/srv/irclogs.ubuntu.com/2012/01/06/#ubuntu-server.txt

=== sixstringsg|afk is now known as sixstringsg
=== dendrobates is now known as dendro-afk
=== sixstringsg is now known as sixstringsg|afk
uvirtbotNew bug: #912588 in ocfs2-tools (main) "mount.ocfs2 doesn't accept mount option "uhelper=udisks"" [Undecided,New] https://launchpad.net/bugs/91258800:56
=== sixstringsg|afk is now known as sixstringsg
XaevHi all :) Anyone do much work with Orchestra and Juju yet? Having a problem with what I thought would be some simple customizations to my juju.preseed file01:28
twbNo, but01:28
twb!any01:28
twb!anyone01:29
ubottuA high percentage of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll.01:29
XaevOk :) I'm editing juju.preseed to customize the initial user/pass (passwd/user-fullname, passwd/username, and passwd/user-password-crypted). The change works fine, and machines that are imaged using a profile that references juju.preseed come up with the expected initial username and password. However, "juju status" fails with "Invalid SSH key" errors.01:35
pythonirc101If  I have an ubuntu server and a domina name (mydomain.com) -- can I tell a free dns system (zoneedit for instance) -- to forward all *.mydomain.com accesses to my IP?01:35
twbpythonirc101: yes01:40
twbGet the registrar to add mydomain.com NS <zoneedit IP> to the com domain, have zoneedit serve a mydomain.com zone that includes @ IN A <your IP> and * IN A <your IP> or so01:42
=== dendro-afk is now known as dendrobates
pythonirc101twb: will this help : http://www.namecheap.com/support/knowledgebase/article.aspx/597/46/how-can-i-setup-a-catchall-wildcard-subdomain ?02:05
twbNo02:05
pythonirc101what's the difference?02:06
twbThe difference is that's some company's website about that company.02:06
pythonirc101twb: I bought the domain from them02:06
twb"Please note that you can only setup this option for the domain if it’s using our default nameservers."02:06
twbi.e. not zoneedit02:06
pythonirc101I have the option of pointing the dns to zoneedit, then to my ip. or I cud use the trick that they mention in that article02:07
pythonirc101am not sure if url redirection is the same thing as dns thou02:07
twbIt is not.02:07
=== dendrobates is now known as dendro-afk
pythonirc101twb: I'm currently using their dns, but I can easily point it to zoneedit.02:08
twbSupposing your target host is 1.2.3.4, and the domain is example.net.  URL redirection involves adding a record "example.net. IN A 5.6.7.8" and running a web server on 5.6.7.8 that responds to all requests with "go talk to 1.2.3.4"02:09
pythonirc101twb: I really don't know if I should go with zoneedit vs their own dns for what I need02:09
pythonirc101indeed02:09
twbpythonirc101: it doesn't really matter which you use02:09
pythonirc101ok, in my case, I need https://joe.mydomain.com --> 1.2.3.402:09
twbThe whole space is pretty shitty, because the components are cheap and not many people understand it.  So all the vendors try to basically trick you into thinking you need to buy extra components from them.02:10
pythonirc101also https://smith.mydomain.com --> 1.2.3.402:10
pythonirc101I still have to figure out how to decode what one used to come to my website...but I think https can do that...but first thing is to point02:10
twbe.g. the registrar will try to convince you to get your zone hosting ("name server") from them as well02:10
pythonirc101the registrar gets my $8/year for now. that is it.02:11
twbpythonirc101: IMO get https working first by IP address, then worry about zones02:11
pythonirc101ok -- @ IN A <your IP> and * IN A <your IP> or so -- what do I type in subdomain? Its right now "@"02:13
twb@ means "myself", e.g. if the zonefile is for example.net, @ expands to example.net.02:15
twb* means all subdomains (less any subdomains that are explicitly mentioned).02:15
twbit would be better to define @ and www only, rather than @ and *02:16
pythonirc101@ - NS - 7200 - ns19.zoneedit.com -- is already defined.02:16
pythonirc101so I need : * A 7200 1.2.3.4?02:16
twbThat is the NS (name server) RR.02:16
twbYou want an A (address) RR02:16
twbI strongly recommend you go read some wikipedia articles on zonefiles and DNS so you understand what all this means.02:17
pythonirc101A = IPv4 -- since mine is static ip v402:17
twbYes, A RR is for IPv4 addresses; AAAA RR is for IPv6 addresses02:18
pythonirc101from what you told me @ and * should both point to my ip, so should perhaps www ?02:19
twbI would recommend @ and www, no *02:19
pythonirc101twb: in that case, how would I route joe.example.com --> to my ip. Same with smith.example.com02:19
pythonirc101I want them both come to my server02:19
twbUnless you have hundreds of such examples, I would name them explicitly02:20
twbIn fact, it would be best to simply use CNAMEs for those back to www, if they are just http vhosts02:21
twbIf you run "dig AXFR cyber.com.au @ns1.cyber.com.au" you can see one of my domains02:21
pythonirc101twb:  I'm trying to have one webserver per user on my machine...and have 100s of users.02:21
twbpythonirc101: you can't.02:21
pythonirc101so I do need a *02:21
twbYou can't run one webserver per user unless you have one IP per user02:22
twbWhy do you want to?02:22
pythonirc101my webserver proxies each user to a backend webserver02:23
pythonirc101twb: so essentially my ubuntu box is just a proxy for 100s of webservers behind a firewall - do I make sense?02:25
twbI guess so, but IMO you should just use www.example.net/~fred/02:26
twbAnd disallow PHP so the users can't fuck up the webserver with broken scripts.02:26
pythonirc101we used to use http://www.example.net/fred02:26
pythonirc101but we have a new guy who is writing the proxy code, and he says he can do fred.example.net02:27
twbWhy do you want to?02:27
twbIt's a waste of resources02:27
pythonirc101this is what I was told: setup a wildcard dns02:28
pythonirc101and I guess you told me exactly how to setup a wildcard dns, right?02:28
twbI did.02:28
pythonirc101twb: what's the difference between url forwarding and dns setup? I can ask dns to point http://*.example.net --> IP or I can say redirect all URLs of http://*.example.net --> IP.02:31
twb13:09 <twb> Supposing your target host is 1.2.3.4, and the domain is example.net.  URL redirection involves adding a record "example.net. IN A 5.6.7.8" and running a web server on 5.6.7.8 that responds to all requests with "go talk to 1.2.3.4"02:32
twbURL redirecting should be avoided; it's less efficient than plain DNS02:32
pythonirc101I could do it with namecheap itself... :)02:37
twbAt this point, I've lost interest.02:37
pythonirc101namecheap is awesome :)02:37
twbRegistrars are not awesome.02:38
=== sixstringsg is now known as sixstringsg|away
=== xInterlopeRx is now known as reboot|brb
=== dendro-afk is now known as dendrobates
cwillu_at_worktwb, even godaddy?02:50
twbThey get to charge money for no reason other than a RIR handed them write access to TLDs02:51
pythonirc101twb: how much money does one have to pay to get that access?02:53
cwillu_at_workpythonirc101, more than you have available :p02:54
twbAFAIK you don't have to pay any money, you just have to be working on a research-grade internet at a lab in your country circa 198002:56
twbMaybe that's only the way RIRs get priviliged access; I know more about AUNIC/APNIC history than godaddy or whatever02:56
twb(I'm the master server for aunic.net, for purely historical reasons ;-)02:58
pythonirc101cwillu_at_work: you should have said: "I don't know" :)03:00
cwillu_at_workpythonirc101, what, you have enough money to buy a registrar?03:00
pythonirc101twb: Thanks for all the info today :)03:01
cwillu_at_workpythonirc101, I'm not the one who's been trying to set up hosting by programmatically modifying sshd authorized_keys files03:01
pythonirc101cwillu_at_work: indeed I was trying -- you've anything against trying?03:02
* twb blinks03:03
twbcwillu_at_work: do I even want to know?03:03
pythonirc101*smiles*03:04
cwillu_at_workpythonirc101, no, but you were also quite resistant to explaining what you were actually trying to accomplish03:04
cwillu_at_workwhich could have easily saved you the last week of exploration on this :p03:04
pythonirc101cwillu_at_work: Indeed what I do is my business, don't you think? :)03:04
twbpythonirc101: not when you do it wrong03:05
cwillu_at_workpythonirc101, and maintaining the snr in the support channels I frequent is mine :p03:05
pythonirc101* goes back to work * - no noise. :)03:06
twbEspecially, not when you do it wrong on a shared network like the internet.03:06
cwillu_at_workafter all, every general web server ever has the ability to reverse proxy requests to other locations (including other http servers only listening on loopback on the local machine)03:07
cwillu_at_workhell, twisted can do it quite easily, and would be trivial to programmatically configure the forwarding at runtime03:08
* cwillu_at_work notes that #twisted is one of the places pythonirc101 was asking about how to implement sshd with the "required" features :p03:08
cwillu_at_worktwb, I believe that will answer your question as well :)03:08
cwillu_at_work(specifically:  no, you don't really want to know :p)03:09
twbYeah I switched off when I heard "twisted"03:09
cwillu_at_workthere's nothing wrong with twisted :p03:09
pythonirc101cwillu_at_work: if you are free, I would love to get your help on a twisted program for starters? :)03:09
cwillu_at_workpythonirc101, I was last week.03:09
twbcwillu_at_work: it's not a C library? ;-P03:09
cwillu_at_work(when I was asking :p)03:09
cwillu_at_worknow I'm rather busy :p03:09
cwillu_at_worktwb, sorry?03:10
twbA python library is hard to use unless you're writing in Python03:10
twbA C library has less lock-in03:10
cwillu_at_workI'm sorry, you want a c wrapper around the standard non-blocking unix stuff?03:11
twbi.e. all else being equal, I'd rather have a library or framework implemented in C than <not C>03:11
cwillu_at_workI think you're confused03:12
pythonirc101cwillu_at_work: simple twisted question for you: How do I do a "ssh -R"  using twisted with keys in files? -- and the keys have to be generated using twisted / python as well. Can you do this in python? :)03:12
cwillu_at_workpythonirc101, you can, and I'm not in the mood to explain how03:12
pythonirc101twb: I agree. :)03:12
=== guampa|2 is now known as guampa
cwillu_at_worktwb, pointing out that two thirds of the conversation I've seen was in python related channels, I think the use of python is probably a given03:13
twbMaybe, but I'm not03:13
pythonirc101cwillu_at_work: I asked a binary question :) not for an explanation :) And I know the answer is "no", unless you prove me wrong :)03:13
cwillu_at_worklock-in doesn't even enter into it at that point03:13
=== jhelwig is now known as jhelwig_
cwillu_at_workpythonirc101, given that I've done it...03:13
pythonirc101cwillu_at_work: you've not.03:14
pythonirc101prove it? show the code ? :)03:14
cwillu_at_workyou asked a binary question, I gave an answer03:14
=== jhelwig_ is now known as jhelwig
pythonirc101cwillu_at_work: perhaps you should ignore me in the rooms that I frequent.03:15
pythonirc101cwillu_at_work: conversation with you only kills my time? -- if you can't help -- why put your nose in the conversation?03:15
=== ktk_ is now known as KurtKraut
cwillu_at_workpythonirc101, I invite you to look at twisted/conch/ssh/channel.py and forward.py03:19
pythonirc101cwillu_at_work: you think I've not03:19
pythonirc101I need a way to generate the keys cross platform in python before I can even think of doing a ssh -R -- rule number one -- no subproces or os.system03:20
pythonirc101problem number two -- ssh-rsa keys are not the same as pem or ssl keys03:20
cwillu_at_workthere are crypto libs for python; that has nothing to do with twisted though (and so asking in #twisted was somewhat amusing :p)03:20
pythonirc101cwillu_at_work: someone who writes a ssh client / server - and says, hey keys -- get it from somewhere else -- I can't take that seriously03:21
cwillu_at_workstill have no idea why you're trying to use ssh for the proxying though03:21
pythonirc101because I thought it was easy to do this from inside python -- turns out its not03:21
pythonirc101since I can do it in one line from outside python03:21
twbcwillu_at_work: is he the guy that wanted to use ssh -w in production?03:25
pythonirc101twb: For beta --> ssh -R actually.03:25
koolhead17hia ll06:37
koolhead17grrr timezone timezone !!06:42
SpamapSkoolhead17: many of us will be in UTC+1 next week06:44
koolhead17SpamapS: some come coming ahead? :P06:44
koolhead17*conference06:45
SpamapSkoolhead17: just a meeting06:46
koolhead17SpamapS: can i participate remotely !! :P06:46
SpamapSkoolhead17: its a company meeting06:49
SpamapSkoolhead17: but we'll still be in here to chat w/ everyone who isn't there. :)06:49
koolhead17SpamapS: ooh. okey!!06:49
koolhead17SpamapS: sorry for not poking you for help  with the php bug. I need to get back to it soon.06:50
SpamapSkoolhead17: I have plenty to do, just get to it when you can06:51
koolhead17SpamapS: am currently working on one juju charm and get to see it working on eucalyptus in way you suggested06:52
koolhead17i dont want to be very optimistic but i am thinking to give talk on Juju at one of the conf here, if it gets selected06:54
cloudgeekiptables -I INPUT -p tcp --syn --dport 22 -m connlimit -- connlimit  - above 2 -j REJECT06:57
cloudgeekiptables v1.4.10: You must specify "--connlimit-above"06:57
cloudgeekTry `iptables -h' or 'iptables --help' for more information.06:57
cloudgeekhow to fix ir06:57
cloudgeekit06:57
SpamapScloudgeek: you have a space between -- and connlimit06:57
SpamapS-m connlimit --connlimit-above 206:57
cloudgeekokay trying06:58
SpamapScloudgeek: also, you may want to add --reject-with tcp-reset06:58
cloudgeekspamapsS: can you give me full command line i also try to remove space between -- and also try -, connlimit  --connlimit-above 206:59
cloudgeekSpamapS:thanks it working yeah :) iptables -I INPUT -p tcp --syn --dport 22 -m connlimit --connlimit-above 2 -j REJECT07:00
cloudgeeknow it working !!07:02
SpamapScloudgeek: unless you add --reject-with tcp-reset, some firewalls will drop the ICMP errors your firewall is sending.07:09
cloudgeekSpamapS: i also need add this with the same07:10
cloudgeekiptables -I INPUT -p tcp --syn --dport 22 -m connlimit --connlimit-above 2 -j REJECT07:10
twbIs there a CLI utility that can read and write xattrs? apropos(1) and apt-cache search aren't finding anything07:13
SpamapStwb: looks like there's a python library if nothing else07:16
twbThat's kinda plan B07:16
SpamapStwb: I believe it includes a program 'xattr'07:16
SpamapStwb: python-xattr07:16
twbHmm, /me checks apt-file07:16
twbThere's also python-pyxattr, I think a separate implementation07:17
twbSpamapS: yep, you're right.  I'll try that07:17
=== dendrobates is now known as dendro-afk
twbMy goal is to make a little shell utility that increments/decrements a target file's "score", stored in xattrs.  And then to say "show me a random file weighted by score"07:19
twbArgh, xattrs aren't supported on a tmpfs?07:22
twbAnd mount -o remount has failed me: http://paste.debian.net/151194/07:26
twbOK that is way too slow07:42
twbIt takes 3 seconds to print an xattr from 10 files!07:42
twbls takes 0.07s to print dirent data, that's the kind of speed I'll need07:43
SpamapSstrace to the rescue?07:43
twbMaybe gnu find can just print it, or stat can...07:43
twbSpamapS: well the cost is probably the ramp-up time for python07:43
SpamapSyeah don't call it for each file! ;)07:43
SpamapStwb: the C interface is pretty simple.. if you need speed07:44
twbtime &>/dev/null xattr x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x  ==> real        0m0.467s07:45
twbtime &>/dev/null ls x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x     ==> real        0m0.017s07:45
twbI guess I will need to write C for this job.07:46
SpamapSsomething weird with your system07:47
SpamapSreal0m0.106s07:47
SpamapShmm actually no the same speed ratio on my system.. 0.003s for ls07:47
twbARM07:47
twbAnd an SD card07:48
SpamapSah haha07:48
SpamapSwell strace -c says 60% of the time was spent int he stat syscall07:48
SpamapSwait no.. in getdents07:49
twbI blame python until there's conclusive evidence to the contrary :P07:49
SpamapSactually it varies *wildly*07:49
SpamapSstrace -c xattr x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x07:50
SpamapStwb: pretty interesting results, but not consistent07:50
SpamapShmmmm..07:51
SpamapStwb: I think python may be searching its path for 'x'07:51
twbhaha07:51
twbI will RTFS after I finish clocking this batman game07:51
SpamapStwb: 1309 calls to 'open'07:51
twbSpamapS: more likely its searching its path for pyxattr.py or whatever07:52
twbxttr/__init__.py07:52
SpamapStwb: indeed, that seems to be it.. like you said.. python spin up time07:54
twbProbably what I should do is write xattr(1) in C and leave my main glue code as sh07:54
SpamapS1220 unique paths attempted07:54
SpamapStwb: doing 1000 files closes the gap quite a bit07:55
twbOK07:56
twbBut by then you start to hit MAX_CMDLINE_ARGS or whatever07:56
SpamapSno such thing exists anymore07:56
twbWell, I hit it...07:56
twbNot just now, but I'm pretty sure I've hit it in the near past07:57
SpamapSI just did 100000 files07:57
SpamapSactually.. hrm.. no.. still sucks with 100000 files.. ls is 0.512s, xattr is 2.902s07:58
SpamapStwb: it was solved somewhat recently.. last 2 years IIRC07:58
twbThat ratio is more acceptable tho07:58
twbHum, it just occurred to me there's no tcc on arm07:59
twbNo C "scripts"07:59
SpamapStwb: looks like xattr probably calls stat too often, and I think it might exec something one time08:02
SpamapSactually no08:03
SpamapSits just that it does stat, and listxattr, where ls can just do stat08:03
SpamapStwb: I don't know that rewriting in C is going to save you much08:06
SpamapStwb: good luck08:07
* SpamapS passes out08:07
koolhead17hi all08:21
jamespagemorning all09:00
koolhead17smoser: hello there09:20
koolhead17hey jamespage09:20
jamespagemorning koolhead17 - how are you today?09:20
koolhead17jamespage: doing great thanks!!09:21
Davieyjamespage: How is, [james-page] Investigate upstream co-operation from Hortonworks/Cloudera to ensure ongoing collaboration going forward: INPROGRESS10:06
Daviey?10:06
DavieySpamapS: when you see this, what is servercloud-p-juju-mir blocked on?10:07
jamespageDaviey: slowly - we might get to a point where that entire spec if moot and can be canned10:07
jamespageDaviey: due to discuss next week at the sprint10:07
=== Yarph-ar-ti is now known as beerbro
Davieyjamespage: thanks!10:07
=== rickspencer3_ is now known as rickspencer3
Davieyrbasak: How is https://blueprints.launchpad.net/ubuntu/+spec/servercloud-p-arm-service-orchestration looking?10:12
rbasakDaviey: I'm looking at it as we speak. It's still pretty vague for me tbh10:12
Davieyrbasak: what part?10:13
Davieyjdstrand: How is [jdstrand] rewrite aa-complain and aa-enable/etc. in python and make sure they are installed in base installs: TODO10:13
Davieylynxman: [lynxman] write puppet external node classifier for juju status -> puppet: TODO ?10:14
rbasakDaviey: most of the WIs. Eg. juju with LXC seems hardcoded for single machine operation, so the 1xmachine LXC idea would need to be written AFAICT. I should sync with juju people next week on this really10:15
Davieyrbasak: Good thinking, there has been work in this area.  I think SpamapS would be the best PoC for that.10:17
SockPantshi all10:19
SockPantsi'm having some basic cli trouble10:19
SockPantsi'm trying to use grep to search text files for the string: $user['id']10:19
SockPantsso i used grep -R '$user['\''id'\'']' .10:19
SockPantsbut that still doesn't work10:19
SockPantshow can I do this?10:19
SockPantscd #ubuntu10:26
=== airtonix is now known as smee
=== koolhead11 is now known as koolhead17
lynxmanmorning o/10:36
lynxmanDaviey: thought that one was on SpamapS, can take care of it, its todo indeed :)10:37
Davieylynxman: right, i just saw your name on it :)10:45
lynxmanDaviey: my name is on very compromising things ;) hehe10:54
cariboulynxman: is it possible to run juju on an Openstack cloud or is it still limited to EC210:55
caribou?10:55
lynxmancaribou: afaik it's possible, you just need to add some parameters to enviroment.yaml10:55
lynxmancaribou: gimme some mins and I'll give them to you ;)10:56
cariboulynxman: sure, I'm just playing around with it & the FAQ says that EC2 is the only way right now10:56
lynxmancaribou: officially that's true10:58
lynxmancaribou: since the openstack ec2 api is lacking some commands so it's not production ready10:58
cariboulynxman: ah, ok10:58
Davieysad, http://is.gd/zm3Vpo11:08
koolhead17lynxman: i failed to get it working in my case :( because of my internal infra11:10
uvirtbotNew bug: #912701 in nova "Openstack Compute with Xen in Ubuntu 11.10 fails to load due to Domain-0 being considered an instance" [Undecided,New] https://launchpad.net/bugs/91270111:11
koolhead17Daviey: sir!!11:12
lynxmancaribou: http://pastebin.ubuntu.com/794738/11:14
lynxmancaribou: remove the "branch" values as well since it's already in trunk :)11:15
cariboulynxman: thanks !11:15
cariboulynxman: what should be used for the ec2-key-name ,11:28
lynxmancaribou: you can either put the key name of a key you've created in openstack or just remove hte option and juju will create a new one11:35
cariboulynxman: ok11:35
jozehello11:56
uvirtbotNew bug: #912716 in apache2 (main) "[improvement] allow graceful-stop via the init.d script" [Undecided,New] https://launchpad.net/bugs/91271611:56
jozecould you please tell me what i must do to have secure openssh connection?11:56
patdk-laprun ssh12:01
patdk-laponly accept connections to keys that you have verified12:02
zulmorning13:01
lynxmanzul: morningtons13:11
caribouquick and easy question : Is Ubuntu server using Ubiquity as its installer and, if not, what's the name of Server's installer ?13:25
caribouis it a different flavor of Ubiquity ?13:25
jdstrandDaviey: re rewrite> you mean, what is the status of it?13:27
=== smee is now known as airtonix
pmatuliscaribou: ubuntu-installer13:36
caribouthanks pmatulis13:36
pmatuliscaribou: sometimes called debian-installer13:37
koolhead17pmatulis: :P13:40
=== bladernr_afk is now known as bladernr_
Davieyjdstrand: right!14:30
Davieyjdstrand: just going through the WI's and checking in.14:30
xlinuxuke47*ikp=xO97q14:33
xlinuxpower mag14:33
xlinuxtextdb.allow_full_path14:35
jdstrandDaviey: well, *ahem* since it only recently showed up on my list and no one talked to me about it, I'm not sure yet. I hope to take a crack at it next week14:35
xlinux<537 |)4748453 6( 57473/V\3/V7> ::= 537 |)4748453 6( <|_|/V5!6/V3|) !/V7363|2 1!73|241>14:36
jdstrandDaviey: I hope that didn't come off as *too* snarky. some snarky, yes, too snarky, no ;)14:36
jdstrandDaviey: let's go with 'very-slight snarky'14:37
xlinux     if (isr != null) isr.close();             } catch (IOException ioe) {                 // TODO: Throw appropriate exception14:37
sorenxlinux: Stop it.14:37
* xlinux prev.svg14:37
sorenDaviey, zul: Are there any plans from your side to adopt the OpenStack packaging from Debian?14:37
xlinux* *DSV_TARGET_FILE = ${java.io.tmpdir}/test-roundtrip-${user.name}.dsv * *DSV_TARGET_TABLE = t CREATE TABLE t (i INT, a INT, d DATE);14:38
sorenDaviey, zul: If not wholesale, then basing your packaging off of them?14:38
Davieysoren: it's up in the air :/14:38
Davieytwo way communication is currenty poor.14:38
Davieyjdstrand: How did it get on your list?14:38
jdstrandDaviey: that is the source of the snarkiness. I don't know. someone just gave it to me without discussing it14:39
jdstrandwell14:39
Davieyjdstrand: right, i'm going through my mail log now.14:39
jdstrandwe might have discussed it at UDS14:39
Davieyahhhh!14:39
zulsoren: ive cherry picked some stuff from them14:39
Davieyjdstrand: is this backtracking the snark? :)14:39
jdstrandDaviey: but it wasn't assigned then, and no one asked/reminded me before assigning it to me. ie, I didn't say at UDS that I would do that per se. just that someone should/could14:40
sorenzul: That's a "no", is it?14:40
jdstrandDaviey: re backtracking> not in the least :P I am justifying the slightliness of it :)14:40
zulsoren: still up in the air though14:41
jdstrandDaviey: it isn't a big deal. I was just surprised to see new work items on my list is all14:41
Davieyjdstrand: looks like it's been there since at least 10th Nov14:42
jdstrandas assigned to me?14:42
Davieyjdstrand: right14:42
jdstrandI am quite surprised by that but not saying it is outside the realm of possibility14:43
jdstrandespecially since I was doing various reports and things14:43
jdstrandoh well14:43
Davieyjdstrand: https://lists.ubuntu.com/archives/ubuntu-server-bugs/2011-November/066450.html14:43
jdstrandDaviey: perhaps the bp was formatted in a way that it didn't show up properly. *shrug*14:44
Davieyjdstrand: it's possible someone fudged the mail logs? :)14:44
Daviey</snarky> :P14:44
jdstrandI don't know. maybe it is the new year. I wiped my slate a bit too clean14:44
jdstrandmaybe the bp wasn't approved or something14:45
* jdstrand seriously doesn't remember seeing it in the work items tracker14:45
jdstrandand I look at that more frequently than I care to admit14:46
Davieyjdstrand: it was approved, https://lists.ubuntu.com/archives/ubuntu-server-bugs/2011-November/067295.html :D14:46
uvirtbotNew bug: #910296 in php5 (main) "Please backport the upstream patch to prevent attacks based on hash collisions" [Medium,Confirmed] https://launchpad.net/bugs/91029614:46
Davieyjdstrand: sorry, i shouldn't be enjoying combating snarkyness so much :D14:46
raubvogelWhen you install ubuntu it asks for an account with sudo (and other) rights. For some reason, when I am running synaptic or whatever gui-based program that needs to elevate rights, that is the account that is asked for (as opposite to the ldap account I am logged into as even though it has sudo rights). Is there a way to change that?15:01
=== dendro-afk is now known as dendrobates
pmatulisraubvogel: this behaviour is seen only for gui-based programs?15:38
=== sixstringsg|away is now known as sixstringsg
=== ksx4system is now known as syfkurwa
raubvogelpmatulis: yeah. And only a few15:52
=== syfkurwa is now known as ksx4system
rbasakhallyn: ok, so lxc-create on armel (panda) fails. I get http://paste.ubuntu.com/795021/, running "lxc-create -n test_container -t ubuntu -f lxc.conf -- -r oneiric". debootstrap on its own works fine. Looks like an apt-get update is failing, maybe because sources.list is wrong? Only lxc-create helpfully wipes what it was doing after the error so I haven't got the sources.list out of it yet16:51
hallynrbasak: you're on precise, right?16:52
hallynrbasak: the work is being done by /usr/lib/lxc/templates/lxc-ubuntu.16:52
rbasakhallyn: yes, but juju is hardcoded to oneiric inside the container so that's what I'm testing16:53
rbasakhallyn: thanks, I'll dig around in there16:53
hallynrbasak: is your mirror bad?  the archive urls that are failing *should* be fine, right?16:53
rbasakhallyn: I think it should  be s/archive/ports/16:54
hallynrbasak: are you taking a pandaboard with you next week?16:54
rbasakyes16:54
hallynrbasak: ports.ubuntu.com?  that would be too bad...16:55
hallyni guess we'll need to special-case line 112 in lxc-ubuntu for armel16:55
rbasakhallyn: http://paste.ubuntu.com/795030/16:56
hallynrbasak: glad you're trying it out then!  I swear this has worked for me on the arm netbook up to UDS-p...16:56
rbasakI'm sure I've seen some special casing of that somewhere else16:57
hallynstgraber: ^16:57
hallyndrat.  so i guess powerpc will end up being the same then.16:58
hallynone day16:58
rbasakaha16:59
rbasak/usr/share/debootstrap/scripts/oneiric for example has special casing at the top for this16:59
stgraberhallyn: yeah, I think debootstrap is clever enough but looking at these it looks like your changes for updates and security don't use the same logic17:01
stgraberso it indeed used to work until the change to make sure our containers are also using updates and security17:02
hallynall right i'm sure there's a right way to do that (rather than hack it in with a case stmt)17:02
stgraberamd64 and i386 go to archive.ubuntu.com/ubuntu17:03
stgraberthe rest goes to ports.ubuntu.com/ubuntu-ports17:03
hallynman i don't know what is going on this week, but i'm typing pages ahead of the echo back from server, it reminds me of using the slow VAX decades ago17:04
hallynstgraber: is there a tool we can use, feed it $arch and get back the right archive url?17:04
stgraberhallyn: I think python-apt has that logic in a queriable way, but we probably don't want to end up writting a python script just for that :)17:05
rbasakbug 91284217:05
uvirtbotLaunchpad bug 912842 in lxc "lxc-create fails on armel" [Medium,Triaged] https://launchpad.net/bugs/91284217:05
hallynwell, is that logic likely to change sometime?17:06
stgraberhallyn: I think it's going to be much easier to just add the extra if statement to the template17:07
stgraberassuming i386 and amd64 are on archive and the rest on ports works for all current releases17:07
stgrabermaybe one day armhf will be moved to archive.u.c but for now it's not possible due to space reason (as in, we'd have to ask all our mirrors to buy more disks)17:07
hallynstgraber: ok17:08
hallynrbasak: thanks17:08
rbasakhallyn: np. I'm happy to fix it although I won't get it done today17:09
hallynrbasak: that'd be great.  thanks.17:10
SpamapSDaviey: servercloud-p-juju-mir is blocked on somebody from txaws upstream ACK'ing the patches17:13
uvirtbotNew bug: #912842 in lxc (main) "lxc-create fails on armel" [Medium,Triaged] https://launchpad.net/bugs/91284217:16
SpamapSDaviey: actually all my patches were merged upstream, so I can upload and move forward with juju's MIR, w00t. :)17:32
DavieySpamapS: \o/17:37
=== jono_ is now known as jono
* SpamapS would like to thank the academy, and Thomas Herve. :)17:38
DavieyI do feel i can take most of the credit fwiw.17:41
uvirtbotNew bug: #833073 in gdm (universe) "oneiric gdm picker list contains system user, rabbitmq" [Undecided,Confirmed] https://launchpad.net/bugs/83307317:51
=== sixstringsg is now known as sixstringsg|away
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
andrew667test20:26
RoyKone two20:30
genii-around!test20:33
ubottuTesting... Testing... 1. 2.. 3... ( by the way, remember that you can use #test )20:33
patdk-wkdoesn't let me know if this channel is broken though :)20:33
andrew667that's OK20:34
=== sixstringsg|away is now known as sixstringsg
=== alaing is now known as funkymonk
pauliaxhello, i need to instakk , but i can't becouse ubuntu disk 11.10 don't recognizes gigabyte p35-ds3 RAID-0 hard diskcs, can someone help me?21:09
RoyKdoes it see the drives?21:10
RoyKpauliax: if it sees the drives and not the raid-0 logical volume, it means you don't have a real raid controller, just a controller with a fancy windows driver to do the raid stuff21:11
genii-aroundProbably jmicron chipset21:11
RoyKprobably no reason whatsoever to dig further until pauliax tells us what really happens :þ21:12
grdnwslls -alh21:15
grdnwsl>_<21:15
pauliaxi reformated drives, configured RAID-0 on gigabyte p35-ds3, when installing no hdd or partition - i think raid driver is missing21:15
andrew667use mdadm, because you have fake raid21:17
pauliaxwhat is fake raid, raid0?21:20
andolpauliax: http://en.wikipedia.org/wiki/RAID#Firmware.2Fdriver-based_RAID21:21
andrew667distro?21:21
andrew667"fake" raid requires special software during the installation21:22
pauliaxi dont need soft raid - it will be bad21:22
pauliaxi thats why i dont need it21:23
pauliaxi have two operating systems by now, and i need four, dont ask me why :)21:24
andrew667soft raid is not as bad as that. Month ago my 2 old dell power edge 1850 died (faulty RAM in hardware controller - at the first server (no data loss)! and at the (controller faild with partial loss of data))21:25
andrew667and at the second server (controller faild with partial loss of data))21:26
KillMeNowafternoon folks, anyone have a good page for configuring apache on ubuntu to use UCC SSL certs?21:57
KillMeNowis it just like replacing a regular ssl cert in apache?21:57
=== sixstringsg is now known as ayysir-capt_obvi
=== ayysir-capt_obvi is now known as sixstringsg
eagles0513875hey guys is it possible to get a net install version of ubuntu server22:45
adam_geagles0513875: you can grab the mini.iso from the netboot directory in, for example, http://archive.ubuntu.com/ubuntu/ubuntu/dists/precise/main/installer-i386/current/images/22:51
Deathvalley122is there a 64bit one?22:52
eagles0513875adam_g: thats for 12.0422:52
eagles0513875we need something that has already been released that has the cobbler stuff so for now 11.04 will upgrade once 12.04 becomes LTS and released22:53
eagles0513875Deathvalley122: check that out and try that iso instead22:53
ikoniaeagles0513875: cobbler is available in 11.04 I believe22:54
ikoniait's been around for quite a while22:54
eagles0513875ikonia: its in 11.1022:54
eagles0513875cobbler with orchestra is what i mean22:54
eagles0513875Deathvalley122: want to explain to ikonia the issue we are having trying to get things installed on this remote server22:55
Deathvalley122it's taking ages to erase the lvm data from Debian lvm22:55
ikoniahttp://archive.ubuntu.com/ubuntu/ubuntu/dists/oneiric/main/installer-i386/current/images/netboot/22:55
ikoniause that then22:55
eagles0513875ok22:56
adam_geagles0513875: http://archive.ubuntu.com/ubuntu/ubuntu/dists/natty/main/installer-i386/current/images/22:56
eagles0513875thanks adam_g22:56
adam_geagles0513875: you should be able to import the precise/oneiric/whatever ISO into cobbler22:57
eagles0513875im trying to install this on the server we dont have anything installed yet22:57
ikoniajust net boot the iso then22:57
adam_geagles0513875: orchestra isn't in natty (i dont believe)22:57
xInterlopeRx|DT!help22:57
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience22:57
Deathvalley122whats natty got to do with orchestra22:58
Deathvalley122O_o22:58
eagles0513875ikonia: ok22:58
eagles0513875Deathvalley122: cobbler is in natty just not the whole orchestra stuff22:58
adam_geagles0513875: you'll want oneiric, or if you're just testing i'd advise precise. lots of new stuff going on around orchestra right now, and the precise version is more usable/complete22:58
Deathvalley122I think there is a serious issue with erasing lvm data from another distro22:58
eagles0513875the problem for now is we need something for production and 12.04 isnt ready for a live environment yet22:58
Deathvalley122for ubuntu22:58
ikoniatrouble is 12.04 isn't22:58
ikoniaeagles0513875: then just wait22:59
eagles0513875we are trying to wipe the stuff using 11.0422:59
eagles051387511.10 i mean22:59
xInterlopeRx|DTi want to set up a remotely controlled server at my father in laws house for android building. what are your suggestions?22:59
ikonia"wipe the stuff" ???22:59
Deathvalley122yes22:59
ikoniaeagles0513875: what are you looking to do22:59
Deathvalley122the server has Debian on it with lvm23:00
Deathvalley122we are erasing the lvm data from the debian one23:00
eagles0513875ikonia: reformatting the drive for a clean installation as the DC tested with debian works fine and now erasing one lvm partition is going really slowly23:00
Deathvalley122but23:00
Deathvalley122its taking ages to do that23:00
ikoniaor do you both have the same issue ?23:00
ikoniaare you and Deathvalley122 the same person ?23:00
Deathvalley122no23:01
ikonia(confused that you both seem to be having the same issue)23:01
eagles0513875im working for Deathvalley122 ikonia23:01
Deathvalley122cause we both are on kvm right now23:01
eagles0513875we are using kvm to connect to the server during install23:01
ikoniahow are you trying to "wipe" the data23:01
eagles0513875using manual partitioning that is part of the installer23:02
ikoniaok - so are you deleting the partition ?23:02
eagles0513875correct and it asks to confirm you want to wipe and erase the partition and that is whats taking ages23:02
ikoniais lvm started ?23:02
ikonia(eg: are volume groups active)23:03
Deathvalley122no23:03
Deathvalley122it is not23:03
eagles0513875Deathvalley122: how sure are you though23:03
Deathvalley122cause we aren't in Debian23:03
Deathvalley122the drive isn't even active right now23:03
Deathvalley122only the virtual drive23:03
eagles0513875virtual drive which has the iso mounted23:04
Deathvalley122correct23:04
ikoniahow big is the partition ?23:04
Deathvalley122I have no freaking clue23:04
Deathvalley122I didn't check that23:04
ikoniaroughly23:04
ikoniayou must have an idea23:05
Deathvalley122just a guess23:05
Deathvalley12220023:05
ikonia200GB / MB ?23:05
Deathvalley122GB23:05
ikoniahow long has it been running23:05
Deathvalley122about 2 hours23:05
ikoniais this a physical machine or a virtual guest23:05
ikoniaok, so I suspect it's probably hung23:05
eagles0513875physical machine23:06
Deathvalley122physical machine the host machine23:06
=== dendrobates is now known as dendro-afk
eagles0513875the DC already replaced the motherboard the drive and sata cables23:06
ikoniawhy ?23:06
eagles0513875cuz they found problems with the hardware not sure exactly what23:06
eagles0513875with the motherboard they said sata controller23:06
ikoniaok - boot a CD - run fdisk and remove the partition23:07
eagles0513875hard disk was I/O errors23:07
eagles0513875ok23:07
ikoniaif they have changed the drive - why does it have data on it also ?23:08
ikoniasurly if it was a new drive, there would be no data on it23:08
Deathvalley122no23:09
Deathvalley122they put data on it as a test23:09
Deathvalley122to make sure23:09
Deathvalley122there isn't anymore issues23:09
Deathvalley122with the hardware23:09
ikonianot sure I'd agree with that, but lets see what fdisk does23:10
Psi-JackHmm23:21
Psi-JackAnyone know how I can shut down excessive non-needed getty's?23:21
Psi-JackThey're upstart managed, so I'm not so sure how to stop them and keep them from running.23:21
ikoniakill them ?23:21
Psi-JackAhh, duh me..23:22
ikoniakill -1923:22
Psi-Jacktty1 - tty623:22
Psi-JackI just stopped 3-6 ;)23:22
Psi-Jackikonia: Upstart would just repawn then. :p23:22
ikoniaahhhh23:22
ikoniaha ha, nice one23:22
ikoniaPsi-Jack: not sure it would with 19, not tried it23:23
Psi-JackIt would.23:23
ikoniaI'll take your word on that23:23
Psi-Jackupstart itself has to know to stop it, else it will keep bringing it back up23:23
ikoniatotally, I thought upstart monitored for process exit state though, so 19 it would ignore, but I've not looked into it in enough detail23:23
Psi-JackTrying to figure out why our db server's chewing through memory like no tomorrow, when it's maximum threshold limit is 5.5GB out of 8GB.23:24
Psi-JackAlready dug through 755mb swap, out of 1gb total.23:24
ikoniawhoa23:24
ikoniaany signs of what's using it ?23:25
Psi-JackNope.23:25
ikoniatop show any big footprints ?23:25
ikonianot active, but something that maybe leaking a little23:25
Psi-JackJust MySQL, which has a VIRT of 4GB, and RES of 2.3GB23:26
Psi-JackLots of those. ;)23:26
ikoniawhat's your mysql memory limits set to in my.cnf23:27
ikonianot exceeding those is it ?23:27
Psi-JackNope. The MySQL tuning-primer script actually says, maximum utilization of memory is topped off at 5.5GB.23:27
Psi-JackAnd it's not even hit that yet.23:27
Psi-JackCPU usage itself is almost nil23:27
eagles0513875are you running a web server or anything like that23:27
ikoniaok, so at least you know that's good and no crazy process is found an obscure leak23:28
ikoniaPsi-Jack: watched vmstat for a while with say 5 second interval,23:28
Psi-JackNope. This is a dedicated MysQL server.23:28
eagles0513875ok23:28
ikoniais the usage growing, high scan rate, anything like that ?23:28
=== bladernr_ is now known as bladernr_afk
Psi-Jackswap si/so are fluctuating.23:32
Psi-Jackcpu usage is minimal.23:32
ikonianot a massive surprise if you are eating ram that si/so are moving around a bit23:33
Psi-Jackmemory usage is constant. I have this server under Zabbix monitoring, too,.23:33
ikoniawhat abour sr23:33
Psi-Jacksr?23:33
ikoniasorry, so it the equiv in vm23:34
ikoniathat is very odd then that nothing seems to be actually eating it, but it's in use23:34
ikoniaand if you're swapping it's struggling, but why ?23:35
ikoniacpu is low so there is probably no wait time lock23:35
eagles0513875ikonia: could it be vcpu allocation23:35
ikoniawhat ?23:35
eagles0513875not enough cpu time has been allocated to the vm23:35
ikoniahe's not running a vm23:35
ikoniaor not said he is23:35
eagles0513875ikonia:  above you said sorry, so it the equiv in vm?23:35
ikoniaeagles0513875: yes, vmstat23:36
eagles0513875ahh my b ad23:36
ikonia"so" is the equiv in "vmstat"23:36
Psi-JackActually.23:36
Psi-JackIt IS a VM.23:36
Psi-JackUnder VMWare.23:36
eagles0513875ha23:36
eagles0513875Psi-Jack:  how many vcpus does this vm have23:36
Psi-JackBu tno.23:36
ikoniawhat's the host doing ?23:36
ikonia(or host showing)23:36
Psi-Jackit has 4 VCPUs, and they're all pretty much idling.23:36
ikoniathe cpu usage is low, so that is not going to be an issue23:37
Psi-Jackikonia: It's a VMWare vSphere server, and it's on a very high end system. ;)23:37
eagles0513875Psi-Jack: are you running vmware esxi or another piece of vmware kit23:37
Psi-Jackeagles0513875: We're running the full vSphere server.23:37
eagles0513875nice23:37
eagles0513875ikonia: could the be a bug not with the os on the vm but with vsphere?23:38
Psi-JackOn AMD 48-core Opteron servers with 256 GB RAM each. ;)23:38
eagles0513875god all mighty lol23:38
Psi-JackHooked up to an EMC SAN over FC 323:38
ikoniaeagles0513875: you're just picking random things for no reason23:38
Psi-JackWith FC Disks in the SAN.23:38
ikoniaeagles0513875: vsphere is enterprise class and tested, I'd have confidence that basics like this are covered23:38
ikoniaPsi-Jack: is the box actually doing "anything" at the moment ?23:39
ikoniaor is it just a typical day, typical usage etc23:39
Psi-JackThe Host, or the VM itself?23:39
ikoniavm23:39
Psi-JackVery little. Serving 57 clients that're 90% idle.23:39
Psi-JackAnd zabbix monitors which probe every 30s to 120s23:40
Psi-JackTo pick up information about the system and db. ;)23:40
ikoniasorry pretty solid standard style setup23:40
ikoniait's odd that it's swapping when the memory isn't at threshold23:40
Psi-JackYeah.23:41
Psi-JackHere's the wierd part.23:41
eagles0513875ikonia: i have noticed the same thing with my linodes they do a bit of swapping as well even when not fully using the vcpus23:41
Psi-Jack             total       used       free     shared    buffers     cached23:41
Psi-JackMem:       8196800    8139208      57592          0       4172      2086023:41
Psi-Jack-/+ buffers/cache:    8114176      8262423:41
Psi-JackSwap:       905208     768004     13720423:41
ikoniaeagles0513875: that's not uncommon though to swap out idle stuff23:41
Psi-JackCache is EXTREMELY low, memory usage is EXTREMELY high.23:42
ikoniaPsi-Jack: yeah, that's not good23:42
ikoniaPsi-Jack: I have one terribly random thing I can think of that was not the same but had a similar situation23:42
Psi-JackAnything short of restarting mysqld? ;)23:43
ikoniaPsi-Jack: some large mysql 5 inodb tables had a corrupted index in ram, and each write the db was using the ram to create a temporary "at that moment" index, and had to keep getting flushed and re-written every $X writes23:43
RoyKPsi-Jack: pastebin ps axfv23:44
ikoniabasically constantly re-creating an idex on the fly, it was low load on the machine, but kept the ram swapping out/in as it updated the index23:44
RoyKPsi-Jack: seems to me you need more swap, then more RAM23:44
Psi-JackRoyK: http://pastebin.com/hABWNnqE23:45
Psi-JackWe actually just upped the RAM this morning at 3am from 4GB to 8Gbn23:45
RoyKPsi-Jack: 24837 ?        Ssl  107:20  24834  8893 4315578 2439240 29.7 /usr/sbin/mysqld23:45
RoyKbut then that only eats 4,3GB23:46
Psi-JackExactly.23:46
Psi-JackWhich matches exactly what the tuner-primer script tells me MySQL is consuming, too.23:46
ikoniawhich ties in clean with the limits in your my.cnf23:46
Psi-JackYep.23:47
Psi-JackI tuned it low, so I could tune it up.23:47
* RoyK thinks postgresql is a *BIT* better than mysql for 99% of use cases23:48
Psi-JackI agree. :)23:48
Psi-Jackbut, still.23:48
Psi-JackmariaDB will definitely be better. I'm waiting on that one. ;)23:48
Psi-JackGonna try out MariaDB, in fact, on my home server farm, replacing MySQL with MariaDB 5.2, unless 5.3 comes out real soon. ;)23:48
ikoniathat won't fix your current issues though23:49
Psi-JackNope. ;)23:49
ikonialooking at maria on a centos 6 setup at the moment for similar reasons23:49
Psi-Jackthis isn't my home system either, this is corporate. ;)23:50
Psi-JackWell, looks like there's updates to the kernel, mysql, so, I'm going to push that out tonight.23:50
Psi-JackMay very well be a kernel level bug.23:52
ikoniawell, you'll need a reboot23:52
Psi-JackThat, I know. ;)23:52
ikoniaalmost a shame to boot it without a better understanding23:52
Psi-JackFor now, I'm pulling the packages in, and might restart the mysqld real quick since it's pretty fast.23:52
Psi-JackOne good thing I do like about Ubuntu. It also boots like super fast. Great for a server. :)23:53
Psi-JackThis is 10.04 too BTW. :)23:53
Psi-JackWow. Swap just dropped a crapload doing all these updates. ;)23:54
ikoniathat's so annoyingly wrong23:54
Psi-JackAnd now, Swap and Free RAM have crossed over each other.23:54
Psi-JackAnd now, mysql is probably stopping from the update and swap is relieving itself RAPIDLY.23:55
ikonialets see if it goes back up23:56
Psi-JackIt did.23:56
Psi-JackCourse mysql is still stopped, grrr!23:56

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!