/srv/irclogs.ubuntu.com/2012/01/16/#ubuntu-server.txt

=== CreativeEmbassy is now known as Judy
=== Judy is now known as CreativeEmbassy
samba35this is very stange problem i come across i have a utm /firewall as a gateway (another system ) ,i have configure web server ,ssh server and ftp server on that but i am only able to acess ftp server ,not ssh and web server but i change hardisk with oracle linux i am able to access all 3 thing (web ,ssh,ftp )04:28
thesheff17running iptables or ufw04:33
thesheff17use nmap to scan the machine04:34
samba35check with that also04:35
samba35ufw uninstalled04:35
samba35this is very stange problem i come across i have a utm /firewall as a gateway (another system ) ,i have configure web server ,ssh server and ftp server on that but i am only able to acess ftp server ,not ssh and web server but i change hardisk with oracle linux i am able to access all 3 thing (web ,ssh,ftp )04:36
samba35sorry04:36
thesheff17check iptables: sudo iptables -L04:40
samba35yes ,check that also04:42
samba35disabled04:43
samba35and i even change the ports also of web and ssh04:43
thesheff17try to put ssh on the ftp port and see if it works04:44
samba35ok04:44
thesheff17it still sounds like some firewall rules between the box you are trying to connect to and the client box04:44
thesheff17don't forget to shutdown ftp service before binding ssh to the ftp port04:45
samba35yes04:45
thesheff17also make sure the serivces are starting correctly and listening: sudo netstat --tcp --udp --listening --program --numeric-ports | grep sshd04:49
samba35no its not working04:49
thesheff17sounds like a service issue if ftp worked and ssh didn't on the same port04:50
samba35never face this kind of problem04:51
samba35and hight is if i change hardisk to oracle linux all things works fine04:51
thesheff17I would put ssh back to port 22 and run sudo netstat --tcp --udp --listening --program --numeric-ports | grep sshd04:53
samba35yes check04:54
samba35i even chage ssh port 512304:54
thesheff17I would use nmap to see if it is listening....I bet from the remote machine it doesn't find ssh running04:56
thesheff17and something is blocking it in between04:56
samba35www.utmxtm.com04:56
samba35can yo pls try04:56
samba35any result04:57
thesheff17its running now04:57
thesheff17I wonder if your ISP just blocks certain things.04:58
samba35rdp and vnc not configure04:58
samba35tryed ?04:58
samba35no i dont think04:59
samba35just change hard disk04:59
samba35it all work with oracle linux04:59
thesheff17do you have the the default route ?05:00
thesheff17correct05:00
samba35yes i am hopeing that or metric is wrong but dont know how to check that05:00
thesheff17sudo route05:01
thesheff17the default value will point at your router usually like mine is 192.168.1.105:01
samba35default route is my utm box05:01
samba35yes that is route05:01
thesheff17nmap is slow...it will be done in a second05:02
twbthesheff17: nmap -F05:02
thesheff17thx05:02
samba35thx ?05:02
twb!thx05:03
ubottuYou're welcome! But keep in mind I'm just a bot ;-)05:03
thesheff17lol05:03
thesheff17says ftp and https is open nothing else05:03
twbthesheff17: putting SSH on a nonstandard port will affect QoS attempts by your ISP et al.05:03
thesheff17port 21 and 44305:03
twbIf you are concerned with brute-force attacks an IPS would IMO be better than relying on obscurity05:04
thesheff17this works05:04
thesheff17https://www.utmxtm.com05:04
twbThe page is empty though05:05
thesheff17what is this user portal? is that what you are using?05:05
samba35hmm that is my utm portal05:05
twbhttp://cyber.com.au/~twb/doc/iptab.ips05:06
thesheff17if https://www.utmxtm.com/ is not your linux box you have to do port forwarding.....05:07
samba35can you try now https://www.utmxtm.com05:07
samba35yes i did that05:08
samba35utm box has DNAT rules for all servicess05:08
samba35can you try now https://www.utmxtm.com05:08
twbsamba35: just get a second box and test it yourself05:09
thesheff17yea you have bad port forwarding or firewalls rules.05:09
twbProbably just triangle routing05:10
samba35ok05:10
samba35all things are same just change hard disk to oracle linux all works !05:11
thesheff17linux on oracle and ubuntu are almost identical05:11
samba35dhcp assing ip to linux05:11
thesheff17dhcp should never be used for a server05:11
samba35ic05:12
samba35i dont know that05:12
twbthesheff17: I disagree.05:12
samba35thank i will try to put staic ip and chaeck yes we have that options open05:12
twbUsing fixed DHCP allocations to non-core servers allows them to be configured on one end, rather than both ends.05:12
twbIt *does* mean the LAN they're on must be ultimately trusted, of course.05:13
thesheff17well it sounds like a firewall iptables port forwarding mess....when I hit his portal I knew that wasn't his ubuntu box....him setting up fixed DHCP sounds like another layer of complexity :)05:15
twbGranted05:16
twbIt is certainly useful to switch to manual configuration during testing.05:16
pehdendoes freenode allow dcc06:53
twbDunno, ask #freenode06:55
onreirc network does not need to support it06:55
twbonre: it's just CTCP06:55
twbonre: right?06:55
onreit works so that clients send CTCP-style messages to each other and initiate a tcp connection between each other06:55
onreyes06:55
onrevia CTCP they communicate IP addresses and port numbers06:56
VivekHi08:28
=== himcesjf1 is now known as himcesjf
VivekI am using Ubuntu orchestra and I would like to get a pointer to configuring rsyslog.08:31
VivekI am referring this URL http://wiki.rsyslog.com/index.php/Very_simple_config_--_starting_point_for_modifications08:31
VivekWill this be ok ?08:31
VivekI am using  Ubuntu Oneiric and basically want to log remotely to the Ubuntu Orchestration server from a node or nodes.08:31
VivekThanks in advance.08:32
VivekThe rsyslog is not configured by default in orchestra.08:32
SpamapSVivek: did you install 'ubuntu-orchestra-logging-server' ?08:37
SpamapSVivek: orchestra doesn't do much of the configuration for you.. its mostly just a collection of packages... to configure the resulting servers you need something like juju or puppet.08:39
AlecTaylorOpen-source or closed-source for SaaS? - http://programmers.stackexchange.com/q/13034108:39
SpamapSAlecTaylor: great question.. answered and +1'd08:49
eagles0513875_hey guys anyone here workign with virt-manager im having some really annoying issues connecting to a remote machine with it08:49
eagles0513875_btw morning AlecTaylor Vivek and SpamapS08:49
AlecTaylorThanks SpamapS08:50
SpamapSif you can call 01:00 morning. :)08:51
AlecTaylorIf you call 7:51PM morning :P08:52
VivekSpamapS: yES08:52
VivekSpamapS: I am well aware of the fact that it is a collection of packages with not centralized configuration.08:53
Vivekeagles0513875_: Hello.08:55
SpamapSVivek: in that case you really just need to point other machines' rsyslogd at the logging server, and make sure the logging server is configured to accept remote messages.08:55
VivekSpamapS: Do you have any documentation I can refer to ?08:55
yann__hello... just had to reboot a server this morning (10.10) http://waste.mandragor.org/linux-memleak.png  if anyone got a clue for next time it'be much appreciated :(08:59
SpamapSVivek: just the rsyslogd man pages09:09
SpamapSyann__: what makes you think there is a memory leak?09:10
yann__SpamapS, I have no software running, killed all running software and restarted what I could09:11
yann__and without any software running, using 5GB+ ram09:11
AlecTaylor!paste09:11
ubottuFor posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.09:11
_godhelpmehi09:12
Vivekok09:13
VivekSpamapS: Thanks09:14
eagles0513875_SpamapS:  you ever worked with virt-manager before?09:15
* AlecTaylor opened up the discussion over whether I should open-source my SaaS: http://openclosedsource.wikia.com09:18
SpamapSeagles0513875_: I use it quite often09:29
SpamapSyann__: but what do you mean "using" ?09:30
SpamapSyann__: htop is somewhat imprecise, try 'free -m'09:30
eagles0513875_SpamapS: im having nothing but issues with it getting it to connect to remote server http://pastebin.com/BV50Gf7S09:30
SpamapSyann__: memory used in buffers and cache is memory used to opportunistically speed up the system. There is no memory leak, its just in use for better purposes when your programs haven't explicitly requested it.09:31
SpamapSeagles0513875_: I don't use it like that09:31
eagles0513875_and my friend and i have tested on 10.04 10.10 11.04 and same issue09:31
eagles0513875_how do you use it09:31
eagles0513875_even connecting to my localhost to test i have saame issue09:32
eagles0513875_SpamapS:  you using xen as the virt technology of choice?09:32
smbeagles0513875_, If it is xen you want to connect, you need to enable the unix server in xend. Unfortunately there are other issues which I have not found solutions for09:37
eagles0513875_that didnt do it09:38
eagles0513875_any ideas as to these errors smb http://pastebin.com/BV50Gf7S09:38
smbIt looks like when I had tried to connect to xen without the change in xend (one has to restart too)... Need to start the machine to remember what exactly I changed.09:40
eagles0513875_restart what the local hos t09:40
eagles0513875_host09:40
eagles0513875_or the remote server09:40
smbremote server09:43
yann__SpamapS, disk cache is yellow in htop :) and no, it's not "faster", i discovered that because I had 5GB swap09:44
yann__so I killed everything I could to see what was using so much, and was left with that09:44
eagles0513875_smb: giv eme a moment to reboot09:45
smbeagles0513875_, no reboot of server needed09:45
smbjust restart of xend09:45
eagles0513875_that is done09:46
eagles0513875_smb: now what09:47
yann__http://waste.mandragor.org/memory-day.png   mmmh.09:49
* smb needs a bit trying to type, search and talk at the same time does not work that well09:49
eagles0513875_no worries smb im here for another 40 min09:50
smbeagles0513875_, Ok. :) Well so I think you need to have libvirt-bin installed on the remote xen host, then have /etc/xen/xend-config.sxp have a line like "(xend-unix-server yes)", then sudo service xend restart09:52
eagles0513875_libvirt-bin is started already09:52
eagles0513875_let me check the xend-config09:52
eagles0513875_that didnt work :(09:54
smbHm...09:55
eagles0513875_smb: it seems like the remote server is trying to close the connection before i am successfully logged in is the impression im getting from the msg09:55
SpamapSeagles0513875_: no I use kvm09:55
eagles0513875_ok SpamapS09:56
SpamapSyann__: what does free -m show?09:56
smbIt looks like that, but I had the exact same one because there was no service running...09:56
yann__SpamapS, I ll give it a try next time, had to reboot it09:56
eagles0513875_smb: let me try it on my local host first09:56
SpamapSyann__: I also usually run 'ps auxw O r' which shows the biggest process last..09:57
SpamapSclint     3859  4.6  5.9 970108 236588 ?       Sl   Jan15  13:38 /usr/lib/firefox-9.0.1/firefox09:57
SpamapSanyway, time to try and sleep09:57
yann__SpamapS, I usually use htop with sorting by memory :) have a good night, thanks for helping09:57
smbeagles0513875_, I would assume if you can ssh ok, the virtmanager connect should work09:57
eagles0513875_im on the localhost already doesnt work cant seem to establish a connection to the local host09:58
eagles0513875_also its seems the remote host is terminating the connection after specifying my password09:58
eagles0513875_smb: you using ssh keys or passwords only09:58
smbeagles0513875_, ssh keys09:58
eagles0513875_smb: is it possible to only use passwords or with virt-manager you must have ssh keys09:59
smbeagles0513875_, Should be possible to use both. But let me make sure...09:59
eagles0513875_smb: the virt-manager documentation shows remote connectiosn using ssh keys not passwords at least from what i understood10:00
SpamapSyann__: also one thing that has gotten me before is if you are using something configured to use HugePages like mysql or postgres.. that memory will show up as "used" by the kernel as soon as you configure the huge pages region.10:00
smbeagles0513875_, works both. just without ssh keys there is a local pw dialoque10:00
yann__I ll have a look, but I don't think I'm using huge pages :)10:00
eagles0513875_smb: im getting the dialogue10:01
VivekSpamapS: FYI rsyslog is automatically configured on Orchestra.10:01
eagles0513875_but i cant fathom what is causing me to fail to connect10:01
smbeagles0513875_, Just for completeness, you checked that on the remote host libvirtd is running?10:02
SpamapSVivek: oh, cool. :)10:03
smbeagles0513875_, And one other thing to check is whether "netstat -a|grep unix|grep xend-sock" has some output10:06
=== gondoi_ is now known as gondoi
=== Myrtti_ is now known as Guest79446
eagles0513875bk smb :)10:08
=== Vivek is now known as Guest88234
smbeagles0513875, Mind that  I could then connect, but instance creation still fails because bug 914788 and bug 91479210:09
uvirtbotLaunchpad bug 914788 in libvirt "libvirt expexts qemu-dm in wrong path for xen" [Undecided,New] https://launchpad.net/bugs/91478810:09
uvirtbotLaunchpad bug 914792 in libvirt "libvirt: Unable to complete install: ''b454ca30-add4-8f72-8093-99c938e87b46''" [Undecided,New] https://launchpad.net/bugs/91479210:09
eagles0513875smb: im guessing im experiencing the first bug10:09
=== Guest79446 is now known as Myrtti
eagles0513875actually first one isnt10:10
smbeagles0513875, No that only was _after_ being able to connect. :)10:10
eagles0513875ahh ok10:10
eagles0513875guess its time for a bug to be filed10:11
eagles05138752 bugs10:11
eagles0513875virt-manger should automatically pull ssh-askpass10:11
ikoniano10:11
ikoniaI dont think it is a bug10:11
ikoniaI think it is your setup10:11
=== Adri2000_ is now known as Adri2000
eagles0513875ikonia: has to be a bug10:12
ikoniawhy ?10:12
eagles0513875tried it on a vm of 10.04 10.10 11.0410:12
eagles0513875i have everything there libvirt is installed and running10:12
ikoniabut didn't smb say he was connecting fine ?10:12
eagles0513875ikonia: hes using ssh keys not simple passwords10:13
ikoniaright - so why ssh-askpass then, as that's normally for keys10:13
ikoniaeagles0513875: how are you trying to open the virutal manager ?10:13
eagles0513875from the kmenu10:13
eagles0513875should it be run with sudo from the command line10:13
ikoniaeagles0513875: have you looked at what the kmenu launcher is doing ?10:14
eagles0513875no i havent10:14
ikoniaeagles0513875: ok - so again, checking this stuff out before logging a bug10:14
ikoniaeagles0513875: have you tried launching it manually to get some more verbose output ?10:14
ikoniacheck the basics, get info,10:14
=== schmidtm_ is now known as schmidtm
smbeagles0513875, I had changed away the authorized_keys to get a pw prompt and that worked, too10:15
eagles0513875ahh10:16
ikoniaI didn't have a problem when I was using it on ubuntu (I'm not any more but it worked fine when I did)10:16
eagles0513875ikonia: how can i get verbose output to commandline10:16
eagles0513875ikonia: it worked fine when i tested it out with kvm10:16
smbeagles0513875, I think I am a bit confused reading. Did you try the netstat line on the remote host?10:17
ikoniaeagles0513875: just launch it by the command line first, see what it does10:17
eagles0513875ikonia: not doing anything10:18
eagles0513875smb: no i havent10:18
ikoniaeagles0513875: what are you typing on the command line ?10:18
smbeagles0513875, Ok, could you try? Then we would know whether the socket interface is up10:18
eagles0513875smb: what socket interface should i be looking for10:18
eagles0513875ikonia: virt-manager10:19
smbnetstat -a|grep unix|grep xend-sock10:19
smbunix  2      [ ACC ]     STREAM     LISTENING     20492    /var/lib/xend/xend-socket10:19
koolhead11hi all10:19
eagles0513875its there and listening smb10:21
smbeagles0513875, Ok, so at least can take that from the list...10:22
eagles0513875ok10:22
smbeagles0513875, So what is running locally and remotely? I only tested 11.10 and 12.04 combinations currently10:24
eagles051387511.10 on both10:25
smbok10:25
eagles0513875well ill be damned i installed kvm on localhost and that connected just fine10:25
smbWell, that has always worked. Just that Xen host server came back only with 11.10 and I am not sure how many really tried out with libvirt and xen10:28
smbIt is quite manual at least10:28
eagles0513875:-/10:28
* smb hopes to improve things until precise release...10:29
eagles0513875smb: you work with the virtualization stuff?10:29
smbyes10:29
AlecTaylorWill open-sourcing my SaaS solution adversely affect my revenue? - Contribute to Discussion and Notes: http://openclosedsource.wikia.com / http://programmers.stackexchange.com/q/13034110:30
ikoniaeagles0513875: don't you have to make a change to tell it to connect to a xen hypervisor instead of kvm10:30
smbikonia, Yes, that is done when you create a new connection10:30
eagles0513875i did i was just testing ikonia to see if i would have the same issues i am having with xen but with kvm10:30
=== Guest88234 is now known as Vivek
lynxmanmorning o/11:20
eagles0513875_smb: hey I'm on from web chat at school lol11:51
koolhead11ohai lynxman12:05
Psi-Jackikonia: Looks like you're around now eh?12:39
ikoniaI am around yes12:39
Psi-JackRemember that whole MySQL battle from before? ;)12:39
ikoniahello12:39
ikoniaI certainly do12:39
eagles0513875_hi ho :)12:39
Psi-Jackheheh12:39
Psi-Jackyou'll laugh at the results. ;)12:39
ikoniaone of the more interesting ones12:39
ikoniaPsi-Jack: please share12:39
ikoniavery interested12:39
Psi-JackHehe12:40
Psi-JackWell, the updated kernel and mysql solved the memory usage was mostly solved, but there was an underlying issue causing most of it to begin with. ;)12:40
ikoniago on......12:41
Psi-JackWe use VMWare vSphere 4.1u2 in our infrastructure for pretty much most every server in our DC, save for a few.12:41
Psi-JackThis particular VMWare Guest was set to have initially 4GB, then 8GB, then finally 16GB, but no matter how much RAM we gave it at the hypervisor level, someone had set a Memory Limit on it to 2GB.12:42
ikoniareally,12:42
Psi-JackSo, yeah, the guest was getting 8GB, but only 2GB of it was allowed to be used, and so it was actually swapping out on the HOST OS side to account for it.12:42
ikoniathat makes sense for what we saw that night12:43
ikoniahowever was that hypervisor limit in place on any other machiens ?12:43
ikoniaeg: was it effecting any other guests ?12:43
Psi-JackNo, it was set just for that one that we found.12:43
ikoniaI didn't know you could do that, limit it at the hypervisor for just one vm12:44
Psi-JackYep.12:44
Psi-JackVMWare can do that. heh12:44
Psi-JackOur DBA of all people found it!12:44
ikoniaI thought the hypervisor settings where global and then everything bellow that was either group policy based, or guest based12:44
ikoniaimpressive12:44
ikoniaand a nice little feature to be aware of for future use12:44
ikoniathanks for sharing Psi-Jack12:44
Psi-JackI don't claim at all to be a VMWare expert, I know Xen and KVM much more, but VMWare still is bleh.12:44
ikoniawhat an annoying issue that turned out to be12:44
Psi-JackNooooo sh**!12:45
ikoniaPsi-Jack: vm-ware is what you have to use in business, so no point dodging it12:45
ikoniaapart from redhat pushing kvm as their cloud platform now12:45
Psi-JackAfter that, our CPU loads went back to normal, primary use of CPU load is MINIMAL now, and when it is, it's mostly user load, not system load.12:45
Psi-JackThat's what got me is MOST of the load was system load, which means core processes.12:45
ikoniaat least you are sorted now12:46
Psi-JackYep. :)12:46
ikoniaan interesting one,12:46
Psi-JackA lot more useful now, and it's funny to see the load levels during prime hours are practically nothing at all anymore.12:46
Psi-JackWe have another DB running similarly in another DC, under Xen, and i see a lot of user load, but barely any system load.12:46
Psi-JackThat database however, has a lot going on. Both our flagship SaaS product, and our CMS hostings. ;)12:47
patdk-lapoh, did someone specify a resource limit for ram?12:47
Psi-Jackpatdk-lap: Yeah. LOL12:47
patdk-lapya, your miss that unless you use that a lot12:47
eagles0513875_learned something new as well about vmware sphere :D12:47
Psi-Jackhehe12:48
Psi-JackYeah, me too!12:48
patdk-lapsetting resource limits is very nice though12:48
Psi-JackDon't trust VMWAre! hahaha12:48
patdk-lapexpectially for disk access12:48
eagles0513875_Psi-Jack: how do you guys go about creating the xen guests12:48
Psi-JackWell, our disk access is tied to an FC SAN with FC Disks. ;)12:48
Psi-Jackeagles0513875: We don't. Our Xen stuff is run in Rackspace, they run Xen. heh12:48
eagles0513875_got it12:49
patdk-lapI12:49
Psi-JackI don't do Xen anymore myself. Has too many annoying issues like easily corruptable vNIC's.12:49
patdk-lapI'm thinking I should just run xen inside vmware12:49
patdk-lapfor the last legacy things12:49
Psi-JackYikes!12:50
patdk-lapwhy yikes?12:50
eagles0513875_Psi-Jack: how are you creating the vNIC's12:51
patdk-lapyou need vsphere 5.0 though12:51
uvirtbotNew bug: #917134 in drbd8 (main) "dbrd8 kernel module and padlock-sha kernel module in deadlock" [Undecided,New] https://launchpad.net/bugs/91713412:51
eagles0513875_I'm using a bridged networking setup which is very easy to specify and setup the bridge via the network interfaces file12:51
eagles0513875_ikonia: i enabled debugging in libvirt smb is helping me go through that to find out the possible cause of my issue12:51
Psi-Jackeagles0513875: They were fully paravirtualized guests, and just using LVS on them for network directing was causing failures that resulted in mysterious packet loss.12:52
patdk-lapI'm using my own custom network xen config scripts12:52
Psi-JackAny kind of advanced routing or packet mangling caused these issues on Xen for me.12:52
eagles0513875_ahh12:52
eagles0513875_well atm libvirt is giving me hell12:52
patdk-lapPsi-Jack, odd, I didn't have that issue12:52
Psi-JackAnd that was Citrix Xen, specifically.12:52
patdk-lapI also rarely ran it at high load levels though12:52
Psi-JackThe "Commercial Grade" stuff.12:52
ikoniaPsi-Jack: it was always one of the drawbacks with xen12:52
ikoniaand why cytrix wrote their own network patches for it12:53
RootChaoscan anyone suggest a good ubuntu load balance app through personal experience ?12:53
RootChaosi need to load balance two smtp servers12:53
ikonialvs12:54
ikoniaipvsadmin12:54
ikoniaadm sorry12:54
ikoniasimple and easy12:54
RootChaos* looking12:56
RootChaosthanks very much12:56
RootChaosdo i need a dedicated server for lvs, or can i run it with other services on a server ?12:58
Psi-JackYou should do it dedicated.12:58
Psi-JackOr run it along side with the mailservers.12:58
ikoniayou can if you are strapped for hardware run the lvs process on the actual service giving servers12:59
ikoniayou need to be a little more tidy/thought out, but you could do it if you where strapped for hardware12:59
RootChaosi have another server running mysql, doing nothing... i could setup lvs on that server which will balance to the 2 mail servers ?12:59
Psi-JackYou shouldn't run LVS on a database.13:00
ikoniayeah, mail = front end, database = backend, balancing a front end service would put the database at the front13:00
Psi-JackYou would be better off running pacemaker+ldirectord on the two mail servers.13:00
ikoniaplus the performance risk13:00
Psi-JackJust do NOT run a firewall on the same host as LVS13:00
Jeeves_Psi-Jack: Why not?13:01
Psi-JackIt will eat data for lunch. ;)13:01
Psi-JackHeck, patdk-lap and Omache taught me that. ;)13:02
RootChaosok, but in essence, just to test, i can use an existing server, load lvs and see how it works - then move it to a dedicated box later13:02
Psi-JackRootChaos: You should run it on a front-end facing server. Not a database server.13:02
RootChaosok cool13:03
RootChaosi can do that13:03
Psi-JackOften times, people run LVS servers on their webservers.13:03
Psi-JackI'm one that runs two dedicated VMs just to LVS and does nothing else, but nginx name-based and ip-based proxying. ;)13:04
=== hito_jp0 is now known as hito_jp
Jeeves_Psi-Jack: I really don't see the issue of combining those two functions13:05
koolhead11Daviey: around?13:05
Davieykoolhead11: briefly13:07
koolhead11Daviey: was writing u a mail13:07
Davieykoolhead11: probably better right now13:07
Davieykinda swapping tasks.13:07
htdutchyWhat do I need to install to host a dhcp server?13:10
Psi-Jackdhcpd13:10
htdutchyE: no installation candidate13:11
htdutchyIs there a packet that I can just install with apt-get install?13:11
Psi-JackHere's a tip.13:12
Psi-Jackaptitude search dhcp13:12
htdutchyI got it dhcp3-server13:12
htdutchythanks13:12
Psi-JackThat's the older version.13:12
Psi-Jackisc-dhcp-server is version 413:13
htdutchyah13:13
htdutchyisc-dhcp-server isn't available :(13:14
Psi-JackThere's also a chance I could be wrong. I'm looking at a Debian server of mine. :p13:15
htdutchyah, well I'm on ubuntu13:15
htdutchywebmin picked it up, it's working13:17
Psi-Jackheh.13:18
Psi-JackGlad I'm not the only nut job that uses webmin. :)13:18
Psi-JackI do it, though, just to be lazy. I actually know how to go in and fix problems by hand, set them up by hand, etc, ;)13:18
htdutchyYeah, I like working in console, but for a quick configurations like setting up users it's just better13:19
htdutchyPrimarily I use it for user config, apache, dns and dhcp servers13:20
Psi-JackOh heck, you don't even utilize it for much then.13:21
Psi-JackYou're just plum lazy. :)13:21
Psi-JackI actually use it for the whole cluster effect, change one on one, it replicates that change to the others.13:22
htdutchyAh13:26
skorvhey!13:27
skorvsimple dumb question from a noob.... can i use a ubuntu server as a front end to redirect urls to different web servers within my network?13:29
Psi-Jackyes13:29
skorvi know how to do it with apache and virtual hosts in a single machine...13:29
skorvthe question then is... how?13:29
patdk-wkJeeves_, the issue with combining what two functions?13:30
ikoniaskorv: look at squid and jesred, or apache13:31
Psi-Jackskorv: I'd setup nginx with name-based forwards to different transport endpoints as needed for each hostname you need. But that's not the proper way to do what you're asking. The proper way is to have Split-DNS and have internal DNS point to internal server, external DNS point to external IP.13:31
Jeeves_patdk-wk: Iptables and LVS13:32
skorvPsi-Jack: the proper way sounds complecated13:32
patdk-wkiptables and lvs don't mix13:32
Psi-Jackskorv: It's not.13:32
Psi-JackIt is more maintenance, but proper.13:32
patdk-wklvs injects packets back in, in the middle of netfilter13:32
Psi-JackAnd you don't have a SPF13:32
patdk-wklvs packets don't match conntrack ever13:32
Psi-JackNope.13:33
Psi-JackLVS magically moves traffic around without ever telling conntrack about it. ;)13:33
skorvi'm managing virtual servers as well as physical ones...13:33
patdk-wkwell, without telling netfilter about it, and therefor screwing conntrack and some other things13:33
Psi-Jackskorv: Yeah, so do I.13:33
Psi-Jackpatdk-lap: Heh, yep.13:33
Psi-JackWhich is partly why running a firewall on an LVS director causes issues.13:34
skorvok.... i'll pick you brain in a couple of minutes... gotto go have lunch13:34
* Psi-Jack gets a brain-picking needle ready, and cringes.13:34
patdk-wkrunning the firewall in non-stateful mode works, if you don't also need any helper modules, like ftp, irc, sip, ....13:34
Psi-JackHeh.13:34
Psi-JackI hardly even know what a non-stateful firewall is anymore. :p13:35
Jeeves_Ok, that kinda makes sense13:41
Jeeves_But if the firewall is only firewalling the services that are loadbalanced, it shouldnt be a real issue.13:41
Psi-JackWrong. :)13:46
Psi-JackThat is stateful firewalling.13:46
Jeeves_Ehm, that depends how you configure it :)13:48
patdk-wkit can be a real issue13:50
zulgood morning13:50
* Psi-Jack nods.13:50
patdk-wkthe issue is, dealthing with non-stateful firewalls13:50
patdk-wkin order for that to work, you have to open up much more than you would have to otherwise13:50
Psi-JackExactly.13:51
Psi-JackHence, why I run my LVS directors on dedicated VM's that get proxyarp'd to by the front-end firewall. Thanks to patdk-lap's gracious help here. ;)13:51
patdk-wkI'm just running two firewalls and two directors, using pacemaker13:52
patdk-wkI also have a crapload more ip space to work with than you :)13:52
skorvok... back13:54
Psi-Jackpatdk-lap: Hehe13:55
Psi-JackYeah, I still use two firewalls, and 2 directors though. :)13:55
skorvfor now i'll setup my servers within proxmox(KVM mode) and attach the physical ones later14:06
Psi-JackMy LVS directors are all run under KVM, personally.14:08
Psi-JackMy firewalls too.14:08
Psi-JackAnd I too, now use Proxmox VE, but I use 2.0 beta2 with the HA stuff enabled and functioning. ;)14:10
skorvi'm still on a old one14:11
skorv1.7 i think14:11
Psi-Jack1.9 is out, yanno.14:12
skorvyea...14:12
Psi-JackProxmox VE 2.0 is nice, though. It actually comes with kvm official 1.0.014:12
skorvwill wait for 2.0 to fully upgrade my server farm14:13
Psi-Jackhehe14:13
Psi-JackI upgraded from a series if pacemaker-run libvirt-managed hypervisor cluster to Proxmox VE 2.0 beta 2 which uses cman for it's cluster glue.14:13
Psi-JackI hate cman+rgmanager, but eh.. The system works so far, pretty well.14:13
skorvyou've set your firewalls in there as well?14:13
skorvwhat did u use14:14
skorv?14:14
Psi-JackYeah, my firewalls are run in kvm guests.14:14
Psi-JackAnd I use shorewall for my management system for it.14:14
skorvi was planing on terting vyatta distro myself but not sure14:14
Psi-JackDon't.14:14
Psi-JackIt's just not worth it.14:14
skorvpfsense?14:15
Psi-JackHell no. BSD-based crap.14:15
skorvself built?14:15
Psi-JackShorewall.14:15
skorvdidnt knew that one14:16
Psi-JackShorewall is a perl script to manage iptables,works on any distro.14:16
skorvok... so a base install of ubuntu server and that on top of it :P14:16
Psi-JackYou edit a few text files to setup the basic concept, it's stateful, and it builds ginormous rulesets that do exactly what you tell it to.14:16
Psi-JackEh, sure. ;)14:17
Psi-JackI use openSUSE for my firewalls.14:17
skorvi tried centos.... but cannot adapt to the dam yum :P14:17
Psi-JackDebian for my webservers and directors, though thinking about moving my directors to Ubuntu seeings that Debian's ldirectord is bugged.14:17
Psi-Jackyum is awesome.14:17
Psi-JackPersonally I hate the .deb package format. Worst design flaw ever, but it is what it is.14:18
skorvmaybe because i'm a ubuntu freak... the fist and only distro i ever used14:18
Psi-JackI started with SLS.14:18
skorvi tryed debian... fedora... even archlinux....14:18
skorvalways find my way back to ubuntu14:19
Psi-JackIn short, I started Linux before it was even 1.0.0. :p14:19
skorv:P14:19
skorvme it was in 200814:19
Psi-JackYoungin. :p14:19
skorvwith 8.0414:19
skorvactually i'm 33 but thats another story14:19
Psi-Jackheh14:20
skorv2 weeks after installing into my laptop... made my 1st server14:20
Psi-JackHmmm. Cool. My age.14:20
skorvcompletely brind14:20
skorvbut did it anyway14:20
skorvportugal is an all consuming windows market14:21
Psi-JackI just started young. First computer was a C64, moved up to a CISC, then got into UNIX almost immediately. I was a proud owner of a NeXT cube and Alpha server. ;)14:21
skorvnot many chances for linux in enterprise... only small companies like my own use it internally14:21
Psi-JackThat's a cop-out, and an excuse. ;)14:21
skorvfor me.... 1985's Spectrum clone Timex 204814:21
skorvc64 was an amazing machine14:22
Psi-JackDid you know Commodore re-made it into a 64-bit CISC machine styled just like the original keyboard unit?14:22
skorvnop... thatz amazing14:23
Psi-Jackhttp://www.commodoreusa.net/CUSA_C64.aspx14:23
Psi-JackLegacy reborn! :D14:25
Psi-JackFunny thing is, it's specifically designed for Linux. :)14:25
skorv:P14:27
skorvamazing14:27
skorvso.... how you've set up your network (i'm setting up firewall > server > (webserver 1) (webserver 2)14:29
Psi-JackI have 4 hypervisors, attaching disks via multi-pathed iSCSI to two NAS servers (also running Linux) to act as a storage SAN.14:30
Psi-JackI have two VM's running firewalls, they proxarp VIPs from the front to the LVS directors which I have 2 of, active and failover.14:31
skorv2 firewalls? isnt that too much?14:32
Psi-JackFrom the director, it forwards to the appropriate servers by IP address of two backend webservers. I also run an nginx proxy server for name-based forwarding so that internal servers I don't want normally exposed are masqueraded through the gateway IP.14:32
Psi-JackNope.14:32
Psi-JackActive and Failover. My primary firewall can go down and the failover will takover without any traffic loss.14:32
Psi-JackI have only 1 SPOF in my network, and that's my cablemodem. ;)14:32
skorvok... me is just 2 physical servers in cluster mode (proxmox) its not an enterprise14:33
Psi-JackNeither is mine. :p14:33
Psi-JackThis is just my home setup,.14:33
skorvi have 8 machines total.... 2 of them are servers14:34
skorv"and i thought i was nutz.... :P"14:34
skorv1 cablemodem... a linksys wrt160nl with ddwrt as router.... the rest is just too much computers14:35
Psi-Jack8 and only /2/ are servers?14:35
Psi-JackBleh,. linkcrap.14:35
skorv1 is my personal (home) and a laptop14:35
Psi-JackI have 6 physical servers, 14 virtualized servers, 1 performance desktop, 1 personal laptop, 1 company laptop, 1 personal netbook, 1 android tablet, 1 smartphone, 1 smart tv14:36
_rubenand you are your power company's favorite customer ;)14:36
Psi-JackIndeed. ;)14:36
skorvthen in my workshop... 2 servers, 1 workstation, 1 data recovery, 1 "experimental", and 1 acer laptop converted into a media station just for listening to music :P14:37
Psi-JackBill's more than most people I know, even at work with expensive houses. LOL14:37
Psi-JackOh, and 1 dedicated NAS storage box, a simple Netgear ReadyNAS Duo.14:37
Psi-JackThat's my simple backup resource point. ;)14:37
skorvwe're crazy you and IO14:37
skorvwe're crazy you and I14:37
skorv:P14:37
Psi-JackThis is just my home setup so I can keep on top of everything in my field of interests. ;)14:38
skorvok14:38
Psi-JackIt's why I'm one hell of a good systems engineer, and not just a simple system admin.14:38
Psi-JackSoon, I'm actually picking up server grade managed switches. ;)14:38
Psi-JackBecause 3 8-port switches just isn't enough.14:38
skorvi have a asus 24port 10/100 unmanaged14:39
skorvweak i know14:39
Psi-JackBleh.14:39
Psi-JackI'm 100% GbE14:39
skorv:P14:39
skorvfor a self employed guy here where i live i have more than any other tech i know14:40
skorvhardware setup for the servers (now you'll blow my mind)14:40
Psi-JackI'm getting a rack, hopefully today, to actually shelf all my computers onto and organize it better. ;)14:40
Psi-JackTwo Dell PowerEdge 830's with dualcore Intel Xeon's and CERC RAID doing RAID-10 on 6-drives. That's my storage cluster.14:41
skorvok....14:41
Psi-Jack4 hypervisors running AMD Phenom II X4's with 8GB DDR2 RAM14:42
skorvmine is just 2 home grown E8400 Core 2 Duo with asus p45 motherboards14:42
skorv1 has 6gb ram... the other 314:42
Psi-JackBleh. Intel junk.14:42
skorv8400 were good gaming machines14:43
skorvmy dream setup :P14:43
skorvdell's 815 with 4 opterons14:43
Psi-JackAt work, we have several Quad-CPU 12-core Opteron's with 256 GB RAM hooked up by FC to an EMC SAN.14:43
skorvthe new 16 core buldozer14:43
Psi-JackWith FC-Disks. ;)14:43
Psi-JackNow, THAT, is a setup. ;)14:44
skorv6282SE i think :P14:44
skorvoh yea14:44
skorvcant afford it14:44
skorvso i'll keep on dreaming14:44
Psi-JackYeah, that's several hundred thousand dollars of equipment. ;)14:44
skorveach of those cpus is 1000$14:45
Psi-Jackbut definitely, AMD is a much better way to go, especially for virtualization.14:45
skorvtrue that14:45
Psi-Jackskorv: Yeah, and we have at least 80 of those CPUs. ;)14:46
skorvso... i'll probably upgrade my setup latter this year to amd 8150FX14:46
skorvjeez14:46
=== masACC is now known as maswan
Psi-Jackhehe14:46
skorvmaybe i can pick up some "old" servers from upgrades. some companies sometimes just "give them away"14:47
Psi-JackThe only part I hate about my home setup is, my fricken Dell 830's onboard NIC's don't do jumbo frames.14:48
skorvcan pick a couple of dual xeon14:48
Psi-JackPisses me off to no end.14:48
skorvwhen i set my servers up i tryed asus NICs... only to find out they only work on windows14:50
skorv:(14:50
skorvnow i use tp-link's GbE NICs (pci ad pcie)14:51
skorvon all my machines14:51
patdk-wkhmm, all my home machines support jumboframes14:53
patdk-wkrunning ib at home is really nice too :)14:53
patdk-wknothing better than 64k mtu14:53
Psi-Jackpatdk-lap: Yeah, all BUT my fricken server-grade computers, the PowerEdge 830's, have jumbo frames.14:53
patdk-wkI don't even know what a pe830 is14:54
Psi-JackAnd for some reason, dropping PCI NIC's into it don't work.14:54
patdk-wkthe oldest I have around here is a pe r41014:54
Psi-JackCould do PCIe or PCI-X NIC's though.14:54
Psi-JackPCI-X ones are painfully expensive though.14:55
patdk-wkheh?14:55
patdk-wkyou can get intel dual gigabit pcix for like $2014:55
Psi-JackReally? Where!14:55
patdk-wksame thing for pcie is going be atleast 12014:55
patdk-wkebay :)14:55
Psi-JackOh. Bleh.14:55
patdk-wkwhy waste the money on brand new pcix stuff?14:55
=== caribou_ is now known as Caribou
patdk-wkexpecially with all the companies offloading pcix for pcie14:56
Psi-JackEh, I suppose.14:57
Psi-JackI'll look into it, anyway. $20 is not bad at all.14:57
Psi-JackHeh, Intel Pro 1000 MT Dual Port NIC GbE PCI-X, $8.9414:58
Psi-Jack(+$6.95 shipping)14:58
Psi-Jackpatdk-lap: ebay's usually the LAST place I look, but this looks promising.15:01
Psi-JackAt least for the now solution. :)15:01
patdk-wkwell, pcix is what I call, expired15:01
patdk-wkso ebay is my goto for that15:01
Psi-JackJumbo frames would definitely improve my throughput to the disks for the SAN of mine, and 2-ports would allow me to keep the DRBD replication going on one isolated network, and expose the volumes via the other port.15:02
Psi-JackDouble-Win there. :)15:02
patdk-wkI'm using 4 gigabit nics for iscsi round robin15:02
patdk-wkatleast till everything is upgraded for infiniband15:03
* Psi-Jack nods.15:03
Psi-JackOh yeah.15:03
Psi-JackMy ISP FINALLY is "working on" IPv6 support.15:03
Psi-JackHmmm15:04
Psi-JackThey even have PXI-X 2GB FC for like $9.9515:04
Psi-JackPCI-X15:04
Psi-JackI might go that route. Get two of those, and two PCI-X NIC 2-port GbE's.15:04
Psi-JackNo need for an HBA-SW with direct connect.15:05
patdk-wkI have some of those15:08
arrrghhhhey guys.  is there any difference between "service <svc> start" and "/etc/init.d/<svc> start"?15:08
patdk-wkand a 8 port fc switch15:08
patdk-wkmainly got that 2gb fc stuff, cause I have a 24 lto3 tape system, that uses 2gb fc15:08
Psi-Jackpatdk-lap: Yeah, but direct HBA to HBA should work, too, no?15:08
patdk-wkbut now I'm getting two netapp shelfs that are 2gb fc also, would like to put them on a 4 port pcie card though15:09
patdk-wkyes, direct works with fc15:09
patdk-wkI have never run ip over fc though15:09
Psi-JackThought so. I only have the 3.15:09
Psi-JackWith DRBD, it can run over FC without an IP.15:09
patdk-wkI think the pcix ib cards are like $4015:10
skorvPsi-Jack: i have to admit... you are a better tech than i am15:12
skorvPsi-Jack: so... challange accepted :P15:12
Psi-Jackheh15:12
Psi-JackDon't worry, I get that a lot.15:12
Psi-JackI literally tested out of many certs without even studying. I even CORRECTED their errors on their own test and proved it.15:13
Psi-JackCompTIA was pretty bad about having little errors on their tests. ;)15:13
eagles0513875ikonia: fixed the problem with virt-manager15:14
eagles0513875ikonia: turned out virt-manager didnt like the way i had the networking setup in regards to the bridge15:17
ikoniaas I said, it would be your configuration not a bug15:19
Psi-Jackheh15:21
eagles0513875ikonia: turns out using the xend config scripts work better then setting up the bridge in the network interfaces file15:23
ikoniashouldn't really matter15:24
Psi-JackYeah, doesn't matter, actually.15:24
ikoniaI suspect you just set the bridge up wrong15:24
ikoniabut the scripts set it up correctly15:24
eagles0513875ikonia: copied whats on the xen documentation15:24
ikoniacopying = not good, thought = good15:24
eagles0513875http://wiki.xen.org/xenwiki/HostConfiguration/Networking.html15:27
eagles0513875ikonia: ^ that is what i followed15:27
ikoniashowing me the link isn't going to help15:28
Psi-JackHmmm15:31
Psi-JackI've been considering dropping iSCSI GFS2 in favor of NFSv3.15:31
sorenzul: Where does the packaging branch for horizon live?15:38
zulon Ubuntu or trunk?15:38
zullp:~ubuntu-server-dev/horizon/essex15:38
sorenI see.15:39
sorenThanks.15:39
zulproblems?15:39
sorenzul: Only that those packaging branches seem to move around a lot.15:42
zulsoren: yeah15:42
sorenEr....15:43
sorendo you not use bzr builddeb?15:43
zulyeah we do15:43
sorenUh.. how?15:43
zulbzr bd -S15:44
sorenzul: Well, sure, but how do you actually work on the packages?15:44
zulsoren: what do you mean?15:45
sorenHow do you make changes to the packaging?15:45
=== alamar_ is now known as alamar
sorenHow do you test them?15:45
sorenHow..15:45
sorenThere's no .bzr-builddeb?15:46
zulsoren: we use merge proposals etc and we use our openstack-ci to test the packages15:46
zuleh?15:46
arrrghhhhey guys.  is there any difference between "service <svc> start" and "/etc/init.d/<svc> start"?15:46
arrrghhhbecause the latter just worked when the former did not.15:47
sorenzul: I just don't see what your are using bzr builddeb for?15:47
zulsoren: fuck i need to add it apparently sorry about that15:47
sorenzul: Other than a wrapper around dpkg-buildpackage15:47
sorenzul: Don't apologise. Explain :)15:47
sorenzul: How are you using this stuff without it?15:47
zulsoren: i didnt know about the .bzr-builddeb directory15:47
sorenbut..15:48
sorenHow..15:48
sorenOk, say you find a bug.15:48
sorenYou want to fix it.15:48
sorenWhat do you do?15:48
sorenLet's say nova/utils.py needs a patch applied.15:48
sorenSorry, no, not nova, because I set Nova up to make this work properly.15:49
sorenHorizon.15:49
zulopen up a bug in launchpad, propose a branch to be merged send a merge request, i usually merge them15:49
sorenNo no.15:49
sorenBetween "open a bug" and "propose a branch" there's some actual work going on.15:49
sorenHow do you accomplish that?15:49
zulsoren: right standard procedures apply15:50
sorenClearly... They do not.15:50
sorenThat's why I'm asking.15:50
zulyes they do15:50
soren...15:50
sorenWell, the tools we've been using for years don't work on that branch.15:51
zulyes they do, open a bug, propose a fix and then it usually gets merged whats not standard about that15:51
sorenLook.15:51
sorenThat's not the part 'm asking about.15:51
zulwhat part are you asking then?15:52
sorenI'm asking about the part between opeining a bug and propsing a fix.15:52
sorenThe part where you actually fix. the. bug.15:52
sorenWrite code. Apply changed. Edit files.15:52
soren*changes15:52
zulobviously im missing something15:53
DavieyDoes this not work, vim debian/control ; "edit something" ; dch -e/-i ; debcommit ; bzr bd -S15:54
zulit does15:54
Davieysoren: Can you outline issues with that workflow?15:55
Daviey.. so packaging changes works?15:55
Daviey(zul, we should probably have VCS fields in debian/control)15:55
zulDaviey: we do15:55
Davieyare you sure15:56
Daviey?15:56
zulyeah15:56
zulVcs-Browser: http://bazaar.launchpad.net/~ubuntu-server-dev/nova/essex/debian/files15:56
zulVcs-Bzr: http://bazaar.launchpad.net/~ubuntu-server-dev/nova/essex15:56
DavieyHmm, i did just look - but did not see, /me re-checks15:56
zulit might not be in the horizon package15:57
sorenDaviey: Yes, changing debian/control obviously works fine.15:58
sorenDaviey: bzr bd-do, doesn't work at all, for instance.15:58
DavieyAhh, i see soren's point..  it's an 'upstream only branch'... so you need to run "debian/rules get-orig-source" first, right15:58
Daviey?15:58
Davieyi thought bzr bd -S, auto ran get-orig-source as pristine-tar's last option?15:59
sorenI mean, of course there's nothing magical about what bzr bd-do does, but having to do something like that manually?  Sheesh.15:59
sorenThis isn't 2007 :)15:59
zuloooooh...15:59
zulDOH!15:59
sorenSo:16:00
Davieysoren: i thought pristine-tar did that automagically?16:00
sorenHow do you make a change now?16:00
sorenDaviey: Did what?16:00
Davieydebian/rules get-orig-source16:00
zulsoren: i bump the changelog and then do a bzr bd -S16:00
sorenzul: Ngh...16:00
sorenzul: I sure hope you actually make changes.16:00
sorenzul: ..and don't just lie about them in the changelog :)16:00
zulsoren: obviously thats not kosher16:01
zulsoren: oh i do16:01
Davieysoren: we find it gets bugs closed faster.16:01
sorenDaviey: Cool :)16:01
Davieysoren: so i just checked it out and pristine-tar grabbed the tarball from the archive16:02
Davieywhen i did bzr bd -S16:02
sorenbzr bd -S works fine.16:02
sorenThat's not the issue.16:02
sorenThat's boring.16:02
sorenI'm not asking how you manage to build the packages.16:02
Davieyi find it exciting :/16:02
sorenI'm asking how you work on them? I'm genuinely curious what the workflow looks like when you're not using the likes of "bzr bd-do".16:03
sorenE.g.:16:04
sorenFor evey other package in Openstack, I can:16:04
sorenbzr branch lp:~openstack-ubuntu-packagers/nova/ubuntu16:04
sorencd ubuntu16:04
sorenbzr bd-do16:04
sorenand start hacking away.16:04
zulso what we do is16:04
zulbzr branch lp:~ubuntu-server-dev/nova/essex16:04
zulcd ubuntu16:05
zulstart hacking way16:05
sorenNo.16:05
sorenThere's only packaing there.16:05
zuler...cd essex16:05
zulright16:05
zulif i want to get a new tarball i bump the changelog and then bzr bd -S16:05
sorenI've lost faith in this conversation ever going anywhere.16:06
* soren goes to look at dinner stuff16:07
smbzul, Ok, I subsribed you and smoser to the libvirt bugs I openen. Found a funny way to make it work somewhat by stopping and starting libvirt-bin after boot of the host is done...16:29
zulsmb: k16:29
arrrghhhmeep16:29
arrrghhhanyone?  difference between service <svc> start and /etc/init.d/<svc> start?16:30
smbarrrghhh, I'd suppose the former only works if there is a upstart job (something in /etc/init)16:31
arrrghhhsmb, interesting.  i didn't realize i had to create that in addition to the file in init.d...16:32
arrrghhhi'll take a look16:32
arrrghhhthx16:32
smbUsually after conversion the thing in /etc/init.d whines about you should be using the other16:32
arrrghhhwell it's a homemade script16:33
arrrghhh;)16:33
smbOh well. So after having the upstart job apparently you make /etc/init.d/foo a link to /lib/init/upstart-job16:33
smbarrrghhh, So no you do not need necessarily create an upstart job but in that case service x does not work16:34
smb;)16:35
arrrghhhi just want it to run on boot16:38
eagles0513875smb: ping16:52
smbeagles0513875, hmm?16:53
Davieysmb: the restarting of libvirt-bin after restart is a dnsmasq + libvirt fight.. jamespage encountered it aswell on the distributed automated testing16:53
smbDaviey, Ah ok. It clearly was a race somewhere, just that I did not understand exactly where16:54
jamespagesmb: ah - thats a nice one that - worked around it by configuring options in the libvirt dnsmasq instances rather than using a system one16:54
jamespageyou can tell dnsmasq not to listen on certain interfaces which is manual but works16:55
Bogdanielcan someone help with this error i'm getting from smartmontools ?16:55
BogdanielJan 16 18:49:30 Jupiter smartd[6208]: Device: /dev/sda5 [SAT], offline data coll                                                                             ection was suspended by an interrupting command from host (auto:on)16:55
smbjamespage, Hm, do you have the runes lying magically around?16:58
jamespagesmb: lemme see16:58
jamespagesmb: either use except-interface=virbrXXX or only listen on listen-address=XXXX  - you can specify multiple times in /etc/dnsmasq.conf17:01
smbjamespage, Hm, looking at ps ax, it seems using a mix of both. But thanks, at least then I know where look.17:03
* smb adds another knob to the table...17:03
DavieyThere are enough knobs at the table, i feel.17:04
smbYeah17:04
smbFunny, don't seem to have /etc/dnsmasq.conf at all17:04
smbjamespage, Could it be that in your case the machine also has a public dhcp service running?17:05
jamespagesmb: yes - we use dnsmasq standalone alongside the dnsmasq-common package used by libvirt17:27
smbjamespage, Ah ok. So maybe my need of restart is slightly different that the already found one. bah!17:30
rbasakjamespage: can I see your late_command for booting the panda please? I'm trying to ssh-import-id myself and base64-in the script to rewrite the sd card, but neither are working. Thought I'd save the hassle of debugging it if I could have yours :)17:33
jamespagerbasak, hmm - looking at it it appears I don't actually do that17:34
rbasaklol17:34
jamespageI pull in the script to re-image for re-boot17:34
jamespagebut not my keys17:34
* jamespage sighs17:34
jamespagerbasak, sorry - not much help there!17:34
rbasaknp, I'll figure it out17:35
=== dax_roc_ is now known as dax_roc
princej88hey guys, anyone here have experience installed forked-daapd on ubuntu server?18:10
Cybercokehi guys, i need some help on CACTI , just a few questions...18:10
princej88I haven't been able to find a good tutorial..the new iTunes won't connect to firefly :(18:11
princej88anyone?18:12
arrrghhhprincej88, i gave up on daapd, t'was too slow even on a LAN.... sorry.  i found mpd to be a much better experience.18:13
princej88what is mod?18:13
princej88mpd*18:13
arrrghhhmusic player daemon18:13
roaksoaxkirkland: ping18:14
arrrghhhplays music locally or streams it18:14
arrrghhhmany different interfaces to control it remotely18:14
arrrghhhincluding webui's18:14
princej88oh..i am currently using subsonic. will mpd come up in itunes?18:14
arrrghhhsubsonic is pretty sweet too.18:14
arrrghhhmpd come up in itunes?  i don't use itunes dude.18:14
arrrghhhif itunes can stream http streams, then it'll work.18:14
princej88that is the only thing i don't like about subsonic..no native iTunes integration..or any player integration. YOu have to use subsonic player18:14
arrrghhhi thought subsonic would stream18:15
princej88Okay, ill take a look at mpd.18:15
princej88it does..but you have to use a subsonic player18:15
arrrghhhi never went all-in on subsonic since they wanted me to pay for the app18:15
arrrghhhand i never could get it to work right on the trial, so why would i pay for it...18:15
princej88http://www.subsonic.org/pages/apps.jsp18:15
princej88you have to use one of those..I wish it would just play though iTunes like firefly used to.18:16
princej88anyone tutorials u recommend for setting up mod?18:16
princej88mpd*18:16
arrrghhhtheir website is quite good18:16
arrrghhhi also made one a long time ago18:16
princej88ok cool. i'll check it out. thanks guys for the help18:16
arrrghhhnot sure if it's still relevant or not, i had issues with aac encoded files with the version of mpd in the repo's18:17
arrrghhhnp, good luck.18:17
akhilhi18:22
akhili have a problem with dell18:22
=== dendrobates is now known as dendro-afk
akhili installed ubuntu 11.04 and ow i am not able to change my brightness.18:23
akhilcan anybody help?18:23
arrrghhhakhil, brightness...?  this is a server installation?18:24
akhilsorry18:26
akhilwhere should i ask for help regarding this problem18:27
akhilplz18:27
akhilanr irc client18:27
akhil*any18:27
arrrghhhakhil, if you're running Ubuntu Desktop, there's simply #ubuntu18:28
arrrghhh#ubuntu-server is geared towards the server edition - which comes gui-less.  no UI.18:28
=== dendro-afk is now known as dendrobates
j3d3my ubuntu 10.10 server has clients logging in to use software. when they print off a report locally is only giving then 1 ot 5 of their pages. anyone have any idea why?18:40
=== Ng_ is now known as Ng
=== pdtpatrick_ is now known as pdtpatrick
kirklandroaksoax: pong!18:51
uvirtbotNew bug: #917309 in openvswitch (universe) "brcompatd works with brctl delif but doesn't with addif" [Undecided,New] https://launchpad.net/bugs/91730918:56
cr3hi folks, if I build an ubuntu image in a kvm automatically with a preseed, might there be a simple way to kickoff a command automatically once the system reboots into the installed image?19:03
zulcr3: yeah there is the late_command19:06
cr3zul: so I'd create an upstart or xdg/autostart script in the late_command which would get executed after the system reboots into the installed system?19:07
zulcr3: it should19:08
cr3zul: I was hoping for something "simple", but that's not out of my reach. will do, thanks!19:08
cr3another question: might there be a convenient way for the kvm system to easily drop files onto the host system, ie the output of the command that'll get run. I guess I could mount a directory on the host filesystem in the libvirt.xml, right?19:10
zulcr3: yep19:11
RootChaosanyone have a good howto for ubuntu + lvs ?19:17
=== guntbert_ is now known as guntbert
skorvPsi-Jack: how do you setup the redundancy?19:53
cr3I'm trying to mount a directory on a kvm host from a kvm guest, so I have this in my libvirt.xml: se noai20:17
cr3a<filesystem type='mount' accessmode='squash'><source dir='/export'/><target dir='/export'/></filesystem>:se ai20:17
cr3not quite, this is what I really have:20:17
cr3<filesystem type='mount' accessmode='squash'><source dir='/export'/><target dir='/export'/></filesystem>20:17
cr3however, I have no clue how to mount that from the guest or whether that even makes sense20:18
Bogdanielumm can someone help uninstall mysql-server ? i'm having a strange error even if i removed it using apt-get remove mysql-server..20:46
arrrghhhdid you try purge?20:47
Bogdanielyes20:48
Bogdanieli tried20:48
Bogdanielbut umm when i do from terminal mysql i still get20:48
BogdanielERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)20:48
Bogdanieland that was the error why i tried a reinstall ..20:48
arrrghhhwas mysqld running?20:49
Bogdanielumm no i don't think so .. i didn't checked .. a little tired here .. :(20:49
Bogdanieli think it was running ..20:49
JDeagleHey can someone help me out with a network issue20:56
guntbert!ask | JDeagle20:58
ubottuJDeagle: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience20:58
JDeagleok, so i have this server with a virtual network interface, but everyone outside of the domain cannot access the webserver or vpn. I am not sure I have set up the virtual interface right, and I need to do a little ip masquerading20:59
JDeagle!patience20:59
ubottuDon't feel ignored and repeat your question quickly; if nobody knows your answer, nobody will answer you. While you wait, try searching https://help.ubuntu.com or http://ubuntuforums.org or http://askubuntu.com/20:59
arrrghhhlol21:00
guntbertJDeagle: to be honest I cannot understand what you did/what you want21:01
JDeaglelemme go into more detail21:02
JDeagleI need to setup a virtual interface, i need to route certain packets to the virtual interface. And I also need people to connect to the website that is setup. right now now one can connect to the server and thats what I need help with currently.21:07
kerframilJDeagle: that's a very long way from being detailed21:13
JDeagleok lets start with this, how do I allow incomming connections on a specific network interface?21:18
kerframilJDeagle: you don't need to, unless you have gone out of you to filter traffic using netfilter/iptables21:19
kerframilout of you way, I mean21:19
JDeagleok cause right now my server is not allowing incomming connections, what can i do to fix this21:20
kerframilJDeagle: how are you expecting your server to be reached? from where are you connecting, and to what? some information about your network topology would be beneficial.21:21
kerframilJDeagle: for example, you mentioned a 'virtual' inteface earlier but that could be taken to mean several things in practice. what's the device name and how was it brought up? what is its address and how does that fit in with your mode of connectivity and the manner in which you are currently trying to reach it?21:22
JDeaglelemme look for some documentation, the guy before me did not leave me with a good idea of what is going on. I do know that I need people to hit the web sever from a browser on eth1, the virutal device is setup as eth1:1. I am not quite sure what you mean by how it is brought up.  I do know that eth1:1 is beneficial in someform but I am trying to find what it does exactly21:27
zulls21:28
kerframilJDeagle: can you convey the address of eth1? (note: there's no security risk in wriing it here as long if it's a 'private' RFC 1918 mandated address as used in a LAN)21:28
kerframilwriting*21:28
kerframilJDeagle: or, to put it another way, does it begin with "10." or "192."?21:29
JDeagleits not a lan adderss. but it ends in .5, and teh virtual device is .1121:29
Rafaelcan i place a picture of my screen on pastebin so i can show what my screen shows at boot?21:29
kerframilJDeagle: can you just put the output of "ip addr show" in a pastebin? it woudl clarify a great deal.21:30
JDeagleyeah gimmie a min21:30
guntbertRafael:  Upload an image to http://imagebin.org/?page=add and post a link to it.21:30
kerframilJDeagle: also, you can check what netfilter is doing by running: iptables -S -t filter21:31
JDeaglewant me to put both of those on there?21:31
kerframilJDeagle: sure21:31
JDeaglehttp://pastebin.com/RHRpGP7Y21:33
Rafaelok ..maybe somebody can help me..i have ubuntu 9.10 on sofware raid md0-boot (raid1) , md1-swap (raid1), md2-system (raid 5), md3-home (raid 5), i have a crash and even though system appears to be working well i get the following screen at boot: http://imageshack.us/photo/my-images/215/20120116104650458.jpg/21:36
kerframilJDeagle: indeed, it doesn't appear to be reachable but there's no packet filtering occuring on this particular server. run this also: ss -ltn | grep :8021:39
JDeagle3 connections come up. on .11 .5 and .721:40
=== TomasBrincil is now known as snouman
kerframilJDeagle: is the server behind a firewall? what happens beyond the ethernet port?21:42
Glitchdis it cool to ask a question about filezilla in here?21:42
Glitchdi mean is it ok..21:42
JDeagleIt goes to the universities firewall, and they are suppose to allow the connection out.21:43
Glitchdanyone know if i need a seperate program for other to download from me if i use filezilla, or with filezilla take care of the downloading and uploading?21:44
Psi-JackGlitchd: FileZilla is just a client, not a server.21:44
Psi-JackAnd this is by far not related to server stuff.21:45
Glitchdso i would need "filezilla server" to make it a complete server then..21:45
Glitchdi know but i didnt know where else to ask21:45
kerframilJDeagle: tcpdump -i eth0 dst port 8021:45
PiciGlitchd: There is no filezilla server for Linux.21:45
GlitchdPsi-Jack, ^21:45
Rafaelcan somebody help me with my question21:45
Glitchdwhats your question?21:45
Pici!ftpd | Glitchd21:46
ubottuGlitchd: FTP servers: ftpd, proftpd, pure-ftpd, twoftpd, vsftpd, MuddleFTPd, wzdftpd - Graphical front-ends: PureAdmin, GProftpd (for GNOME), KcmPureftpd (for !KDE) - See also !FTP21:46
JDeaglekerframil: its sitting here listening.21:46
kerframilJDeagle: I'll attempt to make contact21:46
GlitchdPici, i know, but i couldnt find any other room that sounded like it would help me..21:46
JDeaglekerframil: Stuff is coming up21:47
kerframilJDeagle: ok21:47
Psi-JackHmmm...21:47
kerframilJDeagle: from virginmedia?21:47
JDeagleyeah21:47
kerframilJDeagle: well, that's a start21:47
PiciGlitchd: like #filezilla?21:47
JDeaglekerframil: is that a good thing?21:47
kerframilJDeagle: yes. it proves that the firewall is not impeding inbound traffic21:48
Psi-JackGFS2 over iSCSI, with the headache of GFS2 and growing at the main server whenever the time is needed.... Or NFS to XFS and allow for real live upscaling? ;)21:48
kerframilJDeagle: route -n21:48
kerframilJDeagle: is a 0.0.0.0 destination shown?21:48
JDeagleyeah twice21:49
kerframilJDeagle: twice? paste?21:49
JDeagle0.0.0.0         128.196.147.1   0.0.0.0         UG    100    0        0 eth121:49
JDeagle0.0.0.0         128.196.147.1   0.0.0.0         UG    100    0        0 eth021:49
kerframilJDeagle: check your outband path. can you ping something external?21:51
JDeaglelike googles dns?21:52
kerframilJDeagle: yep21:52
JDeagleyeah i can ping it21:52
kerframilJDeagle: are you able to access the webserver from where you are?21:56
JDeagleyeah everyone on the domain can get to it21:56
kerframilJDeagle: it could be that the outbound traffic is thwarted by the university firewall21:57
JDeaglewhat would i need to tell them to fix it?21:58
=== Madkiss_ is now known as Madkiss
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!