted an automated rebuild of xtables m-a whenever a new linux-generic update comes down the pipe, BUT, it won't be installed because there is no metapackage that depends on the latest xtables-addons-modules-NNN-generic.
[02:28] <twb> And I am surely not the only one who wants to avoid putting gcc on an xtables-using firewall...
[03:54] <jjjrmy> Hey, guys. I need help!
[04:30] <Acidburn_1> anyone around?
[04:46] <twb> !anyone
[04:47] <twb> Stupid bot.
[04:47] <twb> jjjrmy: what is your question?
[05:03] <T3CHKOMMIE> hey guys, i was wondering if anyone knows what brand of cpu is typlically better for ubuntu? AMD vs intel it seems like ubuntu isnt optomized for an intel like windows is, but it also seems like AMD is lacking in some features. thoughts?
[05:04] <T3CHKOMMIE> I am talking from an OS / schedualing view point.
[05:06] <twb> T3CHKOMMIE: x86-64 CPUs it doesn't matter a damn to Ubuntu
[05:07] <twb> T3CHKOMMIE: obviously both intel and amd make a few CPUs of different architectures (e.g. tegra) which is a whole other ballgame
[05:08] <T3CHKOMMIE> twb, really? i was looking at i7 vs bulldozer... seems like the way windows and ubuntu sheudal the threads on the hardware can either help or hinder performance based on number and load of threads...
[05:08] <T3CHKOMMIE> twb, do you know of any cpu features that dont work yet on the linux kernel?
[05:08] <twb> What I mean is that Ubuntu binaries are compiled to a baseline x86-64 ABI.  So anything "cool" about a particular CPU is not going to be Ubuntu-specific.
[05:08] <T3CHKOMMIE> for example, turbo clocking with intel etc.
[05:09] <twb> Regarding specific features: I have no idea.
[05:09] <twb> Generally I buy intel because an AMD-based box is more likely to contain nvidia components, and nvidia is actively hostile to the FOSS movement
[05:10] <T3CHKOMMIE> foss?
[05:10] <twb> And generally I'm building things like file/print servers, so anything newer than a Pentium 4 will be perfectly fine
[05:10] <twb> T3CHKOMMIE: Free and Open Source Software
[05:10] <T3CHKOMMIE> gotchya.
[05:11] <twb> T3CHKOMMIE: i.e. the ideology behind the software
[05:11] <T3CHKOMMIE> its been my experience that nvida drivers work better on ubuntu than AMD or ATI. is that yours aswell?
[05:12] <twb> If you're talking about GPU drivers, I do not run non-Free GPU drivers, so I have no idea.
[05:12] <T3CHKOMMIE> ya, gpu. thats interesting. why dont you use non free gpu drivers? and how do you get "free" gpu drivers?
[05:13] <twb> Free GPU drivers ship with your system
[05:14] <twb> The reasons to use them are the same as reasons to use FOSS in general.  Try http://fsf.org/philosophy
[05:14] <twb> Sorry, I meant http://www.gnu.org/philosophy/.  The FSF one seems to be some horrible blog thing.
[05:15] <twb> (Stupid johnsu01...)
[07:36] <auston> hi
[07:37] <auston> my ufw not activated on boot. How to do that?
[08:33] <friedrich> Good day
[08:34] <friedrich> I'm using Ubuntu-server 10.04 and trying to configure mail server with Dovecot as SASL server for postfix
[08:38] <friedrich> I'm using standard manual, but postfix on port 25 doesn't show AUTH string
[08:58] <Randolph> hi all
[08:59] <friedrich> hi
[09:05] <RoyK>  
[09:24] <Daviey> morning'
[09:31]  * uksysadmin tips hat to Daviey
[09:40] <jamespage> morning all
[09:58] <Ursinha> good morning :)
[11:01] <koolhead11> hi all
[11:44] <lynxman> jamespage: morning!
[11:44] <lynxman> Ursinha: bom dia!
[11:45] <jamespage> morning lynxman
[11:45] <Ursinha> lynxman: dia!
[11:46] <koolhead11> hellos lynxman :D
[11:47] <lynxman> koolhead11: ello o/
[11:48] <koolhead11> so how much your going to pay!! lynxman :D
[11:48] <lynxman> koolhead11: oh hell, don't even remind me about it :/
[11:48] <koolhead11> lynxman: :D
[11:49] <koolhead11> hola Ursinha Daviey
[11:49] <Ursinha> man, there not a single dlna client in ubuntu
[11:49] <lynxman> Ursinha: there's a couple java based ones I reckon
[11:49] <lynxman> Ursinha: not Ubuntu specific though
[11:49] <Ursinha> lynxman: if it runs in ubuntu that's fine
[11:49] <Ursinha> problem is I just can't find them
[11:49] <lynxman> Ursinha: it does :)
[11:49] <Ursinha> I'm using my android phone for that
[11:49] <lynxman> Ursinha: http://en.wikipedia.org/wiki/List_of_UPnP_AV_media_servers_and_clients
[11:50] <Ursinha> AH wikipedia
[11:50] <lynxman> Ursinha: the source and failure of all information :D
[11:50] <binyam> helo evrybody i was installing ubuntu server 10.04 in my machin but the there is no graphical interface  is that psible to make having graphical interface please help me?
[11:50] <Ursinha> binyam: yes sir, it's possible, it's just not installed as default :)
[11:50] <koolhead11> binyam: it is. :)
[11:51] <Ursinha> binyam: installing ubuntu-desktop package is one way of getting it..
[11:51]  * koolhead11 wants to modify the bot to answer these questions!!
[11:51] <Ursinha> !ping
[11:51] <Ursinha> :O
[11:51] <koolhead11> Ursinha: xfce is better way
[11:51] <lynxman> !ping ubottu
[11:51] <Ursinha> ubottu: that's rude! you should read Ubuntu CoC
[11:52] <binyam> ursinha: iam trying in instlalling  ubuntu-desktop but is ther any disadvantage installing ubuntu-desktop?
[11:52] <Ursinha> binyam: ubuntu-desktop is basically unity and all related stuff.. but you might want something lighter for a server, like koolhead11 suggested, as xfce
[11:52] <Ursinha> koolhead11: so he might want to install xubuntu-desktop?
[11:53] <koolhead11> Ursinha: not sure but binyam google is your friend don`t forget :D
[11:54] <Ursinha> I know, I just don't like to point people directly to google if I can remember stuff from the top of my head :)
[11:54] <Ursinha> sure, google knows it all :)
[11:55] <binyam> Ursinha:thanks anyway
[11:55] <koolhead11> can someone add !google kind feature to give result url here :D
[11:56] <koolhead11> !google
[11:56] <koolhead11> lawwal
[11:56] <Ursinha> yeahhhhhhhhhhhh
[11:56]  * Ursinha hugs ubottu 
[11:57] <lynxman> ubottu needs a friend
[11:57] <Ursinha> that's the spirit :D
[11:57] <Ursinha> I'm ubottu's friend :P
[11:57]  * Ursinha loves bots
[11:57] <Ursinha> #foreveralone
[11:57] <lynxman> Ursinha: lol!
[11:58] <Ursinha> haha
[11:58] <lynxman> Ursinha: defender of lost causes and advanced scripts ;)
[11:58] <koolhead11> hehe
[11:58] <Ursinha> binyam: let us know if you need any more advice :)
[11:58] <Ursinha> lynxman: yes I am
[11:58] <Ursinha> defender of the lost causes
[11:58] <lynxman> Ursinha: ;)
[12:05] <binyam> Koolhead11:u seems bone head not kool am i right/
[12:05] <otaku_coder> hi, im currently using the ec2 natty ami, and im curious how its been setup. theres a 300GB partition mounted at /mnt, but its not showing up as an ebs volume. any ideas what this is?
[12:05] <patdk-lap> did you install the ebs ami?
[12:06] <koolhead11> binyam: indeed i am at times http://www.ubuntugeek.com/how-to-install-gui-on-ubuntu-11-04-natty-server.html
[12:06] <otaku_coder> patdk-lap: yep
[12:07] <koolhead11> i just did "gui ubuntu server"
[12:07] <patdk-lap> that is the normal local disk then, that would have been your primary drive, if you didn't do ebs root
[12:07] <binyam> Ursinha:and is that possible to acesss out side of any country to my server is there any kind of confiugration that can i make alrady i have installed ssh
[12:07] <otaku_coder> patdk-lap: the main os is on an ebs volume mounted at /dev/sda and when i snapshot it the core filesystem is there, just not anything in /mnt
[12:07] <otaku_coder> wierdly i can write to it fine
[12:07] <patdk-lap> otaku_coder, yes, it works fine, but it's kindof like a ram disk
[12:08] <Ursinha> binyam: so, it depends :)
[12:08] <patdk-lap> when you destroy the instance, it's gone
[12:08] <patdk-lap> but when you restart the instance, it will be there again, but blank
[12:08] <Ursinha> binyam: if you want to access your server from anywhere inside the same network, so you just need to make sure sshd is running
[12:08] <patdk-lap> but as long as the instance is running, it's just a normal local disk
[12:08] <otaku_coder> patdk-lap: right, bit confusing as its a farily large storage space
[12:08] <patdk-lap> basically just think of it as a higher speed temp drive
[12:08] <Ursinha> binyam: if you want to access your server from anywhere else in the world, you need to have a valid ip to connect to
[12:08] <patdk-lap> well, local storage that isn't highly redundant is cheaper to make larger :)
[12:09] <otaku_coder> patdk-lap: ok, ive got mongoDB writing its data there, looks like i need to move it to an ebs volume fast!
[12:09] <Ursinha> binyam: so you need to make sure the router or whatever your server is connected to is configured to let you reach the server from outside
[12:09] <patdk-lap> otaku_coder, depends
[12:09] <patdk-lap> maybe leave it there and do hourly backups out of it
[12:09] <otaku_coder> patdk-lap: well I intended to use ebs snapshots as a way to back it up
[12:09] <patdk-lap> or whatever your application requires
[12:09] <Ursinha> binyam: here at home I have an irc proxy machine (among other stuff), so I configured my router to redirect ports
[12:09] <patdk-lap> all depends on what you require
[12:10] <patdk-lap> I store lots of stuff on ramdisks, and only back it up hourly or daily
[12:10] <binyam> Ursinha:so how can i makesure wether it is connected or not ?
[12:11] <Ursinha> binyam: not sure what you mean :) you need to understand what's the path to get from your computer to outside world
[12:11] <Ursinha> binyam: here at home my computer is connected to a router, which is connected to the world
[12:11] <Ursinha> so to reach my computer I need to do the inverse path
[12:11] <Ursinha> binyam: got it?
[12:12] <binyam> Ursinha:yeah i gote it  let me ask some qoistion later
[12:13] <binyam> Ursinha:the installation of the ubuntu-desktop is alrady finish but nothing display/
[12:13] <otaku_coder> patdk-lap: how do you normally back it all up? especially with databases where its difficult to keep a consistent state
[12:14] <Ursinha> binyam: so, it's no magic :) you need to ask it to
[12:17] <Patrickdk> why is it difficult?
[12:17] <Patrickdk> how is a database that isn't consistent useful to use at all, if you can't back it up?
[12:18] <binyam> Ursinha:How coud i ask it?
[12:18] <binyam> lsb_release -a
[12:18] <Ursinha> binyam: so, you're installing a server, you need to understand at least a bit of what you're doing, otherwise you can get yourself in trouble
[12:19] <binyam> Ursinha:yeah  but iam not familar with ubuntu thats why iam asking you?
[12:19] <Ursinha> binyam: to be really honest with you, ubuntu isn't much different of other distros when it comes to which tools to use to do specific things
[12:20] <Ursinha> and the concepts are the same
[12:20] <Ursinha> concepts are the important things
[12:20] <binyam> Ursinha:so what supoose to do now?
[12:21] <Ursinha> binyam: understand what you are doing :)
[12:21] <Ursinha> binyam: you need to run X, I'd start lightdm
[12:21] <Ursinha> binyam: sudo service lightdm start
[12:21] <Ursinha> X should start and then you can just login
[12:22] <binyam> Ursinha:ok
[12:24] <binyam> Ursinha:itsays t o me lightdm :unrecognized service
[12:24] <otaku_coder> Patrickdk: false alarm, im using a replicaset so can pause one of the slaves to take a backup. :)
[12:32] <Ursinha> binyam: try to run startx and see what happens
[12:42] <binyam> Ursinha: thanks igot it what i need thanks  very much
[12:45] <Ursinha> binyam: no problem :) next time, if you need more help regarding server, you can check here: https://help.ubuntu.com/11.10/serverguide/C/index.html
[12:47] <binyam> Ursinha: thanks
[12:50] <koolhead11> !serverguide
[12:50] <koolhead11> thanks ubottu :D
[13:12] <Ursinha> koolhead11: that is the natty serverguide, we might want to update that :P
[13:12] <Ursinha> natty? no, maverick?
[13:12] <koolhead11> Ursinha: will do that when precise comes
[13:13] <Ursinha> koolhead11: why is that?
[13:14] <koolhead11> Ursinha: i think there is some rule/way/practise to keep LTS guide as url
[13:14] <Ursinha> koolhead11: ahh, I see
[13:27] <koolhead11> !servergui
[13:27] <koolhead11> Ursinha: ^^
[13:28] <Pici> Ursinha: We've purposely left ubottu and the /topic pointing to the latest supported LTS for server related thigns.
[13:30] <koolhead11> Pici: cool :D
[13:35] <Ursinha> thanks koolhead11 and Pici :)
[13:50] <zul> good morning
[13:55] <lynxman> zul: good moaning
[13:55] <zul> hey lynxman
[14:36] <hallyn> Daviey: yay, netcf is in unstable!
[14:43]  * ahs3 ^5s hallyn
[14:43] <hallyn> ahs3: :)
[15:15] <smb> zul, Did we not have some bug report request to add modprobing xen_gntdev to the init scripts (at least for precise). Finally understood what that is good for and it might be nice to have for Oneiric, too...
[15:15] <zul> smb: i think we did wouldnt it be easier just to build it into the kernel as well?
[15:16] <zul> less delta with debian if we did that as well
[15:17] <smb> zul, On one side yes, on the other I am not yet sure a) whether it may have effects on normal installs b) increases the kernel size without it being boot essential (sort of)
[15:17] <zul> k neither am i but yeah we can do that for precise i think
[15:17] <zul> im also concenered if there is a modprobe order
[15:18] <smb> What I found nice about it being in the init script was that I can dual boot into the no-xen side and all the xen modules are not loaded
[15:19] <smb> zul, Seems the gntdev is only used by userspace driver to foreign domain communication. So I would say no there
[15:20] <smb> zul, Right now I was experimenting and loaded it after anything else but before starting a new domU and it was ok
[15:21] <zul> smb: ok ill take a look at it
[15:22] <smb> zul, ok. well I may try to get it prepared and ask you to sponsor. I just for heck cannot find that bug report again
[15:22] <smb> I am sure I saw it fly by
[15:22] <zul> cool
[15:24]  * smb is waiting for a number from zul... ;)
[15:24] <zul> smb: damn hold on
[15:26] <zul> smb: i could have swore there was one as well
[15:26]  * RoyK gives smb a 42
[15:26] <smb> zul, heh, ok. I am pretty sure there was, as well but lp search...
[15:26] <smb> bug 42
[15:27] <RoyK> bug 1
[15:27]  * smb watches lp explode
[15:27] <lynxman> bug -1
[15:27] <RoyK> bug sqrt(-1)
[15:27] <RoyK> bug `ls /`
[15:28] <lynxman> RoyK: trying to exploit the system? ;)
[15:28] <RoyK> lynxman: http://xkcd.com/327/
[15:29] <koolhead11> hello zul :)
[15:29] <zul> hi koolhead11
[15:29] <koolhead11> RoyK: supp
[15:29] <koolhead11> zul: anything for me today?
[15:30] <zul> koolhead11: no
[15:30] <koolhead11> ok sir. :
[15:30] <lynxman> RoyK: ah little Johnny tables
[15:31] <RoyK> http://xkcd.com/984/ yesterday's xkcd was rather cool too :)
[16:03] <zul> soren: ping what happened to https://github.com/openstack/openstack-integration-tests
[16:13] <RoAkSoAx> smoser: ping
[16:14] <RoAkSoAx> smoser: bug #898697
[16:14] <RoAkSoAx> smoser: there's now a debconf question that asks whether to run it or not during install
[16:14] <RoAkSoAx> smoser: and if you decide not to, you can configure what you want to import or not in the config file
[16:14] <RoAkSoAx> smoser: so I'm closing this bug report, is that ok with you?
[16:18] <uksysadmin> RoAkSoAx, how do I get to try this? This affected me.
[16:20] <kirkland> is there any IRC server in main?
[16:21] <RoAkSoAx> uksysadmin: this is released in Precise unfortunately. I cannot backport to oneiric as there's been changes on squid that would make orchestra fail in oneiric
[16:21] <zul> kirkland: no
[16:21] <RoAkSoAx> uksysadmin: i'll probably add backwards compatibility to be able to backport
[16:26] <uksysadmin> RoAkSoAx, that's ok - I'm up for the challenge - I'll grab a build of Precise... I'm still at getting the thing working and April will probably be a time when we'll be looking at using this anyway...
[16:27] <RoAkSoAx> uksysadmin: cool, if you are gonna rebuild, what you probably need is just change the dependency from squid to squid3 in debian/control
[16:27] <dkn> if i update the RAM allocation in KVM, and restart the VM, why wouldn't it show up in top?
[16:27] <uksysadmin> ok
[16:28] <dkn> guest top that is
[16:52] <smoser> RoAkSoAx, how does that work ?
[16:52] <smoser> the postinst runs 'runone' immediately
[16:53] <smoser> what debconf question were you talking about ?
[16:54] <RoAkSoAx> smoser: Precise
[16:54] <RoAkSoAx> smoser: http://pastebin.ubuntu.com/756138/
[16:55] <smoser> carp.
[16:55] <smoser> i was reading out of date trunk/ source
[16:55] <RoAkSoAx> smoser: its not in PPA though because the transition to squid3 was made and it will break oneiric
[16:55] <RoAkSoAx> not in PPA for oneiric*
[16:57] <smoser> i was just reading out of date source
[16:57] <smoser> suck
[16:57] <smoser> sorry for bothering you.
[16:58] <philipsmatto> hi guys
[17:04] <RoAkSoAx> smoser: no worries :) it happens
[17:04] <smoser> i just marked that as a dupe of bug 892328
[17:05] <RoAkSoAx> ok ;)
[17:13] <zul> smoser:  have you seen  the cartoon animaics?
[17:14] <smoser> yeah.
[17:14] <zul> smoser: they had a bit called good idea or bad idea, along the same lines would you say this is a good idea or a bad idea: people.canonical.com/~chucks/add-nova-connect.patch
[17:15] <utlemming> hello nurse
[17:15] <smoser> good idea: pasting links with the protocol included
[17:15] <smoser> bad idea: pasting links you can't copy
[17:15] <smoser> http://people.canonical.com/~chucks/add-nova-connect.patch
[17:16] <zul> http://paste.ubuntu.com/756170/
[17:16] <smoser> boto's ec2 connection is harder to use than it should be
[17:17] <zul> yeah
[17:17] <zul> thats why i wrote a shortcut
[17:17] <smoser> or at least it should have a generic one that takes an endpoint rather than a region item.
[17:18] <smoser> next to "connect_walrus", it seems to make sense.
[17:18] <smoser> but i'd suggest a generic 'connect_ec2_endpoint' or something
[17:19] <zul> so you are syaing you are ok with that but it would also be nice to have a generic one?
[17:19] <smoser> well i think its worth sending upstream
[17:20] <smoser> but a generic one makes sense to me.
[17:20] <zul> k
[17:20] <zul> thanks
[17:20] <zul> i dont think i have the engergy to write a generic one
[17:22] <utlemming> smoser: are you using boto for the ec2-image build process? or is this something else?
[17:23] <smoser> zul brought this up. and its for nova (openstack)
[17:23] <utlemming> smoser: k, thanks -- just want to make sure we're not overlapping
[17:23] <zul> utlemming: no im using it write some perfomance metrics stuff for nova
[17:23]  * zul lunches
[17:24] <smoser> zul, http://smoser.brickies.net/git/?p=xc2.git;a=blob;f=xc2_util.py;h=fc4878beb8922cf8ea4b8d2971c2adfc6e78377a;hb=HEAD
[17:25] <smoser> does something like the generic one i was talking about
[17:25] <smoser> if region == none, then it parses the url given (in ec2_url)
[17:31] <zul> smoser: cool thanks
[17:48] <smoser> zul, http://paste.ubuntu.com/756203/
[17:48] <smoser> something like that.
[17:49] <zul> nifty
[17:50]  * RoAkSoAx redhat cluster breakge coming today :)
[17:52] <Daviey> RoAkSoAx: w00t
[17:53] <RoAkSoAx> Daviey: ehehehe its been tested by ivoks , everything works as expecgted, by given the upstream changes things will definitely break on upgrades from lucid -> precise
[17:53] <RoAkSoAx> Daviey: as configuration methods have changed, binaries have changed, etc
[17:55] <Daviey> rocking :)
[18:01] <mgw> any kerberos experts here?
[18:04] <koolhead17> hi all :)
[18:57] <Daviey> adam_g: Have you been able to look at the keystone charm yet?
[19:01] <adam_g> Daviey: not yet, no. i wanted to poke at openstack for the first time yesterday but sidetracked on bug 883988
[19:07] <Daviey> adam_g: Great :)
[19:10] <RoAkSoAx> adam_g: did you test squid3/orchestra in oneiric?
[19:11] <adam_g> RoAkSoAx: it appeared to be working fine out of the box when i submitted the change. is it not?
[19:11] <RoAkSoAx> adam_g: just wondering cause I wanna change the Dependency from squid to squid3 for oneiric backports
[19:12] <RoAkSoAx> adam_g: that's why I was wondeirn if you tested this in oneiric too
[19:12] <Daviey> Hmm
[19:12] <pukeko> hi there.. i have a karmic-server which i would like to update and potentially upgrade, where can i find the repos ?
[19:12] <Daviey> Something isn't quite working right for me with that.
[19:12] <Daviey> But it might be unrelated.
[19:13] <RoAkSoAx> Daviey: maybe the wrong network for squid?
[19:13] <RoAkSoAx> though, it shouldn't
[19:14] <Pici> pukeko: Take a look at https://help.ubuntu.com/community/EOLUpgrades
[19:14] <pukeko> thanks
[19:14] <adam_g> RoAkSoAx: no, i haven't on oneiric
[19:14] <jamespage> SpamapS: I just got zookeeper 3.3.4 uploaded into Debian unstable; includes upstart configuration for Ubuntu; tests to support MIR are currently disabled; they do run but not reliably...
[19:15] <RoAkSoAx> adam_g: ok
[19:20] <SpamapS> jamespage: NICE .. I think the juju team is excited about 3.4 ...
[19:20] <SpamapS> jamespage: maybe we can patch up the tests and try to get fixes upstream
[19:21] <jamespage> SpamapS: well to be honest I think its the build environments borking more than anything else
[19:21] <jamespage> I can run them fine on my laptop in a clean chroot for either precise or sid
[19:21] <jamespage> my sponsor had issue tho
[19:22] <jamespage> SpamapS: 3.4.0 is appealing but still considered beta; I have a branch I'm working on for it; might get it uploaded to experimental/PPA
[19:38] <hallyn> Daviey: so freeze is over.  Did you want to push the etherboot/ipxe bits from me?  :)
[19:46] <hallyn> jjohansen: stgraber: can we pick a time tomorrow to talk about lxc and apparmor and security (to make Daviey happy)?
[19:47] <jjohansen> hallyn: sure, I good with any time you want
[19:47] <hallyn> 17:00 utc?
[19:48] <hallyn> (11am central, 9am pacific, i think)
[19:49] <hallyn> cool, thanks, i'll ping tomorrow at that time and hope for the best :)
[19:49] <stgraber> I have an ARB review/packaging shift tomorrow until 19:00 UTC tomorrow, will be around after that
[19:50] <hallyn> so do you prefer 20:00 utc for a break?
[19:51] <stgraber> yep 20:00 should work fine
[19:51] <hallyn> stgraber: cool, thanks.  talk to you then.
[19:51] <hallyn> jjohansen: ^
[19:52] <hallyn> (now i'm going for a walk toclear my head before some scary uploads)
[19:52] <jjohansen> hallyn: works for me too
[20:13] <tgardner> so I just installed ubuntu-orchestra-server on a fresh oneiric server. why didn't that also install isc-dhcp-server ?
[20:13] <tgardner> it asked me about address ranges.
[20:19] <smoser> utlemming, http://paste.ubuntu.com/756362/
[20:19] <smoser> do you know anything about that?
[20:20] <smoser> tgardner, it does not assume that it is the owner of your dhcp infrastructure. it can live without it.
[20:21] <tgardner> smoser, yeah, I just figured out that it install dnsmasq by default
[20:22] <smoser> ah. yeah, cobbler works with dnsmasq.
[20:22] <jamespage> smoser, tgardner: cobbler will also work with isc-dhcp-server - but by default orchestra recommends dnsmasq and provides suitable config for it
[20:23] <jamespage> hmm: maybe that should be dnsmasq | isc-dhcp-server....
[20:23] <tgardner> jamespage, I'm trying to figure out if dnsmasq is smart enough to assign specific MAC addresses to DNS names (and IP addresses)
[20:25] <jamespage> tgardner: probably - /usr/share/doc/dnsmasq/examples/dnsmasq.conf.example has lots of options with descriptions
[20:25] <jamespage> it can assign based on the hostname presented from the client via DHCP - that can be managed through cobbler
[20:26] <tgardner> jamespage, I'll check it out. thanks.
[20:26] <jamespage> tgardner, np
[20:27] <tgardner> jamesone other question, what is the cobbler web URL ?
[20:27] <smoser> tgardner, cobbler_web
[20:27] <smoser> hostname/cobbler_web
[20:28] <tgardner> smthats the one. thanks
[20:37] <mjau^> evening people
[20:38] <mjau^> I _think_ I might be having apparmor troubles with bind - I'm setting up my slave server, and I'm getting this when I do a rndc reload: http://pastebin.com/60QX0WAM
[20:38] <mjau^> could anyone help me find out for sure?
[20:58] <SpamapS> mjau^: apparmor would be logging denials in /var/log/syslog
[20:58] <mjau^> SpamapS: ah, so it's not apparmor giving me a hard time then?
[20:58] <mjau^> oh. found what was wrong.
[20:59] <mjau^> hadn't created the foo.se. dir.
[21:01] <smoser> utlemming, would you be willing to review https://code.launchpad.net/~smoser/ubuntu/precise/python-boto/2.1.1/+merge/84002 ?
[21:02] <smoser> the merge is fairly straight forward if you ignore the file-id stuff (ie, you can see smaller changes by 'bzr export' of the tree for the from and to versions and diff  -Naur.
[21:10] <hallyn> Daviey: I'm going ahead and pushing ipxe (with a small change)
[21:10] <hallyn> Daviey: i'm going to wait on etherboot until tomorrow
[21:24] <hallyn> gah - ipxe upload rejected
[21:28] <hallyn> Guess i'll be waiting for daviey after all
[21:29] <hallyn> daviey: http://people.canonical.com/~serge/ipxe-2.debdiff  fwiw
[21:57] <Daviey> hallyn: Great!
[21:57] <Daviey> Will grok it first thing in the morning
[21:58] <hallyn> daviey: thx, i just moved the rules steps to override_dh_install as that's more appropriate for that than override_dh_auto_install
[21:59] <Daviey> groovy
[22:09] <hallyn> zul:  do you have an oneiric pandaboard powered on and handy?
[22:10] <hallyn> if so any chance you could veify sru fix for 884407?  (it should be quick)
[22:33] <hsmod> anyone know much about vnc?  if i run a kvm instance launched with vnc running on port "0.0.0.0:1"  , that port "1" - what is that?   That can't be tcp or udp is it?
[22:39] <RoAkSoAx> Daviey: still around?
[22:43] <Daviey> RoAkSoAx: no. :P
[22:44] <Doppler_> help please dovecot postix Error: ssl_key_file: Can't use /etc/ssl/private/ssl-cert-snakeoil.key: Permission denied have googled made new certs and checked permissions any advice ??
[22:44] <RoAkSoAx> Daviey: lol, so I'm still not sure whether we want a default *preseed* or default *profile* to do the enlist
[22:45] <RoAkSoAx> Daviey: lol, so I'm still not sure whether we want a default *preseed* or default *profile* pointing to the enlist preseed ... to do the enlist
[22:46] <Daviey> RoAkSoAx: right
[22:46] <Daviey> RoAkSoAx: benefits of profile?
[22:47] <RoAkSoAx> Daviey: having a separate profile that is defaul in the PXE Menu
[22:48] <RoAkSoAx> Daviey: once the machine is enlisted, then it will just PXE boot from the pxefile generated for that particular system
[22:48] <RoAkSoAx> Daviey: in comparison if we use a default preseed for *all* profiles, that means that we need to find a way to 1. use the enlist stuff. 2. once it has been used, then remove that from the preseed, or replace the preseed
[22:48] <RoAkSoAx> Daviey: which seams a bit more complicated
[22:49] <Daviey> RoAkSoAx: right, but do we want to encourage people doing 'default preseed' installs to systems which are not enlisted?
[22:50] <Daviey> erm
[22:50] <Daviey> RoAkSoAx: we do that already
[22:50] <RoAkSoAx> Daviey: if we don't have  system, there won't be a default preseed because it will do the enlist stuff
[22:50] <RoAkSoAx> Daviey: if we don't have  system, there won't be a default preseed install because it will do the enlist stuff
[22:50] <Daviey> RoAkSoAx: we want all machines to enlist, right?
[22:51] <RoAkSoAx> Daviey: yes,
[22:51] <Daviey> one they enlist, with what i showed you, they will not re-enlist uless the 'system' is deleted in cobbler
[22:51] <RoAkSoAx> Daviey: if the machine is already enlisted, then it could use *another* preseed to deploy
[22:51] <Daviey> it /must/ use a different preseed
[22:51] <Daviey> the default one will not be used on an already enlisted system
[22:52] <RoAkSoAx> Daviey: right, how do you change that?
[22:52] <Daviey> RoAkSoAx: do you have ipv6?
[22:52] <RoAkSoAx> Daviey: no I don't
[22:53] <Daviey> ok, nevermind
[22:53] <Daviey> RoAkSoAx: steps:
[22:53] <Daviey> 1 - default = enlist
[22:53] <Daviey> .. a mac address preseed is auto generated
[22:53] <Daviey> .. machine will boot from that rather than defaut
[22:54] <Daviey> when we want to install, it puts a proper preseed and boot in there.
[22:54] <Daviey> When we just want to localboot, the mac address preseed provides a localboot directive
[22:54] <Daviey> the machine should only ever use the 'default' one once.
[22:55] <Daviey> If i go to the ui and delete the system, the machine should boot into enlist again to re-enlist.
[22:55] <RoAkSoAx> Daviey: right, but 1.default = enlist means => precise-i386 pointing to default.preseed, right?
[22:56] <Daviey> Well... this blocks arm.
[22:56] <RoAkSoAx> Daviey: now, when you add the system, it will point to profile precise-i386, which will point to default.preseed, see my point?
[22:56] <Daviey> erm, no - not directly using precise-i386, using the same base system, but with an extra cobbler-enlist preseed values.
[22:57] <mgw> anybody know if there's a way to invoke "kdb5_util create" non interactively?
[22:58] <RoAkSoAx> Daviey: what's the "base system"
[22:59] <Daviey> RoAkSoAx: so i am actually currently using an enlist profile with that as the default timeout :)
[22:59] <RoAkSoAx> Daviey: in order for it to pxe boot, you need to add a "profile" that wil tell where the preseed is
[23:00] <RoAkSoAx> Daviey: right, you are modifying the *default* file under pxelinux.cfg/
[23:00] <RoAkSoAx> Daviey: but instead of manually modifying files, isn't it better to do it on top of cobbler
[23:00] <RoAkSoAx> Daviey: cause this changes mean changes to *stock* cobbler
[23:00] <Daviey> RoAkSoAx: well, i added a 'profile' in the webui
[23:00] <Daviey> which created, http://pb.daviey.com/0RxC/
[23:01] <Daviey> then manually changed, ONTIMEOUT enlist
[23:01] <soren> zul: It got renamed.
[23:01] <soren> zul: To... er....
[23:01] <soren> zul: t-something.
[23:01] <soren> zul: Tempest!
[23:01] <RoAkSoAx> Daviey: right, which is basically what I was saying, add a *default* *profile* not a preseed :)
[23:02] <Daviey> RoAkSoAx: Heh, works for me :)
[23:03] <RoAkSoAx> Daviey: well that's what I was saying, we need a default *profile*, which means, if it cannot find the pxe file under pxelinux.cfg/01-<MAC>, then use pxelinux.cfg/default that will run the enlist *profile*
[23:04] <Daviey> RoAkSoAx: That sounds clean enough, it's how i'm doing it locally.
[23:04] <Daviey> RoAkSoAx: I don't know how best to auto create a new profile?
[23:04] <RoAkSoAx> Daviey: thought, I'm also saying that we can avoid the wait of seconds until it TIMEOUT's and defaults to *enlist-profile* by creating a system called *default* that will replace pxelinux.cfg/default and could tell it to enlist
[23:05] <Daviey> RoAkSoAx: Also, how can we care for arm with this aswell?
[23:05] <Daviey> That is a hard problem. :(
[23:06] <RoAkSoAx> Daviey: what's broken from the ARM stuff?
[23:06] <RoAkSoAx> Daviey: i'll do the autoconfiguration stuff in orchestra
[23:07] <RoAkSoAx> Daviey: ipxe?
[23:09] <Daviey> RoAkSoAx: ipxe can't work on arm
[23:09] <Daviey> RoAkSoAx: the problem is, currently we are talking about making enlist use precise-i386
[23:09] <Daviey> this breaks arm enlistment
[23:10] <Daviey> RoAkSoAx: uboot could be set to tftp fetch 'default-arm' ?
[23:10] <SpamapS> Daviey: you were TIL for mysql-cluster-7.0 ... I'm going to import 7.1.17 and fix bug #660379 .. mmmkay?
[23:11] <RoAkSoAx> Daviey: Idk actually
[23:13] <Daviey> SpamapS: i never object to people hijacking my TIL's :)
[23:14] <SpamapS> Daviey: I promise I'll treat your TIL nicely
[23:15]  * SpamapS shoves Daviey's TIL in the back of the van and speeds away
[23:16] <Daviey> SpamapS: thanks :P
[23:18] <RoAkSoAx> Daviey: well so I guess we can either make the administrator select enlistment for either i386/x86_64 or arm
[23:18] <Daviey> RoAkSoAx: i think you can config what file gets pulled in uboot.. i'd need to experiment
[23:18] <jetole> Hey guys. What do you think the role should be if you're highering someone to specialize in deploying high availability in web servers and maintain them
[23:18] <Daviey> RoAkSoAx: At the moment, all arm reference hardware we have doesn't have native PXE booting.  This means that /some/ config via uboot can be expected.
[23:19] <jetole> system administrator or systems engineer seems to generic or ambiguous
[23:19] <RoAkSoAx> Daviey: cause either way, arm is not imported automatically
[23:19] <Daviey> RoAkSoAx: right, we should probably address that aswell.
[23:20] <Daviey> jetole: I'd say it depends how deep you are expecting the person to be involved.
[23:20] <RoAkSoAx> Daviey: right, but the way how arm is handle is quite different from the way a normal ISO is handled
[23:20] <Daviey> jetole: if it requires extensive knowledge, i'd say engineer.. if it's keeping it ticking over, it's an admin :)
[23:20] <RoAkSoAx> jetole: I've seen similar jobs by "High Availability X,Y,Z"
[23:21] <jetole> Daviey: I meant a more descriptive, less broad title then systems administrator or systems engineer
[23:21] <Daviey> ah
[23:21] <jetole> RoAkSoAx: High Availability Manager?
[23:21] <RoAkSoAx> jetole: High Availability Engineer?
[23:21] <jetole> ha deployment engineer?
[23:21] <Daviey> RoAkSoAx: Perhaps we should get importing working, then work out how to enlist enable it?
[23:21] <jetole> RoAkSoAx: ok
[23:22] <RoAkSoAx> Daviey: importing is the least of the issues really
[23:22] <jetole> I'm preparing to write the help wanted ad and want a title that will scare off the people I would waste time interviewing
[23:22] <jetole> Linux Cluster Specialist?
[23:23] <RoAkSoAx> jetole: that too
[23:23] <jetole> ok. Thanks. I was hoping you guys all knew some real professional sounding title already
[23:23] <jetole> lol
[23:24] <RoAkSoAx> Daviey: i personally think we need to get this working first with i386/x86_64 and then hanlde arm
[23:24] <Daviey> RoAkSoAx: ok
[23:24] <RoAkSoAx> jetole: either linux cluster engineer or HA engineer
[23:36]  * Daviey goes afk