/srv/irclogs.ubuntu.com/2011/12/05/#ubuntu-server.txt

twbUrk, someone forgot to switch etckeeper to git on this box00:16
twbNo --color either :-/00:17
twbFortunately I have colordiff(1) on another box...00:18
Veovis_MuaddibI'm PuTTYing in to my server to create a few symbolic links to keep my television organized.  I made them all before realizing that bash shows them red.  My television directory is ~/Videos/Television/All/ and I'd like to have  ~/Videos/Television/Airing/ and ~/Videos/Television/Ended/, to start with.  But inside of the All directory, " $ ln -s Burn\ Notice/ ../Airing/ " Doesn't seem to work.  ls ../Airing shows the link but00:18
Veovis_Muaddibit is red, and SMB shares don't see the link.  Permissions are fine for all subdirectories of ~/Videos/, these would be the first symbolic links in ~/Videos/, and ~/Videos/ is not a symbolic link itself.  Suggestions?00:18
twbVeovis_Muaddib: you can't link to ~; link destinations don't expand ~00:19
twbVeovis_Muaddib: the red is because it's a broken link00:19
twbVeovis_Muaddib: you need to link to /home/muaddib/Videos instead of ~/Videos, for example00:19
Veovis_Muaddibtwb: The exact command is $ ln -s SHOW/ ../Airing00:19
Veovis_MuaddibNo Tilde involved00:20
twbYou're probably still making broken links; try doing the ln from within SHOW00:20
Veovis_Muaddibveovis@Lambert:~/Videos/Television$ ln -s Burn\ Notice/ ../Airing/00:21
Veovis_MuaddibThat's what I've been using00:21
Veovis_MuaddibSorry, forgot the Airing after Television00:22
Veovis_MuaddibAll I mean00:22
Veovis_Muaddibveovis@Lambert:~/Videos/Television/All$ ln -s Burn\ Notice/ ../Airing/00:22
qman__do an ls -l, it'll tell you exactly where the links are pointing00:22
twbGood idea00:22
Veovis_MuaddibBurn Notice -> Burn Notice/  As though it ignored the ../ when choosing where to point00:23
Veovis_MuaddibOkay, let me try up a directory00:24
qman__do it from the Airing directory00:25
Veovis_MuaddibDid that just as it was recommended.  It works.  Never had to do that before, any idea why now?00:26
qman__I don't know exactly why, and I don't recall it behaving this way for me in the bast00:26
qman__past*00:26
Veovis_MuaddibAnd thanks for the ls -l, didn't know that one00:26
qman__but it's taking your first argument literally, instead of relatively00:26
Veovis_MuaddibYeah, that's pretty odd00:26
Veovis_MuaddibThanks though, that worked00:26
twbVeovis_Muaddib: uh, you realize "ln -s foo bar" will create a link "bar -> foo" NOT a link "foo -> bar" ?00:28
twbI think either you're getting the args the wrong way round or forgetting that the link destination is relative to the link, not relative to pwd00:29
Veovis_MuaddibYeah, probably, I'm pretty tired today.  :P  I bet that's it00:29
Veovis_MuaddibOne of those two00:30
=== erichammond1 is now known as erichammond
idlemind324I'm looking for recommendations for what I should use for file sharing on an all Linux network. SSH (SFTP/SCP) or NFS v401:58
twbidlemind324: do you trust your network?02:08
idlemind324twb: i'd say this is a trusted network. it is attached to the Internet but it's behind an IPTables firewall box so I could control any traffic that might try and sneak out02:09
twbSFTP and kerberized NFSv4 would both be OK, but unkerberized NFSv4 shouldn't be run over an untrusted network.02:09
idlemind324ahh. kerberized nfsv4 ... i need to learn about the changes w/nfsv402:09
twbAll network filesystems have locking problems, so you're no worse off there.  SFTP is *really* easy to deploy, but if you intend to be shoving e.g. videos over it, NFS would be a better bet.02:10
twbThe pathological case for NFS is untarring a tarball of lots of very small files, or e.g. a Maildir mailbox.02:10
twbunkerberized NFSv4 is slightly more painful than NFS3; kerberos is a major PITA02:13
twbFor a trusted network where throughput is key I would probably use NFSv3 -- unless you had to also support non-Unix systems02:14
qman__for cross-platform support samba is generally the easiest and a pretty good compromise02:15
twbYeah02:15
qman__in ideal conditions you can achieve 80MB/s over gigabit with it02:16
twbAlthough FWIW I just told my users "I'm not putting up with machine accounts or giving samba a root binddn, so you bitches can all just use SFTP and bloody well like it"02:16
qman__I use all three of the aforementioned on my LAN02:18
twb:-)02:18
qman__well, NFSv302:18
twbI also said "I am *not* supporting >1 network filesystem"02:18
twbWell, technically I did cordon off part of the LAN and designate it "server only" and I run NFSv3 over that.02:19
twbBecause otherwise how do you get the authorized_keys files distributed to allow SFTP? ;-)02:19
qman__I just don't have enough systems to justify the work setting up centralized authentication02:20
qman__or users, for that matter02:21
patdk-laphmm, I dunno how people run unkerberized nfs4, it's not just completely useless02:29
twbpatdk-lap: well, I got to the point where it *looked* like it should work02:32
twbThe SMB2 protocol sounds pretty interesting, but it's no use to me until linux has a client and samba has a server02:32
patdk-lapwell, nfs4 is only useful when using kerberos02:35
patdk-lapand I haven't gotten it to work yet, so I'm still not sure of the limitations02:35
patdk-lapso till I have more time for testing, I still have to use nfs302:35
twbHow so?02:36
patdk-lapmaking uid/usernames match up across nfs4 is a pain in the ass, and requires kerberos02:36
twbI mean on paper NFSv4, even unkerberized, sounds better than NFSv302:36
twbHum02:36
patdk-lapwhy? unkerberised nfs4 removes all usernames and uses a nobodynfs user02:36
patdk-lapthat completely destroys any cross user permissions and usability02:36
twbBecause it's connection-oriented.  But I didn't know that ^^02:36
patdk-lapnfs4 uses usernames cross everything, requireing kerberos auth to verify02:37
twbFair enough, then02:37
patdk-lapthen it requires uid's to be in sync also, cause they didn't think the username though totally :)02:37
patdk-lapit's just so painless for me to sync uid, and just mount nfs302:38
twbOf course NFSv3 also provides zero protections permission-wise, unless you can guarantee users can't get root on any existing box, nor bring in a box on which they have root...02:39
patdk-lapwell, bringing in a box, is easy02:39
twbNot in a prison :P02:39
patdk-lapcan't bring a box into a locked room :)02:39
patdk-lapas for root, that is what monitoring is for02:40
patdk-lapbut ya, nfs4 attempts to fix the *root* issue, while not really fixing it at all, and breaking all other things02:40
patdk-lapso far I have spent a week playing with nfs4, without any real success02:42
patdk-lapbut I also have solaris in that mix, and found out linux nfs4 and solaris nfs4 don't like eah other at all02:42
twboh ow02:42
twbgood luck with THAT02:42
patdk-lapisn't mainly that solaris kerberos isn't compatable with linux kerberos mit02:43
patdk-lapand solaris kerberos is default to a much higher security level02:43
patdk-lapand that was about where I said, this has taken too long, time to stop playing and work on other things02:44
=== himcesjf1 is now known as himcesjf
linociscohow to configure openfire to use through VSAT link with high latency ?04:39
twbHaha, he wanted to run an XMPP server over a satellite link05:01
EvilResistancelool05:01
SpamapSanybody want to try pounding on this website? curious to see how much punishment it can take...07:03
SpamapShttp://ec2-50-16-128-14.compute-1.amazonaws.com/07:03
CoreySpamapS: Urm... that sounds a bit sketchy. :-)07:23
SpamapSHaha07:23
SpamapSI swear I won't pwn you w/ XSS07:23
SpamapS:)07:23
SpamapSWhat would be the point? I can already PWN you w/ SRU's ;)07:24
SpamapS./config-defaults.php:$databasetabletype  =   'myISAM';   // Storage engine mysql should use when creating survey results tables and token tables (if mysql is used). Default is myISAM.07:29
SpamapS*sigh*07:29
SpamapSa "modern" app that still uses that waste of space myisam. :-/07:29
onremyisam is painful07:38
SpamapSits seriously useless07:38
onreagreed07:38
SpamapSat least in 5.5, InnoDB is the default07:42
=== highvolt1ge is now known as highvoltage
=== gustav is now known as beerbro
jamespagemorning all09:03
xranbyjamespage: morning09:14
=== Guest37602 is now known as jpds
jamespagemorning xranby09:15
jamespageapologies but I have not found time to try that new kernel out yet09:15
lynxmanmorning o/09:27
jamespagemorning lynxman09:27
lynxmanjamespage: morning sir :)09:27
koolhead11hi all09:34
austonhi, i have 2 NICs installed on server act as a firewall. eth0 is connected to router and eth1 is on LAN. Both using ip forwarding between the 2 NICs. How to block all incoming traffic from internet?09:44
austonUsing iptables, i have tried only can block the server itself but client connect to it still can access internet.09:45
lynxmanauston: if you want to block clients you need to add a FORWARDING rule09:49
lynxmanauston: since the traffic through your bastion host is forwarded to the clients, the input, output will only affect the host itself09:50
austonwhat is the best command or method to use for filtering the forwarding rule?09:51
lynxmanauston: I'd recommend you have a look at the firewall guide https://help.ubuntu.com/11.10/serverguide/C/firewall.html09:52
austoni have no idea why when I enable ufw, after restarted, ufw become inactive.09:53
koolhead11smoser: around10:04
austonthanks. lynxman. I'll try out the FORWARDING rule.\10:06
lynxmankoolhead11: way too early!10:06
lynxmanauston: best of lucks :) it's in default iptables like INPUT and OUTPUT there's FORWARD too10:06
koolhead11lynxman: ooh okey. :P10:06
austonI got it :)10:07
=== himcesjf1 is now known as himcesjf
Ursinhagood morning :)11:19
vAx1hello11:21
vAx1need some help with syslog-ng 3.3.1 (compiled for my 10.04 LTS)11:22
vAx1someone?11:22
sorenvAx1: Noone can help you if you don't ask a question.11:48
patdk-lapvax1, works fine here11:53
vAx1hey, that was just tu knock ;)12:03
vAx1to12:03
sorenDon't.12:03
vAx1so... my problem12:03
sorenIt's a waste of time.12:03
vAx1syslog-ng works fine after upgrading my conf12:04
vAx1but, when I stop it, the subprocess (lanched by the program() destination)12:04
vAx1dont stop12:05
vAx1I change the option tu start syslog withous the "supervising"12:06
vAx1so, just in background... and it's the same12:06
vAx1still have my 2 process (perl) running12:06
vAx1here is my problèm :D12:08
vAx1Ah, the question....12:19
vAx1Does someone has syslog-ng 3.3.x installed a server? Same problem ?12:19
lynxmandannf: ping12:36
lynxmaner sorry12:36
lynxmanDaviey: ping12:36
lynxmanUrsinha: Bom dia soleiado12:37
Davieylynxman:12:39
pmatulisvAx1: what can syslog-ng do that rsyslog cannot?12:41
vAx1pmatulis: have a compatible configuration12:47
vAx1:D12:47
vAx1here, we have about 200-300 servers ;)12:47
vAx1and some are named loghosts, relaylogs ...12:47
vAx1you dont want to see the configuration files12:48
ExopaladinBetter than us, we scp/mail the logs around all over the place including some hacky reverse ssh tunnels to get around firewalls12:48
vAx1nice!12:49
ExopaladinIt's truly horrible12:49
uvirtbotNew bug: #900267 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration  cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/90026712:56
Alanmaybe somebody can help me here - not sure if i'm reading these errors and/or the output of smartctl properly13:12
Alanfirstly, grep "read error" /var/log/syslog gives me http://paste2.org/p/1809521 just before a disk drops out of my raid513:13
Alansecondly, smartctl -a is telling me 3 pending sectors and 80 reallocated sectors13:14
Alandoes this look like a drive which has run out of spare sectors and needs to be RMA'd? the other 3 drives show 0 for both statistics13:14
Alanand all 4 drives are the same make/model13:14
Alani'm running a raid recheck again to see if it barfs on the same sectors again...13:15
Alanhttp://paste2.org/p/1809527 <-- the results from SMART self-test13:16
_rubenAlan: i'd suggest running the vendor's healthcheck tool on it, it'll tell if you should rma it or that there's else wrong with the system13:17
Alan_ruben: I swear samsung's healthcheck tool is rigged...13:18
AlanI have another 2 samsung drives of varying ages showing similar symptoms in other machines, and every damned time the samsung tool is like "eh, no problem here"13:18
Alanbut it's the same section of the drive, again and again, that has the problem :|13:18
Alanand doesn't depend on SATA cable or SATA controller13:19
slakcphilgood morning, has anyone had usb 3.0 stop working after this last slew of updates?(10.04 LTS)13:19
slakcphilnot recognized with fdisk -l and dmesg gives errors about not adressing in port 113:20
slakcphil2TB external usb with rocketfish 3.0 pcix card13:21
pmatulisvAx1: 'compatible configuration'?13:22
Alan_ruben: given that the healthcheck tool hasn't said my disk is dead, what options do i have for further troubleshooting the problem?13:24
vAx1I can estimate an average of configuration lines number to 1000 per server13:25
vAx1and about 200 serveur in production13:25
_rubenAlan: the SMART errors might be enough to warrant a RMA, might wanna contact samsung about it. dunno what their rma policy is13:26
_rubenor your vendor, they might be more/less flexible13:27
Alanunfortunately i bought from 4 vendors at the same time (to source from different batches), so i wouldn't know which vendor :(13:27
_rubenthey probably won't know either, so pick the vendor you have the most confidence in, or contact several/all ;)13:28
Alanhaha :P13:28
AlanI did wonder about doing that :p13:28
Alanthat being said, last time i tried to get a RMA from a vendor they said "eh, we'd just have to then RMA it to the manufacturer anyway, so you'd be waiting twice as long"13:29
_rubenatleast you wouldn't have to deal with the packaging hell, i know WD for instance has *very* strict packaging rules before even accepting a rma13:29
_rubenassuming the vendor is local13:30
Alannope, internet vendor13:30
* Alan waits for the "fail event" emails....13:31
=== ENOSLEEP is now known as greppy
Alancrap... S2H7JD1B21641713:34
Alanoops13:34
Alanhttp://www.samsunghddvalue.com/webrma/closed.html13:35
Alanthe engrish, it burns13:35
zulsgood morning13:45
_rubenAlan: this might also mean that seagate's tools might work on samsung drives ;)13:47
Alan"Samsung warranty was handled within the UK and Seagate warranty you have to send your drive back to Holland"13:48
Alanyet more fail13:48
Alan_ruben: it also means RMA is completely in limbo at the moment...13:48
Alan_ruben: samsung's tools are atrociously difficult to use, given that no machine in existance now has a floppy drive...13:49
zulgood morning13:49
_rubenAlan: that's what floppy-emulating-usb-sticks are for! ;)13:50
Alanyeah, never got that to work with the samsung tools either13:50
_rubenor even cdrom, if it wouldn't require write access ;)13:50
ninjixzul: morning13:50
AlanI curretly have a CD with the tools on that works, somehow13:50
Alanand only then after i turned off soemthing in the bios...13:50
_rubennice13:51
_rubeni've been using western digitals for quite some time now, their tools is actualy semi-decent (on windows at least, not sure if they support any other OSs)13:52
Alanthat's actually a big deal for me... at least the samsung tools will work without installing windows14:00
Alansince my server doesn't run windows, i'm not going to install windows just to test some drives14:00
=== bladernr_afk is now known as bladernr_
hallynDaviey: feel like chopping off etherboot's head today?14:09
Davieyhallyn: hell yes14:09
zulhmmm?14:10
hallyngreat, you still have the package source handy?14:10
_rubenAlan: my servers don't run windows either, tho i do have some windows boxes available for that kinda stuff :)14:11
Davieyhallyn: no, but i'm looking :)14:11
Davieyhmm, it's not a branch14:12
Alan_ruben: yeah, it'd be a pain to move a drive between machines but i guess i could do it if i had to14:12
Alanthing is... isn't this what SMART is supposed to be fore?14:13
Alan*for14:13
hallynDaviey: http://people.canonical.com/~serge/kill-etherboot/etherboot_5.4.5.dsc14:13
_rubenAlan: in theory: yes, but i never really managed to get smart to give me actually useful/reliable/etc info, tho that might just be me :)14:13
_rubenAlan: I'd just order a replacement drive anyway, wait for the limbo to pass, then ask samsung/seagate how to get eligable for rma .. when it comes back from rma, use it as cold spare :)14:15
_ruben(or replace the new disk with the rma, and use the "new" one as spare)14:15
Alan_ruben: order a replacement drive at about 2.5x the price it should be :|14:16
_rubenAlan: how so?14:16
Alan_ruben: because thailand?14:16
Alandon't know about the rest of the world, but hard drive prices are still inflated by about 150% here14:17
Alani.e. 2TB drives are £150 instead of the £60 they were14:17
_rubennot following prices that closely, but didn't notice incredible increases either14:18
koolhead11smoser: around14:18
_rubenlets see what a 2tb drive goes for around here14:18
patdk-wkheh? the 2tb drive  Iwas going be getting, was $120, topped at $340, and now $28014:18
_rubenheh .. my "favorite" vendor actually has a note regarding thailand on the website .. prices and delivery times can't be guaranteed currently14:19
patdk-wkI need to turn on a 40 drive system before feb, so just waiting as long as I can14:19
_rubensamsung f4 2tb for 156 euros .. but not in stock...14:20
Davieyhallyn: I'm being a plum, but can you remind me why we are not doing this via ipxe?14:20
patdk-wkseems like half the laptop drvies are still normal priced14:21
_rubenpatdk-wk: what kinda chassis for those drives btw?14:22
koolhead11hello Daviey :)14:22
patdk-wkprobably a supermicro14:22
Davieyhey koolhead1114:23
_rubenpatdk-wk: ah ok, been looking at that 88/72 drive chassis the other day .. looks kinda sweet :)14:23
_ruben(the 417 series)14:23
patdk-wkyep14:24
_rubenthe extra costs for sff over lff is less than the costs of an extra chassis when going lff .. nice scaling option14:25
hallynDaviey: say what?  we are doing it via ipxe?14:25
sorenDaviey: The version of etherboot is way ahead of that of ipxe, so to do this from ipxe alone (and provide an upgrade path), ipxe would either need an epoch bump or the kvm-pxe binary would need to be built with another version than the rest of the binaries from the same source package.14:25
patdk-wkruben, that depends on how much space you need14:26
hallynoh i c14:26
patdk-wkthe price of 600gig sff vs 2tb lff14:26
hallynmisunderstood q14:26
sorenhallyn: Or maybe I did :)14:26
sorenWe'll see once Daviey responds. :)14:26
_rubenpatdk-wk: we were comparing 1tb sff with 1tb lff14:27
patdk-wklaptop sff?14:28
Davieysoren: ahhh yes!14:28
_rubenpatdk-wk: we no longer using 5.25" disks, so lff is 3.5" and sff is 2.5" in our books :) .. and sata, as it's for backups and other just-storage tasks14:29
=== cmagina_ is now known as cmagina
patdk-wkI wouldn'14:31
patdk-wkt be using laptop 2.5" in a storage system14:31
smoserkoolhead11, here.14:31
patdk-wka real 2.5" drive, sure14:31
koolhead11smoser: i followed the guide https://help.ubuntu.com/community/UEC/Images#Ubuntu_Cloud_Guest_images_on_Local_Hypervisor_Natty_onward14:31
koolhead11and customized the image by adding the proxy information14:32
koolhead11now am not able to get instance in running state. :(14:32
koolhead11its stuck at "Pending"14:32
koolhead11even euca-get-console-output not helping me much :(14:33
smoserwell, get-console-ouptut will only show after it starts running.14:33
smoserdo you hvae access to the hosts?14:34
koolhead11smoser: http://paste.ubuntu.com/760481/  this is how i made it14:35
koolhead11am not able to ping the host14:35
smoserhost14:35
smosernot guest14:35
koolhead11smoser: yes i have14:35
ninjixsmoser: do you at least see the kvm process running?14:35
koolhead11ninjix: nopes14:36
smoserkoolhead11, you will need to look in /var/log/libvirt14:37
smoserbut your pastebin is missing some stuff.14:37
strat-o-casterI tried apt-get upgrade and it says bind9 is held back.  If I just do apt-get install bind9, will that blow away all my current live configurations? I am doing this from remote so I'm a bit nervous...14:37
smoseror maybe not. i didn't realiez you were doin gvnc to it.14:37
smoserso... thats fine, i' prefer you did everything in the user-data, as its then reproducible, but ok.14:38
uvirtbotNew bug: #899970 in glance (main) "Glance missing dependency: python-routes python-eventlet python-sqlalchemy python-migrate" [High,Fix released] https://launchpad.net/bugs/89997014:38
ninjixkoolhead11: I'm jumping in late here. You trying this in EC2 or private cloud?14:39
koolhead11ninjix: private cloud14:39
koolhead11smoser: there is no log created for the running instance :(14:40
ninjixno log makes me think that the host node is failing to find a resource14:41
smoseri dont think you should have to remove 70-persistent-net-.rules as kvm network devices should be ignored. if they're not i want to know.14:41
smoserhttps://bugs.launchpad.net/ubuntu/+source/udev/+bug/34100614:41
uvirtbotLaunchpad bug 341006 in udev "ease cloning of virtual images by disabling mac address rules" [Wishlist,Fix released]14:41
smoserkoolhead11, look in the logs for that instance id14:41
smoseror if you are not getting that far, you're going to have to look at openstack.14:41
smoserlogs14:41
ninjixkoolhead11: this a euca or openstack based private cloud?14:42
koolhead11ninjix: openstack14:42
koolhead11smoser:  /var/lib/nova/instances/ even it does not show id for that instance14:43
ninjixbut you see a "pending" right?14:43
smosergrep the logs for it.14:43
ninjixyou see anything in /var/log/libvirt/qemu ?14:44
koolhead11ninjix: notthing even there :(014:45
=== hazmat` is now known as hazmat
hallyncmagina: ppetraki: any plans to look into the multipath-tools FTBFS?14:47
koolhead11smoser: ninjix  the only information i modified to the cloud image was assding14:47
koolhead11apt.cong file in /etc/apt14:48
koolhead11and providing it with proxy server infoemation14:48
koolhead11beacuse my whole infra is behind proxy14:48
ninjixthis the first guest you've tried to bring up on the stack?14:48
koolhead11ninjix: i already have other instances running14:50
koolhead11my custom build images14:50
koolhead11and i can do ssh and stuff14:50
ppetrakihallyn, what's FTBFS?14:51
smoserfails to build from source14:51
smoserkoolhead11, i'll try to reproduce here, but i have access only to a diablo level openstack to test it on.14:52
koolhead11smoser: yes that will be fine :)14:52
ppetrakihallyn, oh, that's news to me, sure.14:52
koolhead11smoser: my nova and running instance both are using same proxy address14:53
hallynppetraki: https://launchpad.net/ubuntu/+source/multipath-tools/0.4.9-2ubuntu1/+build/296592314:53
koolhead11smoser: you want me to put it as questions at launchpad with cloud-init section?14:55
koolhead11with alld etails14:55
koolhead11*details14:55
smoserkoolhead11, this is not cloud-init related.14:58
smoserthe instance will get to "running" before cloud-init has the opportunity to screw up.14:58
koolhead11smoser: ok.14:58
smoser:)14:58
koolhead11ooh :P14:58
strat-o-casterI tried apt-get upgrade and it says bind9 is held back.  If I just do apt-get install bind9, will that blow away all my current live configurations?15:11
smoserkoolhead11, did you find any evidence of that instance-id on a node ?15:16
smoserdo you have multiple nodes ?15:16
DavieyRoAkSoAx: can you drive bug 898268?15:24
uvirtbotLaunchpad bug 898268 in suds "[MIR] suds" [Undecided,Incomplete] https://launchpad.net/bugs/89826815:24
RoAkSoAxDaviey: sure, will put it in my TODO15:24
DavieyRoAkSoAx: fence-agents pulled it in btw15:24
smoserkoolhead11, did you try the same image unmodified ?15:25
zulDaviey: do you want me to handle the keystone MIR15:25
RoAkSoAxDaviey: uhmmm... I guess debian maintainer added that since the latest fence-agents is pretty much a resync15:25
smoserie, you're poinging to "/current". have you tried using something with /release ? just for a constant. (current link moves twice weekly)15:25
RoAkSoAxDaviey: ah never mind just remmebered that It hit main this cycle :)15:26
Davieyzul: sounds great15:26
Davieyzul: looks like an rdepends issue15:27
DavieyRoAkSoAx: nah, i think fence-agents was promoted; which has exposed it15:28
RoAkSoAxDaviey: yeah15:28
koolhead11smoser: let me do that again but AFAF i tried that as well15:28
RoAkSoAxDaviey: i though I was promoted last cycle, but I just remember that I filed the MIR to get it promoted this cycle15:29
Davieyah cool15:30
* RoAkSoAx just uploaded new redhat-cluster... gfs2-utils next15:41
=== jcastro_ is now known as jcastro
koolhead11smoser: yes it was running well before i modified it, i could see the logs as well via euca-get-console command15:51
uvirtbotNew bug: #900344 in nagios3 (main) "Nagios outdated -- even on oeiric ..." [Undecided,New] https://launchpad.net/bugs/90034416:06
alex88hi guys, sometimes my server is really slow because of a process "fuser -s ./sess_io............" which uses all cpu, plus i see sometimes cannot allocate memory and too many open files error...what can it be?16:14
zulRoAkSoAx: hey did you see the email about "debian development" environment on the cobler ml16:14
RoAkSoAxzul: yeah! I was planning to reply to them to basically say that I build packages and then test instead of building from their branch16:16
zulRoAkSoAx: ok16:16
RoAkSoAxzul: any ideas? I was gonna point them to us in case they need further help16:16
RoAkSoAxzul: i think we should just request them to be co-maintainers16:17
zulRoAkSoAx: nah i was thinking of anything16:17
zulRoAkSoAx: sure16:17
RoAkSoAxzul: cool16:18
zulRoAkSoAx: yeah i just have gotten to it, will do so in a minute (stuck in SRU purgatory)16:21
RoAkSoAxheh ok16:21
hallynstgraber: jjohansen: fyi, finally started https://wiki.ubuntu.com/LxcSecurity16:22
stgrabercool16:23
=== Guest76640 is now known as NCommander
=== NCommander is now known as Guest67564
=== Guest67564 is now known as NCommander
kpettitcan linux using samba or something else be a active directory server?  Have a crappy Win2003 server I'd love to get rid of, but the computers on the network login via active directory.16:43
zulkpettit: yes it can16:44
zulcheck google there is alot of docs16:44
SpamapSkpettit: http://wiki.samba.org/index.php/Samba416:44
SpamapSStill alpha unfortunately16:44
kpettitthat's what I was wondering.  I know samba can be a relay but last I checked it culdn't be a PDC16:45
kpettitthanks.16:45
SpamapShttp://www.samba.org/samba/news/developers/ms-patch.html16:45
SpamapSNice16:45
SpamapSMS patching samba16:45
zulno no we arent a monoploy ;)16:46
kpettitthat's pretty cool.16:47
dknhmmm why does my server keep asking me for a password when i've disabled passwords for the account and i'm using RSA keys?16:48
kpettitdoes your RSA key use a password?16:48
dknah.... i don't think so16:48
kpettitYou might want to check, if your RSA key has a password then you still need to enter that password when loggin in.16:49
dknlol16:49
kpettitssh-keygen asks for a password when you generate the keys.  You have to leave it blank if you want to do passwordless16:49
dknya.. i thought i did... i guess i'll just generate a new one and try again..16:49
SpamapSdkn: why not use a password?16:51
dknSpamapS, backuppc needs to run automated16:51
stgraberhallyn: looks good, did you see any news for the shutdown/reboot patch?16:53
hallynstgraber: yes, daniel has been pushing it over the weekend - 3 versions :)16:54
hallyn(oleg has been reviewing)16:54
dkni've got a vm with a disk running backuppc as a server, and the main filesystem as the client, then filesystem runs it's own backuppc server for two removable disks16:54
dkni can have backuppc login be both a client and server can't i?16:55
SpamapSdkn: passwordless keys are fine for automation.. but make sure you understand the risks. :)16:55
stgraberhallyn: ah, that's very good news16:56
dknoh i know :)16:56
hallynstrgraber: I should probably do a manual test so I can chime in and keep the thread going...16:57
stgraberhallyn: hopefully we can get the kernel team to cherry pick once accepted (assuming it won't make it for 3.2)16:57
hallynwhat do we bribe smb with?16:57
smbBeers work usually...16:58
dknhmmmm it's still asking me for a password when i try testing by ssh in for the backuppc user16:59
smbBut the earlier the better for special consideration16:59
=== oCean_ is now known as oCean
hallynsmb: great, i hear it's cheap in budapest  :)17:02
smbhallyn, Even more compared to US prices17:03
adam_gRoAkSoAx: ping17:03
RoAkSoAxadam_g: pong17:04
RoAkSoAxadam_g: what's up17:06
uvirtbotNew bug: #900378 in nova (main) "lxc guest fails to start with a kernel traceback" [Undecided,New] https://launchpad.net/bugs/90037817:06
adam_gRoAkSoAx: would you mind targeting precise for bug #893352 and marking fixed released, if thats the case? looks like it is, but wasn't sure with the merge into resource-agents. just checked again and it looks okay in cluster-agents 1:1.0.4-0ubuntu217:07
uvirtbotLaunchpad bug 893352 in cluster-agents "mysql ocf script broken in 1:1.0.3-2ubuntu1 (lucid)" [Medium,In progress] https://launchpad.net/bugs/89335217:07
RoAkSoAxadam_g: ok, i'll take a look17:08
adam_gRoAkSoAx: sweet, thanks17:09
hallynDaviey: whoa!  i thought the kvm-ipxe package got pushed?  but i don't see that version of ipxe in the publishing history17:11
hallyncan't do the etherboot push until kvm-ipxe is in archive17:11
Davieyhallyn: thanks for the heads up17:22
hallynDaviey: but so i'm confused, i thought you uploaded htat on friday?17:23
Davieyhallyn: on a call right now, will confirm after17:23
hallynkthx17:23
x404xI changed workgroup in the /etc/smb.conf file but still it uses wrong group after restart , what to do ?17:25
xranbyx404x: can you post the config some place?17:26
xranbypreferably using paste.ubuntu.com17:27
zuladam_g: fyi quantum and horizon has been packaged as well17:30
hallynahs3: i rolled the libnl fix as well into http://people.canonical.com/~serge/netcf-0.1.9-2.debdiff17:30
hallynbuilds for me on sid17:30
smoserwell, koolhead11 not here, but http://paste.ubuntu.com/760635/ "worked for me"17:33
Guest35318how to make nano select all text ?17:36
uvirtbotNew bug: #900391 in samba (main) "IE9 on Windows 7 cannot download files to samba 3.5.11 share" [Undecided,New] https://launchpad.net/bugs/90039117:41
blkperlGuest35318: i don't think you can..17:43
blkperlGuest35318: http://superuser.com/questions/196425/how-do-i-select-all-text-from-a-file-with-nano17:44
uvirtbotNew bug: #900394 in samba (main) "GNATs doesn't support GNATSWEB queries" [Undecided,New] https://launchpad.net/bugs/90039417:51
Guest35318http://paste.ubuntu.com/760674/17:54
UrsinhaDaviey: how busy are you right now?17:55
DavieyUrsinha: in a call17:55
F-3000Hello! What term is used, when a single data (ie a file) is written simultaneously on two harddrives?18:03
kpettitmirroring?18:03
F-3000kpettit: Ay, thanks.18:04
cloudgeekhow to setup a python or django hosting on ubuntu18:05
kpettitRaid 1 might be what your looking for as well.  Raid 1 is hard drive mirroring18:05
kpettitcloudgeek, I like to use pip.  pip is like a cli python package manager.   "pip install django"18:06
x404xanyone look at my smb.conf file ? why does it not change workgroup ? hhttp://paste.ubuntu.com/760674/18:06
cloudgeekkpeyyit:i know that :)  but i looking it config with django , for student project ,that from one server system we can hosting for our projects18:06
kpettitcloudgeek, sorry didn't understand that.  Can you rephrase?18:07
kpettiti use django on cloud servers alot.  Most give me ubuntu to start with, then from there I install pip then django and other python stuff I need.18:08
tashneed some samba help, anyone in here worked with it enough to speak on it knowledgeably?18:08
ahs3hallyn: thx.  i'll take a look here in a bit.18:08
kpettittash, go ahead and ask.  If somebody can help they will.18:09
tashkpettit: k18:09
cloudgeekkpettit:hey we need a hosting for our student project we can't efford the price , so looking setup out own for our projects o we can use for out projects18:09
tashHave several windows users using a program called autocad to make drawings, they then save them to the samba share so others in the office can view them and edit them.  However, the files seem to be getting added with 744 permissions for some reason.18:10
tashI'd like them to be defaulted to 77518:10
kpettitcloudgeek, so you want to create a service on your own hardware so you can host student django projects?18:10
tashI thought create mask = 0775 in smb.conf would be my friend, but not so sure that is the case b/c create mask 0755 was already set, and like I said, the files are defaulting to 74418:11
dkn/var/lib/backuppc is the home directly and the server directory for the backuppc user on the filesystem.... aha got it now..18:11
cloudgeekkpettit:yep ,for our use only ! any guide or tutorial18:11
patdk-wktash, create mask is a restriction18:12
patdk-wkyou need force create mode, to ADD missing permissions18:12
kpettitcloudgeek, I can't think of a app that does that off hand.  I think it depends a bit on how you want the students to be able to add new projects.  I'd probally give the students ubuntu logins and have apache look in there users directory for the .wsgi file.18:13
tashpatdk-wk: so, would force create mode = 0775 do what I am asking then?  And, also for directories, force directory mode = 0775 ?18:13
patdk-wkprobably18:14
kpettittash.  If your not that familiar with samba I'd use SWAT which is samba's web admin tool.  It can show you ever option and has a nice help next to each option so you can see what it does.18:14
cloudgeekkpettit:thanks , i try to implement , if fails i ask gaian for help18:15
tashkpettit: thanks for the tips18:16
kpettitcloudgeek,  ok.  Also remember if students don't need the website to be permanent they can use django's built in webserver.18:16
kpettittash, no problem.18:17
cloudgeekkpettit they need as staic for 4 month till the project18:17
kpettitcloudgeek, then I'd go the approach of hardcoding apache to look for wsgi file in students home directory.  That way the students have there own private dev area.18:18
cloudgeekkpettit:okay any step by step tutorial for that18:19
kpettitcloudgeek, do you know django or how to get python apps running in apache?18:19
cloudgeekkpettit: i try it with mod wsgi18:21
kpettitIf your new to it.  You can look at this:  https://docs.djangoproject.com/en/dev/howto/deployment/modwsgi/   In ubuntu you need to make sure wsgi is installed18:21
cloudgeekmost of our work on ubuntu desktop now we switch server18:21
kpettitAh got ya.  To install wsgi in ubuntu "apt-get install libapache2-mod-wsgi"  then from there you can follow instructions on that link I sent18:22
kpettitthere is also a django channel on this server that has lots of good people if you get more specific questions on it.18:22
cloudgeekthanks all for help need to sleep exam on tomorrow18:22
kpettitno problem.  Have fun18:23
cloudgeekkpettit::)18:23
zulSpamapS: im probably going to upload the SRU on thursday18:54
lynxmanDaviey: ping18:57
ipl31Hello, I am noticing when I stop and start LXCs on 11.10 server that is seems to pause the networking on Host OS19:11
uvirtbotNew bug: #615545 in cloud-init (main) "Instances launched in a VPC cannot access ec2.archive.ubuntu.com" [Undecided,Confirmed] https://launchpad.net/bugs/61554519:11
SpamapSzul: please make *one* bug for tracking the SRU, instead of 40 ;)19:17
zulSpamapS: you sure? :)19:18
zulSpamapS: include the changelog, debdiff, etc, etc?19:18
SpamapSzul: you can leave the bugs in the changelog19:19
SpamapSzul: just open a bug task for the overall process19:19
zulSpamapS: thanks19:19
uvirtbotNew bug: #900447 in krb5 (main) "Man 5 page for kdc.conf does not mention acceptable encryption types" [Undecided,New] https://launchpad.net/bugs/90044719:46
adam_gSpamapS: is precise a valid release for lp:charm/$rel/$pkg branches?19:59
SpamapSadam_g: since you asked, I'll create the precise series... tho your push will probably be alone in it. ;)20:01
SpamapSadam_g: should work now. :-D20:03
adam_gSpamapS: ah, it wont be alone for long, im sure. thanks20:04
SpamapSadam_g: I hope to have a simple way to copy oneiric -> precise when the time comes.20:04
=== bladernr_ is now known as bladernr_afk
=== bladernr_afk is now known as bladernr_
smoserjamespage, i just pushed to https://code.launchpad.net/~ubuntu-server-ec2-testing-dev/+junk/ec2-automated-tests/20:30
jamespagesmoser: looks good - thanks for letting me know!20:59
dob_Hi, i have some special question. How can i add a [OK] at the end of every line i echo?21:00
smosermyecho() { echo "$@" "[OK]"; }21:01
smosermyecho "hi mom"21:01
smoser{ echo hi mom; echo bye mom; } | sed 's,$, [OK]'21:02
smoser{ echo hi mom; echo bye mom; } | sed 's,$, [OK],'21:02
smoserecho -n "hi mom"21:02
smoserecho "[OK]"21:02
smoserecho -n "bye mom"21:02
smoserecho "[OK]"21:02
dob_smoser: is it also possible to right append the [OK]. So that it's like at starting up linux?21:04
smoseri believe if you want to do that you should look in /lib/lsb/init-functions21:07
smoserat log_daemon_msg, log_progress_msg, log_end_msg21:08
dob_smoser: thank u. I will have a look21:08
=== EvilResistance is now known as Resistance
=== bitmonk_ is now known as bitmonk
uvirtbotNew bug: #900496 in dovecot (main) "dovecot-core installation fails because "start" is used from PATH" [Undecided,New] https://launchpad.net/bugs/90049621:53
hggdhhallyn: kvm is failing to start all my VMs with 'permission denied' on the disk image. No apparmour errors reported22:15
hggdhhallyn: any suggestion on how to debug?22:15
hallynhggdh: afk atm, but check /var/lib/libvirt/ and try kvm by hand22:17
hallynsorry meant log not lib :)22:18
hggdhk22:20
uvirtbotNew bug: #900510 in apr (main) "apr armhf build hangs in the test suite on the buildd" [High,Fix released] https://launchpad.net/bugs/90051022:21
mtaylorhey guys!22:23
mtaylor14:22 <vishy> mtaylor: in openvz channel they are commenting that they think ubuntu doesn't support it anymore22:23
mtayloranybody know anything about that? and/or what i'd need to do to support openvz on an ubuntu server?22:23
zulmtaylor: patches accepted ;)22:28
SpamapSmtaylor: openVZ is a massive host kernel patch that AFAIK has been rejected upstream22:34
mtaylorSpamapS: awesome. I learn new things every day22:34
SpamapSmtaylor: its sort of the reason we're backing LXC.. lighter weight patch that is upstream for good.22:35
SpamapShistory repeats itself w/ KVM vs. Xen all over again. ;)22:35
hallynyeah incidentally, zul - i'm implicitly leaving libvirt-xen bugs for you.  poke me if that's wrong.22:49
xirisHey guys, please ignore my english but ... someone can help-me to execute one .sh when i create a user?22:53
RoAkSoAxzul: are we still importing daily checkouts from cobbler?22:56
zulRoAkSoAx: no23:16
zulhallyn: oh23:17

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!