/srv/irclogs.ubuntu.com/2012/01/27/#ubuntu-server.txt

rbasaktrimeta: interesting. add-apt-repository has a remove option, but it doesn't look like it removes the key, though I'm not sure. If it doesn't, you can use apt-key to remove it, and I think it'd be reasonable to file a bug on that.00:02
adam_gmgw: what do you mean by firstboot script? the preseed/kickstart?00:02
trimetarbasak: add-apt-repository doesn't include a remove option on lucid...I think it was added in a later version of Ubuntu.00:03
mgwadam_g: no, just a script i need to run the first time the system boots after install00:03
mgwit will be retrieved via wget in the late_command00:03
rbasakah ok. I suppose it has to all be done manually then00:03
trimetaAt least, add-apt-repository --help doesn't say anything about removal.00:03
rbasakThe catch with key removal is that a single key might apply to more than one repository00:04
trimetaTrue...but I remember adding a key when I added this repository, so I think I'm probably safe in removing it.00:04
adam_gmgw: ah, no, i dont there is any convention around that, since it is outside the scope of cobbler itself at that point.00:04
mgwok, ty00:04
rbasakAnd I don't think there's a mapping kept anywhere, so removing automatically it isn't simple. It's reasonable to expect this functionality though00:04
rbasakfor your case, will apt-key del do?00:05
trimetaI think so...I checked apt-key list first, found the one which said "PPA for <dev who made the PPA I want to remove>", confirmed the key ID online at the place where I got the PPA, and apt-key del'ed it.00:07
trimetaAnd removed the /etc/apt/source.list.d/ files.00:07
aljosaanybody using glusterfs on amazon ec2/ebs or something similar?02:09
twb!anyone02:10
ubottuA high percentage of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll.02:10
aljosawhat to use on top of aws ec2/ebs to create a reliable distributed filesystem available to ec2 instances in a single aws region?02:12
twbDunno02:13
chelzaljosa: might look into ceph / cephfs -- https://en.wikipedia.org/wiki/Ceph02:29
uvirtbotNew bug: #922425 in mysql-5.1 (universe) "package mysql-server-5.1 5.1.54-1ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100" [Undecided,New] https://launchpad.net/bugs/92242503:30
realmagizhi all , i m using xchat for this IRC. I dont know how to start talking to someone whose name starts with Blk*03:59
realmagizin webchat.freenode.net, just type in first character and tab is ok03:59
chelzrealmagiz: try in #freenode04:01
realmagizchelz, what do you mean?04:01
chelzrealmagiz: your question, ask there04:01
realmagizchelz, sorry bro04:01
realmagizbtw, does someone know how to block wifi users using sub wifi home router to share their one connection to many?04:02
realmagizmy wifi router has no such feature of that control04:03
cloneMXHey all04:10
cloneMXHi have a problem, hope someone can helpme04:10
cloneMXrecently I installed ubuntu 11.04 server, but by some reason  some service just close the connections from some specific hosts (same subnet form my ISP or other that belong too), the specific efects are: after been logged with and ssh session this just stop showing  the output of a single command like "ifconfig" of if somene try to visit a resource from the apache server this connection is abruptly close and dont some any thing.04:10
cloneMXFirst I thought was my firewall config but I have some other server config with the same config but with the diference the version of ubuntu are 10.XX.04:10
cloneMXany clue?04:10
qman__this is most likely a hardware issue04:11
qman__if the connections work but drop at random, mid-command, hardware/drivers/kernel is the most likely suspect04:11
cloneMXwell could be04:12
cloneMXcause I got this new Nic04:12
cloneMXBroadcom Corporation NetXtreme BCM5723 Gigabit Ethernet PCIe04:12
qman__first step to verify would be to boot a different live CD and test04:12
qman__like a different distro or kernel version04:13
qman__if the problem goes away, it's probably kernel/driver04:13
cloneMXsame with debia 604:13
qman__if it doesn't, it's probably hardware04:13
cloneMXthe same efect04:13
cloneMXand I have 2 server04:13
qman__then it's hardware, check to see if you're running the same kernel version04:13
cloneMX3.xxx04:14
qman__have to be exact04:14
cloneMXhehehe04:14
cloneMXyea JK04:14
qman__but, if the problem is the same in a 2.6 kernel and a 3.0 kernel, it's probably the actual hardware, or a long-standing driver bug04:14
cloneMXI think you are right cause just before the login promt is display I got 4 massages like this04:17
cloneMX] netxen_nic 0000:10:00.0: eth1: set_features() failed (-5); wanted 0x601148b3, left 0x6011c8b304:17
cloneMXone for every ethx04:17
cloneMXis a 4 ports nic04:17
qman__check to see if/when that particular hardware support was added to the kernel04:18
qman__it's possible that that card was never really given support, but loads and operates (poorly) with a driver for other cards automatically04:19
cloneMXok04:19
qman__if that particular card does have support and has had it for a while, it's more likely that your hardware is actually bad04:19
cloneMXthe nic is the only Variable on my equation cause I got 2 servers with the same efect04:21
qman__same problem, same NIC?04:22
cloneMXyep04:22
qman__then it's probably the driver04:22
qman__either doesn't support it specifically or has some bug04:22
qman__you could file a bug against it if you find what driver it is and such04:22
qman__could also try other distros to see if it's only a debian-land bug or a linux in general bug04:23
qman__and check the hardware manufacturer's page to see if you can download and compile a driver which eliminates the problem04:23
qman__not a great long term solution but good for troubleshooting04:23
cloneMXok04:24
cloneMXjust as extra info04:25
cloneMXreading the kern.log04:25
cloneMXI got this04:25
cloneMX[   18.924671] ------------[ cut here ]------------04:25
cloneMX[   18.924673] WARNING: at /build/buildd/linux-3.0.0/net/core/dev.c:1328 dev_disable_lro+0x95/0xc0()04:25
cloneMX[   18.924675] Hardware name: ProLiant ML110 G604:25
cloneMX[   18.924676] netdevice: eth204:25
cloneMX[   18.924677] failed to disable LRO!04:25
cloneMX[   18.924678] Modules linked in: usbhid hid netxen_nic tg304:25
cloneMX[   18.924682] Pid: 313, comm: sysctl Tainted: G        W   3.0.0-15-server #26-Ubuntu04:25
cloneMX[   18.924683] Call Trace:04:25
cloneMX[   18.924686]  [<ffffffff8105e7cf>] warn_slowpath_common+0x7f/0xc004:25
cloneMX[   18.924688]  [<ffffffff8105e8c6>] warn_slowpath_fmt+0x46/0x5004:25
cloneMX[   18.924691]  [<ffffffff814eeaa5>] dev_disable_lro+0x95/0xc004:25
cloneMX[   18.924693]  [<ffffffff815572e4>] devinet_sysctl_forward+0x134/0x17004:25
cloneMX[   18.924696]  [<ffffffff811ccb74>] proc_sys_call_handler.isra.3+0xc4/0xe004:25
cloneMX[   18.924699]  [<ffffffff811ccba8>] proc_sys_write+0x18/0x2004:26
taipreswhoa there04:26
cloneMX[   18.924701]  [<ffffffff81168083>] vfs_write+0xb3/0x18004:26
cloneMX[   18.924704]  [<ffffffff811683aa>] sys_write+0x4a/0x9004:26
cloneMX[   18.924707]  [<ffffffff8160eb82>] system_call_fastpath+0x16/0x1b04:26
cloneMX[   18.924709] ---[ end trace 36b7aed031c3a3cd ]---04:26
taiprespastebin is your friend04:26
cloneMX[   18.924710] ERROR. Could not send configure hw lro request04:26
cloneMX[   18.924714] netxen_nic 0000:10:00.2: eth3: set_features() failed (-5); wanted 0x601148b3, left 0x6011c8b304:26
lifeless!pastebin | cloneMX04:26
ubottucloneMX: For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.04:26
cloneMXbut yes friend04:26
cloneMXprobs the driver04:26
cloneMXtnx04:26
cloneMXand sorry04:26
cloneMXhttp://paste.ubuntu.com/818463/04:27
cloneMXqman__ ty soo much letme see what happen04:29
cloneMXwell qman04:35
cloneMXI think you are right04:35
cloneMXhttp://blog.kurpanik.eu.org/?p=604:35
twb!enter04:35
ubottuPlease try to keep your questions/responses on one line. Don't use the "Enter" key as punctuation!04:35
realmagizwhat about my wifi issues?04:43
twbWhat about it04:52
smwudienz, I suggest following the "Auto-Identify to Nickserv at Login" instructions at http://www.linuxassist.net/irc06:01
smwudienz, when you join you are not cloaked06:01
udienzsmw: thanks for remind, i forget to configurint it at xchat06:04
uvirtbotNew bug: #903318 in juju "juju ssh fails on local provider: pty-allocation-request-failed-on-channel-0" [High,Confirmed] https://launchpad.net/bugs/90331807:21
=== smb` is now known as smb
Jeeves_Morning08:27
Jeeves_I'm fighting with Grub08:27
Jeeves_Anyone with clue how to fix this?08:27
Jeeves_https://p.6core.net/p/ej90ojgv3b2npz3u08:27
_rubenthat doesn't look good :/08:31
_rubensounds like an unhandled cornercase in the script08:32
Jeeves_It's two 3TB disks08:32
Jeeves_with GPT and RAID108:32
_rubendon't think i ever got ubuntu to boot from gpt08:33
_rubennever used >2TB disks, and when hardware raid is involved, i tend to carve out a small lun for the os08:34
_rubenand it's kinda annoying that debian-installer decides to go GPT for 2TB disks, even tho those are small enough to not use gpt08:35
Jeeves_I didn't use the installer for this one08:39
Jeeves_I debootstrapped it08:39
Jeeves_http://forums.funtoo.org/viewtopic.php?id=46708:42
Jeeves_That might help08:42
twb_ruben: that is a bug, #d-i said they'll look into it08:46
twb_ruben: specifically the bug is the cutoff is at 2GB instead of 2GiB08:47
twbEr, s/G/T/08:47
twbFWIW, I have seen GRUB2 boot Ubuntu (Lucid, IIRC) off BIOS/GPT combination before.08:48
twb_ruben: also run d-i with priority=low and you can choose the partitioning flavour08:48
_rubentwb: ah, nice to know08:50
twbAlso d-i will allow you to use a disk as a filesystem (no partitioning) if you mke2fs it first; this can be done from the shell on vt208:51
Jeeves_which was the key to get in the grub menu again?08:51
Jeeves_with grub2?08:51
Jeeves_Right control?08:51
twbThis is handy if you plan to partition withing md raid, or if you have a small (say 2GB) VM disk and want to be able to loopback mount it without bothering to calculate offsets or install kpartx08:52
twbJeeves_: shift or control; left is more likely to work08:52
twbEr, shift or alt, i think08:52
twbIn extlinux you can also use scroll lock, which is good because you can press it ahead of time, whereas hitting shift/alt in grub must be timed exactly -- after the BIOS finished, before grub finished :-/08:52
Jeeves_Yeah, they screwed that up08:53
twbI am a rabid anti-grub bigot08:53
Jeeves_Is there anything else?08:54
twbI'd have sold you on extlinux already except I don't know how to make it use GPT08:54
Jeeves_So that sucks too :)08:54
twbextlinux = syslinux = isolinux = pxelinux -- you've probably used it already, just not on hard disks08:54
Jeeves_my bios is acting up strangely with those big disks08:54
twbJeeves_: well, in theory extlinux can use gpt, I just couldn't get it to work in an hour with a non-EFI mobo08:54
twbJeeves_: try allocating /boot within the first 2TB08:55
Jeeves_twb: It is08:55
Jeeves_But my bios just doesn't see the disks, most of the times08:55
twbJeeves_: and make sure your GPT partitioner does whatever backwards-compatibility things the kids are into these days08:55
Jeeves_I used gdisk08:56
Jeeves_Which booted kinda fine the last time08:56
Jeeves_except that grub was whining about the 1.2mdadm /boot08:56
uvirtbotNew bug: #922473 in apache2 (main) "Typo mistake in description nearby DefaultType directive" [Undecided,New] https://launchpad.net/bugs/92247308:56
twbAh, good to know, I thought that issue was extlinux-specific08:57
twbNot much I can help you with; I've avoided the whole itanium clusterfuck (efi/gpt) until now...08:57
Jeeves_Yeah, well.08:57
Jeeves_cfdisk didn't do well with these disks08:57
Jeeves_fdisk didn't either08:58
Jeeves_and then someone said GPT08:58
Jeeves_which worked fine08:58
twbparted08:58
twbObviously you must use GPT on >2TiB disks08:58
Jeeves_except that grub didn't mention that it needed a small unused partition08:58
twbThat's because grub's an ass08:58
twbd-i should do the partitioning for you anyway08:58
Jeeves_I bootstrapped it08:59
twbI'm assuming you tried that (partman) first?08:59
twbOh right08:59
Jeeves_since my mobo wouldn't let me boot these disks and an usb disk at the same time08:59
twbanyway pub time, good luck08:59
_rubenput /boot on a stick and don't bother with having to boot from those disks :p09:00
mrevellMorning09:00
Jeeves_pub time!09:03
Jeeves_It's 10.00 AM!09:04
smbIt is always pub time ... somewhere09:05
Jeeves_:)09:05
Davieymrevell: o/09:19
mrevellHey Daviey09:20
sorenDaviey: Looking at http://bazaar.launchpad.net/~openstack-ubuntu-testing/+junk/jenkins-scripts/view/head:/tarball.sh ... Can you please stop building tarballs like that? Ideally, you'd use the ones we build, but failing that, can you at least build them in the same way as we do (python setup.py sdist)?10:16
sorenDaviey: If you don't, there's an important class of problems you'll never find. Specifically, required files that are not included in the tarball. You won't discover that until you build from the real tarballs, i.e. at the worst possible time: When it's too late.10:17
Davieysoren: Yes, that was identified yesterday and zul will make the change today.10:21
Davieysoren: Or, patches are very much welcome.10:21
dholbachhiya10:21
Davieyhey dholbach o/10:22
dholbachcan somebody help review http://mentors.debian.net/package/salt - technoviking and others have asked me for some help to get the package into Debian and Ubuntu10:22
dholbachI thought you'd probably know best how to handle a package like that10:22
sorenDaviey: I've already written that stuff once.10:25
sorenDaviey: That ought to be plenty.10:25
soren:)10:25
Davieysoren: patches/branches do tend to speak better than irc TBH :)10:27
sorenDaviey: a) I've already implemented all this once. b) I really can't be bothered writing patches for something if you're just going to reject them, so I prefer to ask if you have some sort of reason for not using the code I've already written.10:29
Davieysoren: No, zul needed to create a script that turns a git head into a tarball.  That is the approach he went for straight away, but it's all about incremental improvement, right?10:30
DavieyIt wasn't a decision to say, "lets not use soren's stuff"10:30
sorenHow could I tell?10:31
sorenI don't belive it's a surprise to you that we used to build packages per-commit.10:31
sorenSo you know the code already exists.10:31
soren..yet you start from scratch.10:31
sorenI can't guess at your motivation for that.10:31
Davieysoren: /where/ is that code?10:32
sorenEVerything we have automated lives at https://github.com/openstack/openstack-ci/10:32
sorenhttps://github.com/openstack/openstack-ci/blob/master/tarball_script.sh is what you want.10:33
Davieysoren: handy!10:34
sorenCan you understand my lack of motivation to help you write that same thing all over again?10:34
Davieysoren: Yes, Yes i can.10:34
sorenThere's also a script that does all the ppa magic.10:34
soren..but it maybe need more work to fit your needs.10:35
Davieysoren: right!10:36
sorenSince it's written to apply all the same packaging code on top of an upstream tarball for all the supported UBuntu versions. You probably don't care about anything older than Oneiric (or even Precise), and you probably don't want to apply the same packaging across the board (for SRU's and whatnot).10:36
Davieysoren: well, this also needs to work for stable PROPOSED changes.10:37
Davieyas in diablo/stable nova10:38
sorenDaviey: Precisely.10:38
sorenDaviey: THat's what I tried to hint at with the SRU thing, but I can see it was a bit convoluted.10:38
* soren heads to lunch early10:38
Davieysoren: wait 110:38
sorenok10:38
Davieysoren: If we make better reuse of what is there in openstack-ci, would you be interested in helping?10:39
sorenAbsolutely.10:39
Daviey\o/10:39
sorenI need to do something similar quite soon anyway.10:39
Davieysoren: for Quantum?10:40
sorenNo, for all the OpenStack projects. Just in a different environment.10:40
lynxmanDaviey: ping11:10
Davieylynxman: hola11:11
lynxmanDaviey: back in the grind, taking charge of the syslog bugs in Orchestra if that's okay for you sir11:12
Davieylynxman: is ipxe sorted now?11:12
Davieylynxman: what bugs are you looking at?11:13
lynxmanDaviey: ipxe had a review from jamespage and roaksoax, both suggesting different enhancements, so I'm doing all of them now11:13
Davieylynxman: yep, how are they going?11:14
lynxmanDaviey: bug #91991311:14
uvirtbotLaunchpad bug 919913 in orchestra "cron.d/remote_syslog_compress should skip .bz2 files" [Undecided,Confirmed] https://launchpad.net/bugs/91991311:14
lynxmanDaviey: will be done today11:14
Davieylynxman: Okay, just make sure you stay in sync with roaksoax - he is driving that part of it.11:14
lynxmanDaviey: I'll wait for him to get online to do that and a couple modifications on rsyslog config11:15
Davieycool11:16
Davieysoren: Does it make sense for us to use jenkins.openstack.org/milestone ?11:22
Davieythe bzr tree11:22
sorenDepends.11:24
sorenAre these packages for publishing at all or exclusively for your own tests?11:24
Davieysoren: just own tests, but for giggles - push to a PPA aswell.11:25
Davieyi think.11:26
soren:)11:26
sorenIf they ever hit a ppa, I think you should expect to use the milestone thing.11:26
sorenUnless you can come up with another versioning scheme that will correctly identify which versions should supersede which versions.11:27
sorenGood luck with that :)11:27
sorenOr are you really asking if you should be getting that information from there or from somewhere else?11:29
Davieysoren: right!11:31
DavieyShould we be reling on that branch for data11:31
sorenAh.11:31
sorenER..11:31
RoyKhttp://yfrog.com/z/0kdmijj11:31
sorenDaviey: Good question, really. There's a bit of a race condition there, isn't there?11:33
Davieyexacta-mundo.11:33
sorenttx: ping11:34
Davieysoren: gah, it's hard coded to use venv.. :(11:35
sorenttx: My tiny brain can't handle this right now.. Can you help? (read from Daviey's "soren: Does it make sense for us..." and onwards (around 20 lines up))11:35
sorenDaviey: Oh, is it?11:35
sorenThat's a newism.11:35
sorenShould be simple to revert.11:35
Davieyunless i'm missing the env variable11:35
Davieysoren: https://github.com/openstack/openstack-ci/commit/18a3500bddb70af5cbef5f4c83aa3991996597ac#tarball_script.sh11:37
koolhead17hi all12:16
* ttx looks12:39
ttxDaviey: what are you calling "jenkins.openstack.org/milestone" ?12:41
ttxapparently I need to read more backlog12:42
Davieyttx: Hang fire12:42
sorenttx: That's the bzr repo where we keep the milestone info. When you bump the milestone version on JEnkins, that's where the change lands.12:45
sorenSupposedly.12:45
ttxsoren: oh. so lp:~openstack-jenkins/milestone ?12:45
sorenNo.12:46
soren-> pm12:46
zulmorning13:17
rbasakhey zul13:30
rbasakzul: bug 879666, I can't find the console fifo patch in precise any more. What am I missing?13:31
uvirtbotLaunchpad bug 879666 in nova "chown error for console.fifo when launching vm" [Medium,New] https://launchpad.net/bugs/87966613:31
zuluvirtbot: i dropped it because it hasnt been accepted upstream yet13:32
uvirtbotzul: Error: "i" is not a valid command.13:32
zuldoh13:32
zulrbasak: ^^^13:32
tyskawhy apt-get update takes so long when i have a ppa repository listed on sources.list?13:32
rbasakok. I'm not sure it will be.13:32
rbasakthanks zul.13:33
rbasakzul: also you asked me to remind you about bug 873243 at the rally.13:34
uvirtbotLaunchpad bug 873243 in nova "nova-compute-xen depends on xen-linux-system which does not exist" [High,Fix released] https://launchpad.net/bugs/87324313:34
zulrbasak:  hmmm..13:34
zulrbasak: yeah still have to get the oneiric sru stuff13:34
therveDaviey, sorry, other there?13:44
Davieytherve: hey!13:45
thervecool :)13:45
Davieytherve: You have a patch for rabbitmq-server ?13:45
Davieytherve: Are you happy to create a debdiff?13:45
therveDaviey, sure that sounds like a good idea13:45
therveDaviey, against precise?13:45
Davieytherve: yeah, we always need to fix development version first, then consider an SRU13:46
thervecool13:46
Davieytherve: if you want a pointer, do ask.13:46
therveDaviey, which bug should I attach it too?13:46
therve#833073 maybe?13:46
Davieybug #83307313:47
uvirtbotLaunchpad bug 833073 in gdm "oneiric gdm picker list contains system user, rabbitmq" [Undecided,Confirmed] https://launchpad.net/bugs/83307313:47
Davieytherve: so there are a few bugs which shold have been marked as duplicates13:47
Davieypick one, and we'll make the others to dupe against it13:48
DavieyStevenK's might be best.13:48
thervesounds good13:49
uvirtbotNew bug: #916153 in libcgroup (universe) "libcgroup1 security issues" [Undecided,New] https://launchpad.net/bugs/91615314:01
uvirtbotNew bug: #922594 in openldap (main) "Assertion in slap_listener" [Undecided,New] https://launchpad.net/bugs/92259414:06
iclebytehas any one seen a scenario when building a software RAID1 array via the 10.04LTS installer in which when creating the first MD device the only partitions listed are sda1 and sda2 - no sda1 and sdb1?14:14
uvirtbotNew bug: #922600 in rabbitmq-server (main) "Upgrade rabbitmq-server to 2.7.1" [Undecided,New] https://launchpad.net/bugs/92260014:16
smbzul, for you enjoyment I filed bug 922486 and bug 922137. Also virt-manager seems to have some issues of reliably noticing guests _not_ running anymore. While I can see that in virsh (not yet filed a bug)14:20
uvirtbotLaunchpad bug 922486 in libvirt "libvirt boot race on xen hypervisor" [Undecided,New] https://launchpad.net/bugs/92248614:20
uvirtbotLaunchpad bug 922137 in xen-common "xm new depends on python-lxml" [Undecided,New] https://launchpad.net/bugs/92213714:20
zulsmb: lovely...thanks i think :)14:21
smbzul, My pleasure... :-P Well thought we should at least be aware14:21
smbThe depend thing is pretty lame/simple14:22
=== bladernr_afk is now known as bladernr_
cerberosHi, I'm trying to install nginx but getting nginx-light: Depends: libssl0.9.8 (>= 0.9.8m-1) but 0.9.8k-7ubuntu8.6 is to be installed15:32
cerberoswhere can I find this package? (google is not my friend)15:32
=== bladernr_ is now known as bladernr_afk
uvirtbotNew bug: #922650 in php5 (main) "Lucid needs the fix for PHP Bug #33210" [Undecided,New] https://launchpad.net/bugs/92265015:53
hallynstgraber: bug 922645, even though i usually hate set -e, i'm just gonna make lxc-ubuntu set -e.  It's working for me locally.15:57
uvirtbotLaunchpad bug 922645 in lxc "ubuntu template should fail on error" [High,Confirmed] https://launchpad.net/bugs/92264515:57
uvirtbotNew bug: #922645 in lxc (main) "ubuntu template should fail on error" [High,Confirmed] https://launchpad.net/bugs/92264515:57
hallynmaybe the backing store preferences should be specifyable in /etc/default/lxc16:13
* smb growls at whatever userspace change between yesterday and today broke his server16:13
smb 1486 ?        Z      0:00 [lockfile-remove] <defunct>16:14
smb 1583 ?        Zs     0:00 [avahi-daemon] <defunct>16:14
smb 1599 ?        Zs     0:00 [sh] <defunct>16:14
smb 1699 ?        Zs     0:00 [rc] <defunct>16:14
smb 1716 ?        Zs     0:00 [init] <defunct>16:14
smb 1983 ?        Z      0:00 [ipmievd] <defunct>16:14
smb 2022 ?        Zs     0:00 [xenstored] <defunct>16:14
smb 2026 ?        Zs     0:00 [xenconsoled] <defunct>16:14
smb 2059 ?        Zs     0:00 [xend] <defunct>16:14
smb 2508 ?        Zs     0:00 [start-stop-daem] <defunct>16:14
smb 2515 ?        Z      0:00 [lockfile-touch] <defunct>16:14
hallynthinking maybe i won't upgrade right now16:15
=== Lcawte|Away is now known as Lcawte
smbdoes not sound like a good idea16:15
smbtypical apha friday16:15
smb*alpha16:15
gary_posterhallyn, hi.  when you have a moment, I'm having trouble with an lxc precise container (within precise host).  it has internet connectivity but no dns.  There is no /run/resolvconf dir.  Any ideas on things to try?16:19
hallyngary_poster: how exactly did you create the container?16:21
gary_posterhallyn: sudo lxc-create -t ubuntu -n bbot -f /etc/lxc/local.conf -- -r precise -a i686 -b gary16:21
gary_posterI'll get you local.conf...16:21
hallynwhat is in /etc/lxc/local.conf?16:21
gary_posterhallyn, http://pastebin.ubuntu.com/818969/16:22
hallyngary_poster: and what does 'brctl show' give on the host?16:23
gary_posterhallyn, http://pastebin.ubuntu.com/818974/16:24
hallyngary_poster: btw, resolvconf doesn't get installed by default, so i wouldn't expect /run/resovlconf (i dont' have one either)16:24
gary_posterog!16:24
gary_posteroh16:24
hallyngary_poster: ps -ef | grep dnsmasq ?16:25
gary_poster/etc/resolv.conf should point to nowhere?16:25
hallynno...16:25
hallynit should get filled by dhcp16:25
gary_posterhallyn (from host) http://pastebin.ubuntu.com/818975/16:25
hallyngary_poster: my container and host look much like yours, and i have /etc/resolv.conf with: nameserver 10.0.3.116:26
smbhallyn, just to add resolvconf had been one thing that got updated and it threw away my manually created one16:26
hallynsmb: meaning resolvconf messed up your update?16:27
hallyngary_poster: you should see dnsmasq request from container in host's /var/log/daemon.log16:28
smbhallyn, At least it seems to be one part of the mess up16:28
gary_posterhallyn, I bet if I remove the broken symlink and add that file manually it will work.  But why wasn't it there to start with, is a question, I guess.  I'll start it back up16:28
hallyngary_poster: which broken symlink?16:28
smbhallyn, Had to add dns-servers and dns-search into /etc/network/interfaces16:28
hallynoh!16:28
gary_posterhallyn, /etc/resolv.conf16:28
hallyngary_poster: i think others (not in containers context) have seen that bug16:28
gary_posteroh ok16:28
hallynstgraber: ^ do you know offhand why /etc/resolv.conf would get created as a symlink?16:29
hallyn(without resolvconf installed)16:29
smbhallyn, It might be related that now /etc/resolv.conf is a softlink into /run/...16:29
apwgary_poster, is this inside your container ...16:29
hallyngah16:29
gary_posterapw, yes16:29
hallynsmb: is this brand-new?16:29
apwhallyn, resolvconf is now a depends on ubuntu-minimal or something16:29
stgraberhallyn: without resolvconf, no, but resolvconf is now the default :)16:29
gary_posteryes, resolvconf is installed in my container16:30
smbhallyn, It seems. At least this is the first time I got bitten. This morning boot was still ok16:30
gary_posterwithout my explicitly asking for it16:30
hallyn<sob>16:30
* gary_poster pats hallyn on the back16:30
apwhallyn, so this seem like the same result we are seeing in schroots ...16:30
stgraberhallyn: I'm still fixing breakage of that change in a bunch of different packages, so feel free to assign the bug to me and I'll look once I'm done with schroot, ltsp, dhclient and live-build ;)16:30
hallynstgraber: AFAIK there's no open bug yet.  should one be opened for lxc specifically?  i'd think this is a general bug...16:31
hallynapw: have you opened a bug for the schroot case?16:31
gary_posterok from perspective of user, you guys are on it, and I can manually change my /etc/resolv.conf .  I'm happy to help with filing or with testing if desired.16:31
apwhallyn, its tim's bug ... i'll ask him16:32
smbstgraber, /me wonders whether one can add xen to the list, too. At least I am broken in some strange way as well16:32
hallyngary_poster: thanks.  it *sounds* like i should trivially reproduce once my tests are done running here (i can't creat a container right now :)16:32
gary_posterheh ok16:32
stgraberhallyn: schroot will be fixed in the schroot hook16:32
hallynstgraber: what is the fix?16:33
stgraberhallyn: when entering schroot, /etc/resolv.conf will be removed and replace by the content of /etc/resolv.conf outside of the chroot16:33
stgraberhallyn: in the case of LTSP, I don't see why resolvconf wouldn't work in the container though16:33
stgraber*LXC16:33
apwstgraber, its a filesystem namespace just the same right ?16:34
hallynstgraber: ok, i'll investigate and see if a bug needs to be filed.  thanks.16:34
stgraberhallyn: running actions post debootstrap might be where we need to fix it (copying the host's content during the few apt-get we do, then restoring the symlink)16:35
stgraberhallyn: the resulting container should work fine with /etc/resolv.conf being a symlink16:35
hallynstgraber: ah, ok, i think we do the first part but we don't restore it16:35
stgraberwhich isn't true for schroot because it doesn't actually run any network configuration or call any upstart job (and so needs fixing in the hooks)16:35
stgraberhallyn: right, and cp /etc/resolv.conf $CACHE/etc/resolv.conf will fail (copying to dangling symlink)16:36
hallynstgraber: it isn't failling here though.  that's what has me confused16:36
apwstgraber, or worse it'll copy over your real resolv.conf16:36
stgraberhallyn: so you need to mv $CACHE/etc/resolv.conf $CACHE/etc/resolv.conf.orig && cp /etc/resolv.conf $CACHE/etc/resolv.conf && do our stuff && mv $CACHE/etc/resolv.conf.orig $CACHE/etc/resolv.conf16:36
hallynstgraber: right16:37
stgraberhallyn: oh, actually, no, don't cp, do "cat /etc/resolv.conf > $CACHE/etc/resolv.conf" or you'll end up copying the symlink from the outside, with the exact same result as you currently have ;)16:37
hallynheh16:37
apwhallyn, is your outside upgraded enough to have resolconf installed by default?  it was very recent16:38
apwmight be why you don't see it16:38
hallynapw: i did just update an hour or two ago...16:39
hallynbut, resolvconf is not installed.16:41
hallynstgraber: I'm going to test:  http://paste.ubuntu.com/819005/16:47
stgraberhallyn: that cat looks wrong seem like you're missing a >16:50
jcastrorobbiew: smoser: ok so the cloud.u.c AMI browser is gone now, we just send people to cloud-images.u.c16:50
stgraberhallyn: other than that, yes, that should work fine16:50
hallynha, yes indeed16:50
* hallyn watching debootstrap creep by16:51
hallynsmoser: SpamapS: does any code you own or know of currently rely on 'lxc-is-container'?16:58
* rbasak wonders if there's a full text search capability of the entire archive source17:00
Davieyrbasak: it's called grep.17:01
uvirtbotNew bug: #922706 in lxc (main) "handle /etc/resolv.conf being a symlink in lxc-ubuntu template" [High,Confirmed] https://launchpad.net/bugs/92270617:01
rbasak:)17:01
Davieyzul: have you touched the keystone ci job?17:01
=== JanC_ is now known as JanC
zulDaviey: no17:02
rbasakDaviey: you'll let hallyn know then? Will grep give you an answer before the release? :-)17:02
Davieyzul: looks like we have a name clash then17:02
Davieyrbasak: hah :)17:02
zulDaviey: hmm?17:02
Davieyrbasak: ISTR jodh was looking at a full text search tool.17:02
hallynstgraber: hm, resolvconf fails to start though, presumably something to do with /run setup17:03
hallynrbasak: ?17:03
rbasakit would be awesome to have a web-based searchable archive source browser17:03
stgraberhallyn: fails to start in a container or at install time in debootstrap?17:03
rbasakhallyn: sorry, nm17:03
hallynstgraber: fails to start in container.  (status stopped)17:03
zulDaviey: repopro problems17:04
hallynwhen i 'start resolvconf' it all starts fine17:04
hallynbefore i started it, i had: /etc/resolv.conf -> /run/resolvconf/resolv.conf17:04
hallynso i think i will push the fix i have so far.17:04
Davieyzul: how could reprepro be to blame?17:05
stgraberhallyn: can you try: lxc-start -n container -- /sbin/init --log17:05
Davieyzul: it is a filename clash17:05
hallynok17:05
stgraberhallyn: and then look at /var/log/upstart/resolvconf.log for the problem?17:05
Davieysomehting put it into the pool, zul :/17:05
zulnot sure17:05
zulDaviey: well its not red anymore17:06
hallynjjohansen: did the apparmor fix for pivot_root get into the kernel this week?  cause if not i think i'll push another profile to work around it.17:07
hallynstgraber: note that resolvconf didn't start, but ssh did - so i'm not getting a console, but i can ssh in :)17:08
Davieyzul: did you do something?17:08
zulDaviey: nope17:08
Davieyhmm17:08
Davieyzul: i retriggered the job17:08
hallynstgraber: /var/log/upstart exists, but no resolvonf in there17:08
zulDaviey: ok17:08
hallyndoh17:08
hallynstgraber: resolvonf starts on mounted=/run, silly!17:09
stgraberhallyn: oh, ok, so it just doesn't start in our case ;)17:09
hallynstgraber: so until we get rid of lxcguest (next week), what do you think we should do?17:10
hallyni guess lxcguest.conf can just 'start resolvconf'17:10
hallynor emit MOUNTED=/run17:10
stgraberhallyn: I had a similar issue in friendly-recovery yesterday, I went with "initctl emit mounted MOUNTPOINT=/run"17:11
hallynstgraber: lxcguest is the right palce to do that you think?17:11
hallynoh, no17:12
hallynlxcmount17:12
stgrabershould be lxcmount until we kill it (hopefully in a few days, we just need the new linux-meta now)17:12
=== bladernr_afk is now known as bladernr_
hallynyay, success17:16
hallynstgraber: at this point the lxc commit is big enough i'd like a review - do you have time to review a bzr merge request?17:16
hallynif not, well it works here so i'll push.17:16
hallyn(cause you look BUSY)17:17
stgraberhallyn: sure, I can have a quick look17:17
stgraberhallyn: yeah, I'm busy, but LXC is part of the list of things that need fixing because of resolvconf ;)17:17
hallynstgraber: merge request sent17:18
hallynstgraber: so i guess i'll wait for monday to talk to you and jodh about the upstart merge request for lxcconsole :)17:18
lynxmanjamespage: ping17:19
jamespagehey lynxman17:19
lynxmanjamespage: hello o/17:19
lynxmanjamespage: I'm trying to bzr merge-upstream and I get an error saying that it's already merged17:19
lynxmanjamespage: could this be an issue with the version numbering?17:19
jamespagemight be17:19
lynxmanjamespage: http://pastebin.ubuntu.com/819049/17:20
jamespagelynxman, please can you pastebin the output of bzr tags17:21
lynxmanjamespage: sure17:21
lynxmanjamespage: http://pastebin.ubuntu.com/819051/17:21
stgraberhallyn: looking17:24
lynxmanjamespage: it did everything except the commit17:26
jamespagelynxman, hmm - it looks like a bug in bzr17:29
lynxmanjamespage: heh :)17:29
lynxmanjamespage: so what do you suggest17:29
jamespageif I alter the upstream version number to start with 1.0.0+git-3. instead of 1.0.0+git-2. it works OK17:29
jamespagelynxman, drink lots of hard spirits17:30
lynxmanjamespage: heh :)17:30
lynxmanjamespage: that's the plan anyway :D17:30
lynxmanjamespage: will do that, thanks17:30
jamespagelynxman, actually it might be something else17:31
jamespagehttp://pastebin.ubuntu.com/819051/17:31
jamespagethe order of the branches is weird17:31
lynxmanjamespage: it really is17:31
jamespagelynxman, dpkg --compare-versions 1.0.0+git-2.55f6c88 gt 1.0.0+git-2.149b50 && echo OK17:31
jamespageno OK :-(17:32
lynxmanjamespage: *sigh*17:32
lynxmanjamespage: will push to 3 then17:32
jamespagelynxman, that should do it17:32
lynxmanjamespage: thanks17:33
jamespagelynxman, that version number is well wonky!17:33
Davieyerm.. just make sure you don't make it so we cannot sync again :)17:33
lynxmanjamespage: it is :)17:33
lynxmanDaviey: can I call it "dorothy"?17:34
Davieyno.17:34
lynxman*pouts*17:34
jamespageDaviey: thats a good point17:34
lynxmanDaviey: what would you suggest?17:35
* jamespage scratches his head17:35
jamespageI hate git snapshots....17:35
lynxmanDaviey: tried to contact the debian packager but he didn't reply17:36
Davieyjamespage: if $date-$githash is used, we are all good17:36
jamespageDaviey: if that where but the case17:36
jamespageit looks like $number.$githash in this case17:37
Davieyyeah17:37
Daviey$number is like an epoch it seems17:37
jamespagekinda17:37
Davieyso17:37
Davieywe need to make git-2.55f6c88 > git-2.149b5017:38
Davieywhich it is17:38
jamespagesighs17:39
Davieyoh wait17:39
jamespagedpkg --compare-versions 1.0.0+git-3.55f6c88-0ubuntu1 gt 1.0.0+git-2.149b50-1ubuntu4 && echo OK == OK17:39
Davieyyep17:39
jamespageI think the issue is with the version parser in bzr17:40
lynxmanDaviey: jamespage: so everybody agress to just jump to 3?17:40
Davieyi think it's the git"-"217:40
jamespageits getting confused17:40
stgraberhallyn: looks good17:40
Davieyjamespage: it's not bzr's fault.17:40
jamespageDaviey: well maybe17:40
jamespageas I said the upstream versioning is wonky17:41
hallynstgraber: thanks, pushing17:41
jamespageDaviey, lynxman: I think you have to go for the 3. option17:42
hallyngah - banshee kills my cpu again  (and i don't notice for awhile figuring it's a compile running long)17:43
jamespageDaviey: we could upload as is as the package version string fix it - but the package importer will fail with the same issue17:45
Davieyjamespage: 1.0.0+git-2.20120127.55f6c88-0ubuntu1 ?17:45
Davieyjamespage: bzr isn't to blame here.17:45
lynxmanDaviey: that'd be cool but would break our compatibility with debian wouldn't it17:46
Davieylynxman: no17:46
jamespageI think Davieys suggestion is the best17:46
Davieyhmm17:46
Davieyif DM gores to git-3. we are good.17:46
jamespagelets face it - its an edge case due to poor use of git snapshot versioning17:46
Davieyif they go to one digit above, git-2.149b50 yes - we are not good17:47
Davieyjamespage: right17:47
jamespageI'd prob go with 1.0.0+git-2.20120127.55f6c88-0ubuntu117:47
jamespageand deal with fallout as an when it happens17:47
lynxmanDaviey: thats why, I think we should try to contact the debian packager again, maybe by mail17:47
lynxmanDaviey: or just do what jamespage suggests17:47
jamespagelynxman, well its worth trying; if you could move to the $date-$hash format it would help alot17:48
lynxmanjamespage: completely agree17:48
jamespageDaviey: is ipxe mega urgent?  or can lynxman take a bit of time to get a more effective long term resolution17:49
Davieyif he could move to, 1.0.0+git.20120127.55f6c88 - would be best17:50
Davieyremoving the first - aswell.17:50
jamespageagreed17:50
DavieyAnyway, it's not as urgent as it was.17:50
jamespageanyway have to shoot - have a good one folks17:50
Davieyo/17:50
Davieyhave a good weekend jamespage17:50
lynxmanjamespage: have an amazing weekend17:51
lynxmanDaviey: so try to contact debian packager, if not move to just date.hash?17:51
Davieylynxman: right17:51
lynxmanDaviey: cool :)17:51
lynxmanDaviey: emailed him17:54
NTHLHi, I'm on Ubuntu 10.04 server version, DCMTK in 10.04 is not the latest so I downloaded the latest .deb file. I then do "sudo dpkg -i dcmtklatest.deb" and "sudo apt-get -f install" but it didn't succeed. It still tells me that it has removed the old DCMTK and the latest DCMTK is not installed. Someone please advise me on what I should do to properly install the latest DCMTK on 10.04 !!!!18:15
NTHLdoes any1 see my message? cuz other than seeing who joined and quit,  I'm not seeing anything else18:17
NTHLI got no problem in #ubuntu18:17
=== Pici is now known as Guest34884
uvirtbotNew bug: #922417 in glance "5x files into /etc/glance missed from PPA install" [Undecided,Invalid] https://launchpad.net/bugs/92241718:31
SpamapSadam_g: hey, would bumping rabbitmq from 2.6.1 to 2.7.1 cause you any trouble? Seems like we should try and get the latest stable release into precise before Feb 16 FF18:32
adam_gSpamapS: i was just about to go look at that.. but no, i dont see any reason why it would cause any problems18:37
adam_gSpamapS: if you wanna stuff the packages in a PPA somewhere, id be happy to give it a test with charms + nova first18:39
davidl_Hi there...  looking for a little hep with rsyslog. (mine config doesn't seem to be working... log files are not updating).  I have a vanilla 11.10 Server AMD64 install.  I've done an apt-get update, apt-get upgrade, apt-get install octopussy (which is a web based log analyzer).  Not getting any log data and it looks like rsyslog isn't working.  Suggestions?  TIA.18:47
SpamapSadam_g: I gave it a quick shot, but the branch is messed up..18:55
SpamapSmissing upstream-2.6.118:55
kalosaurusrexHas anyone heard of an issue where if the cd-rom drive is not detected during the server/alt install that the installation will fail? (via usb install) I looked and haven't found a defect..19:09
=== kalosaurusrex is now known as albrigha
adam_groaksoax: im merging a new version of facter, were you able to look at getting the processor fact to detect ARM?19:12
roaksoaxadam_g: not yet, was planning to work on it tis weekend lol19:15
adam_groaksoax: can you pastebin /proc/cpuinfo from an ARM board if its handy?19:17
=== Guest34884 is now known as Pici
roaksoaxadam_g: i'm not in the US atm and I'm gonna try to get19:18
roaksoaxadam_g: don't have a pandboard with me, but gonna try to get ssh access into one19:21
stgraberhallyn: I just uploaded a new resolvconf changing its behaviour in chroots (non containers) a bit, that shouldn't break your fix though (just potentially make it pointless)19:21
stgraberhallyn: the new behaviour is not to convert to a symlink at install time but instead touch /var/lib/resolvconf/convert and have the upstart job create the symlink19:22
stgraberhallyn: so on a regular system this will happen immediately (as the package starts the upstart job) but in a chroot, it'll fail and will give you a regular resolv.conf, until this chroot is booted (which is the case for install chroots and containers)19:23
Darkwingspamaps so... it happenedgain lol19:23
Darkwinghappened again19:23
SpamapSDarkwing: muhaha, you'll never get your shirt!19:23
Darkwinglol19:23
Darkwingoh well :P19:24
SpamapSIt was in my bag on Sunday19:24
SpamapSbut I was only there for an hour and didn't see you.. or if I did, I forgot about it19:24
DarkwingI did four interviews on sunday19:24
hallynstgraber: lxc-ubuntu grants access to c 5:0.  i'm going to take that away.  it's waht lets contianers mess with my xmodmap settings, and container's console is not 5:0 anyway19:25
DarkwingIncluding Disney Animation... speaking of, part of that conversation was about Ubuntu vs Red Hat for their servers...19:25
stgraberhallyn: not quite sure why we allowed that to start with...19:26
hallynbig stick?19:27
hallynnow i'm trying to figure out which of my proc/sys apparmor denials is stopping initctl19:27
adam_groaksoax: oh, i didnt' realize https://launchpadlibrarian.net/89070344/processor.diff19:28
stgraberhallyn: do you have dbus in that container?19:33
hallynwtf - sysrq-trigger denial is stopping initctl?19:33
hallyni think so19:33
hallynyou mean the packaged called dbus?19:34
stgraberyeah19:34
hallynno19:34
hallynshould it be installed by default?19:34
stgraberno, it's just one of the ways initctl talks to upstart19:34
stgraberso in your case it means it's talking directly to it without using the system bus19:35
hallyni just installed it to see if it makes a difference19:35
stgraberroot@test01:~# echo h > /proc/sysrq-trigger19:35
stgraber-bash: /proc/sysrq-trigger: Permission denied19:35
stgraberroot@test01:~# initctl start hostname19:35
stgraberhostname stop/waiting19:35
hallynbut why does it need sysrq-trigger to run initctl?19:35
stgraberso doesn't seem to be linked to sysrq-trigger, at least not on my machine :)19:35
stgraberit doesn't, at least for me19:36
hallyni'm playing with http://people.canonical.com/~serge/lxc.apparmor19:36
stgraberhallyn: mine is "rwklx", not sure if denying read access too makes a difference19:37
hallynwith all lines except sysrq-trigger uncommented, it works.  with sysrq-trigger denied, i do get ssh and dhclient workign; but no console19:37
hallyni'll try19:37
hallynstgraber: btw denying 5:0 also stops it mucking with my sound level19:38
hallynyeah, either i'm being impatient, or adding 'r' to deny for sysrq-trigger fixes it19:38
hallynwell it's not jsut patients - i get a msg about initctl denied19:39
hallyninitctl: Event failed19:39
hallynstgraber: and when i deny r, i do not get that msg.  fascinating!19:40
hallyn(had to re-check since getty idiotically clears the screen)19:40
hallynstgraber: so with new http://people.canonical.com/~serge/lxc.apparmor lxc with apparmor is working for me.19:41
stgraberhallyn: cool. I'm sure we'll want to tweak a few things but that's a really good start.19:42
stgraberhallyn: and the sooner we have it in Precise, the more we'll catch before release19:43
hallynstgraber: yeah i won't push it right away :)  i'm hoping for mount restrictions19:43
hallynhm, well, should i try to push it monday?19:43
hallynand, do you think 5:0 fix is worth pushing today?19:43
* hallyn thinks of the poor buildds19:43
stgraberpushing the apparmor stuff on Monday sounds good19:44
stgraberaccording to https://launchpad.net/builders/ the builders are sleeping :)19:45
hallyneh, maybe i should risk today then...19:46
stgraberactually, we should have the new kernel on Monday, so we should also be able to try and drop lxcguest :)19:47
* hallyn hoping19:47
hallynwell, i've stashed it in lp:~serge-hallyn/ubuntu/precise/lxc/lxc-apparmor for now.  will test more tomorrow and push monday.19:50
hallynman i'm full of typos today19:56
hallyni'd say butterfingers, but then i might eat them19:56
Davieyi'm full of hypo's today :)19:56
hallyn:)  <crunch>  d'oh!19:59
Davieyadam_g: I'm going to stop sponsoring your work, and suggest others do aswell.20:05
adam_gDaviey: its that time, huh?20:05
hallyn"sink or swim" ?20:05
Davieyadam_g: Apply for damn upload rights :)20:05
hallynDaviey = mean daddy20:05
Davieycruel to be kind :)20:06
hallynall right, package built and installed, lxc with apparmor working great.  \o/20:06
hallynstgraber: btw in case i haven't mentioned, https://code.launchpad.net/~serge-hallyn/ubuntu/precise/upstart/upstart-containers was my tree for putting lxc consoles into upstart.20:08
hallynbbl20:08
Davieyadam_g: doesn't d/rules seem a little verbose?  http://pb.daviey.com/NJba/ debian->ubuntu20:10
uvirtbotNew bug: #922788 in facter (main) "Please merge facter 1.6.4-2 (main) from Debain testing (main)" [High,New] https://launchpad.net/bugs/92278820:12
stgraberhallyn: any problem with having lxcconsole.conf be "start on container"? I'm also not too sure about whether upstream upstart will want the running-in-container script as part of the upstream code but that's something to discuss with jodh20:18
hallynstgraber: i think start on continer is fine...20:19
adam_gDaviey: compared to debian? yes, it has been since oneiric: debian/rules: use what we had in natty; we don't want ruby-pkg-tools in main20:24
* adam_g lunch20:26
=== skrewler_ is now known as skrewler
zuladam_g: i think it might be a good thing to have ruby-pkg-tools in main, since the devops people seem to like ruby20:45
roaksoaxzul: has it ever been in main?20:46
zulroaksoax: no but it will make life easier down the road me thinks20:46
roaksoaxzul: eventually, yes20:47
adam_gzul: does that include gem2deb as well?20:53
zuli think so20:53
zuli havent looked at it recently20:53
stgraberhallyn: confirmed LXC still works with resolvconf -1ubuntu5 (clean template and new container)21:05
uvirtbotNew bug: #922232 in nova "Volumes fail to attach without discovery using tgt" [Undecided,In progress] https://launchpad.net/bugs/92223221:11
adam_gzul: did the ec2 cert nova stuff make it into e3?21:52
zuladam_g: for keystone?21:53
adam_gzul: the new nova service to allow euca-upload-bundle to work21:54
zuladam_g: ah yes...21:54
adam_gzul: into the e3 ubuntu packages?21:55
zulyeah its the nova-cert daemon/package21:55
adam_gah, cool thanks21:56
Davieyzul: How did you get on switching the git creation stuff?22:10
Davieyroaksoax: Any news on those NEW packages (oops et all)22:11
Davieyadam_g: Are you looking to wrap more tests into the CI?22:11
Davieyvish suggested the exercise stuff from devstack tree?22:11
adam_gDaviey: doing that right now. we're already using the euca exercise test from devstack as our simple test. im going to create a seperate test for the devstack tests that we can trigger from the main precise-openstack-test job. the same for tempest, at some point22:14
Davieyadam_g: will you have time before EoW to get that live?22:15
DavieyDon't panic about it, few upstream commits happen over the weekend... just curious22:15
WomkesWhat kind of firewall would you guys recommend for a simple LAMP ubuntu server that is going to serve some websites, maybe later e-mail hosting.22:18
adam_gDaviey: the devstack stuff, yeah.22:19
Davieyadam_g: you really float my boat, you know that?22:19
adam_g:)22:19
DavieyWomkes: ufw22:19
Daviey!ufw | Womkes22:19
ubottuWomkes: Ubuntu, like any other Linux distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command - see https://help.ubuntu.com/community/UFW | An alternative to ufw is the 'iptables' command - See https://help.ubuntu.com/community/IptablesHowTo | GUI frontends such as Gufw (GNOME) and Guarddog (KDE Lucid and Maverick) also exist.22:19
adam_gDaviey: tempest is at least runnable against the cluster again, but lots of test fail and it takes ~35 mins for a full run. rather hold off turning that on for a while22:19
Davieyadam_g: yeah22:20
WomkesThanks Daviey, looks like exactly like what I was  looking for22:21
Womkeseasy way to give access to services22:21
Womkeshttp/mail/dns22:21
DavieyWomkes: try, sudo ufw allow http22:22
Davieyetc22:22
WomkesWhat would you do as common practise security measures after installing a ubuntu server with the LAMP stack. I was thinking about (1) firewall (2) unattened-upgrades and (3) rkhunter?22:22
WomkesIts a simpel server for myself to host some PHP stuff im working on22:23
Womkesand php with suhosin22:23
RoyKWomkes: why rkhunter? if the server is just installed, there really shouldn't be much chance for a rootkit22:24
kerframilWomkes: make sure MySQL is bound only to the loopback interface (probably will be by default though)22:24
RoyKbtw, chkrootkit might be just as good22:24
RoyKor make sure mysql isn't installed :P22:25
WomkesI need mysql :)22:25
RoyKuse postgres :P22:25
Womkesso only accessible through the 127.0.0.1 TCP not via the socket?22:25
RoyKIIRC default mysql install listens to localhost only22:25
RoyKsocket is local anyway22:25
kerframilWomkes: you can use unix domain sockets only if you like22:25
RoyKso that should be even better22:25
Womkesyeah, I don;t need outside access for the mysql22:25
WomkesAlthough its onlyh for myself for testing, I do want it to be secure22:26
RoyKufw allow ssh && ufw allow http && ufw enable22:26
kerframilWomkes: having TCP access can be helpful though22:26
Womkesmaybe allow from my home IP or something22:26
RoyKkerframil: for localhost, yes...22:26
RoyKWomkes: why?22:26
WomkesWell, could come in handy for development22:26
WomkesSQL tools22:26
Womkesinstead of phpmyadmin22:27
Womkesi like heidisql22:27
kerframilWomkes: it's not a given that domain sockets scale better either. something to bear in mind.22:27
RoyKWomkes: if so, make sure you don't allow any IP to connect to mysql - use ufw22:27
Womkesyeah exactly, limit mysql to my IP22:27
kerframilWomkes: don't do that. you an access mysql trivially with an ssh tunnel.22:27
Womkesah yes, haven't thought about that22:27
RoyKufw allow ... ^W^W^Wman ufw22:27
Womkesthanks for the input22:28
Womkesim uploading ubuntu server image to my vmware datastore now, soon as its done i will install it :)22:28
kerframilWomkes: ssh works great as an ad-hoc VPN for basic TCP forwarding. for anything more demanding, openvpn is good.22:28
RoyKimho ssh is good for most use given sufficient bandwidth22:29
Womkesafter I got this going I was thinking about trying to setup my own mailserver with some webmail. Been looking into webmail solutions so far roundcube looks pretty nice22:29
kerframilWomkes: speaking of ssh, consider using pubkey auth only22:29
* RoyK logs into his bacula server with ssh and starts bat over a wan link to check backup status22:29
kerframilRoyK: yeah, it does the job for ad-hoc stuff22:29
Womkesany of you got recommendations for IMAP and SMTP server?22:29
kerframilRoyK: for MySQL, compression is helpful22:30
RoyK!mail22:30
ubottuMail is another medium to communicate. Ubuntu mailing lists can be found at http://lists.ubuntu.com22:30
Womkesive used hm22:30
Womkeswhat was it (thinking)22:30
RoyKkerframil: ssh compression is generally useful imho22:30
kerframilWomkes: dovecot for imap, by far. for smtp, I like postfix but exim is reportedly good. don't like sendmail.22:30
RoyK!postfix22:30
ubottupostfix is the default !MTA and !MDA on Ubuntu. For help, read https://help.ubuntu.com/community/Postfix and https://help.ubuntu.com/community/PostfixBasicSetupHowto - See also !MailServer22:30
RoyK!dovecot22:30
ubottuIMAP and POP are protocols for fetching email. The officially-supported server in Ubuntu is Dovecot (packages "dovecot-imapd" for IMAP, and "dovecot-pop3d" for POP) - See also !MailServer for information on the SMTP protocol22:30
WomkesIve used cyrus before22:30
WomkesAnd exim22:30
RoyKdovecot/postfix is "preferred" on ubuntu22:30
* RoyK uses Zimbra22:30
kerframilWomkes: dovecot is so much better than the other imap servers; there's really no comparison22:31
WomkesBut happy to expand my horizon a bit to learn maybe better packages22:31
Womkesok, dovecot sounds good, and would you recommend for smtp server?22:31
RoyKpostfix is good22:31
RoyKimho the best mta out there22:32
kerframilWomkes: my vote would go for postfix22:32
Womkesok, well both are new for me, cyrus and exim i've used, so happy to learn somethign else :)22:32
RoyKbut then, I have close to zero experience with exim, so I can't really compare the two22:32
* RoyK moved directly from sendmail to postfix22:33
Womkeswell, I'm kind of looking to what work well with ubuntu too of course. don't want to stray to far from home in that regard22:33
Womkesmakes it easier to find howto's22:33
RoyKtrue22:33
WomkesYeah, I use Zimbra at my work also, but that seems like a pretty hefty application22:34
RoyKit's pretty heavy22:34
Womkesworks fine22:34
RoyKlots of java sniplets etc22:34
Womkesbut this is just for personal use and to learn a bit more22:34
RoyKbut fucking brilliant for a lazy admin :D22:34
RoyKanyway22:35
WomkesAfter I got that all setup need to think about a backup method :P22:35
RoyKdovecot isn't hard to manage22:35
RoyKdovecot backup is just file backup22:35
WomkesI still have two Dell R300 server laying around here. I was think about maybe installing xen on both of them and mirror eachother22:35
RoyKzimbra backup is not that easy, with open database files etc22:35
Womkeseventually I want to use the server to host my personal e0-mail also22:35
RoyKwhat's in the r300?22:36
Womkesby that time I want to have my data secured of course22:36
* RoyK doesn't know dell too well22:36
Womkeslike a quad core 2.4 GHZ and 8 GB memory22:36
Womkes1 hdd but I can put another in22:36
WomkesI got two identical ones22:36
Womkesand I can colocate them in a datacenter with a friend of mine free of cost22:37
Womkesthat's why im trying to learn a bit more22:37
Womkesfirst with a vmware for some testing22:37
RoyKso all you need is a good box with a truckload of disks and openindiana/zfs for storage? :D22:37
Womkeswell, :D22:37
Womkeswas thinking about some kind of redundant setup with the two server22:37
Womkeswhich keep the data in sync22:37
Womkesdoesn't have to be like super active with automatic failover or anythiugn like that22:38
Womkesjust when one server dies I can put the other one online without loosing al my data (personal mail and stuf)22:38
RoyKI'd vouch for shared storage22:38
WomkesI've been reading about DRDB22:38
Womkeswith xen22:38
RoyKdrbd works too22:39
Womkeswell I don;t have  a seperate storage server22:39
Womkesjust the two dells22:39
Womkeswhich I can put in software raid 122:39
RoyKthen drbd is probably a good choice22:39
RoyKdrbd is essentially mirroring over IP22:39
Womkesyeah, and then keep the disk images for the xen vm's in sync22:39
Womkesthat i what im thinking22:39
RoyKso used with pacemaker ...22:39
Womkesbut doesn't have to be full automatic, no need for virtual IP's or anythign like that22:40
Womkesi'm happy to just add the IP of the primary server to the secondary if the primary fails22:40
Womkesand then fire up the xen vm again22:40
Womkesthat should work right ?22:40
WomkesI'm looking to avoid any hassle of making backups of the file system and database22:41
NeoNetNinjaI don't mean to interrupt but I would just like to thank all of you in #ubuntu-server for making the most amazing and useful server operating system EVER! Giga-props and much respect to you all!22:41
Womkesthat seems a bit to complicated for me at this time22:41
WomkesTHen I need to figure out which directories/files I need to backup22:41
uvirtbotNew bug: #922646 in parted (main) "precise alternate LVM failed to install: no root file system" [High,Triaged] https://launchpad.net/bugs/92264622:41
Womkesand have a better restore plan22:41
WomkesSo, ufw for firewall, dovecot and postfix for mail, roundcube for e-mail, xen + drdb for redundancy22:42
Womkeslooks like a nice project :)22:43
roaksoaxDaviey: i'm packaging them from pypi and are pretty simple. Should have them by monday/tuesday22:43
roaksoaxDaviey: depending on how much I work on them this weekend22:43
Womkesthanks for the help guys22:44
roaksoaxDaviey: i'll let you know as soon as they are ready for you to review22:44
NeoNetNinjaI was amazed how easy it was to configure 802.3ad...22:46
=== bladernr_ is now known as bladernr_afk
NeoNetNinjaI building another server and will be using US...22:46
NeoNetNinjaI'll be able to backup my entire network and then backup the server in the cloud all with Duplicity22:47
NeoNetNinja:)22:47
NeoNetNinjavia FTP22:47
Womkesat my work they recentlyh setup a new cloud platform with onapp, some sysadmins did presentation last week22:47
Womkesthat was really really nice22:47
Womkesvery impressed by the whole setup22:47
Womkesand for backup they use r1soft, had the priviledge of myh collegeau showing how that work also22:49
Womkesamazing backup system22:49
NeoNetNinjacool22:49
Womkescool story bro :P22:51
Womkesnah but really, very impressed with the whole setup22:51
Womkesmakes me happy to have colleague that know what they're doing22:51
roaksoaxDaviey: https://launchpad.net/~andreserl/+archive/ppa/+files/oops_0.0.10-0ubuntu1~ppa1.dsc there's one.. i'll be uploading them to my PPA for review then you or someone else can do the peer review22:52
=== Jasonn is now known as `
=== ` is now known as Jasonn
=== Jasonn is now known as w000t

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!