[00:01] lamont: did you by any chance remove /usr/sbin/dnsmasq on your system? :) [00:02] un dnsmasq (no description available) [00:02] I did not remove the binary. I removed the package [00:02] ages ago [00:03] hallyn: dnsmasq-base is listed. /usr/sbin/dnsmasq comes from dnsmasq, not dnsmasq-base [00:03] adam_g: http://paste.ubuntu.com/834637/ [00:03] stgraber@castiana:~$ dpkg -S /usr/sbin/dnsmasq [00:03] dnsmasq-base: /usr/sbin/dnsmasq [00:03] zul: https://bugs.launchpad.net/nova/+bug/929127 should fix that. the issue is iproute2 has switched its return code, and nova was never updated to ignore rc 2 [00:03] lamont: ^ [00:03] hrm [00:04] Launchpad bug 929127 in nova "linux_net.ensure_metadata_ip() fails on precise" [Undecided,In progress] [00:04] yeah. interestingly, I see it there too [00:04] oh. [00:04] heh [00:04] /usr/sbin/dnsmasq [00:04] locally diverted to: /usr/sbin/dnsmasq.base [00:04] adam_g: i had a patch for that that ignores the rtnetlink error if it exists but told not to because of what you previously mentioned [00:04] that's right. it annoyed me and I killed it with fire [00:04] hallyn: 929086 is invalid. you want the pleasure, or shall I? [00:05] zul: are you using nova-rootwrap? [00:05] adam_g: no [00:05] hallyn: though to be fair, I'd prefer it to just work anyway [00:05] not explicitly [00:05] zul: if you were using the broken rootwrap, it would havebeen returning 0 and nova would have been happy. :) [00:05] maybe one day, my hatred for dnsmasq and the way we automatically set up bridging and antifirewalling for guests will soften [00:06] adam_g: right i think it might be something else though (i probably have a weird setup locally) [00:08] * lamont needs to run [00:09] hallyn: killed bug 929086 for you [00:09] Launchpad bug 929086 in lxc "Missing depends: dnsmasq" [High,Invalid] https://launchpad.net/bugs/929086 [00:09] stgraber: thanks for the ping [00:09] and to answer your original question truthfully, yes. [00:10] perfect, would have been an horribly weird bug otherwise ;) [00:11] phew - thanks [00:12] hallyn: upstart amd64 is building now [00:12] armhf, armel and powerpc all failed to build because a test won't pass but that's not new ... I'll remind James about it tomorrow === koolhead17 is now known as koolhead17|zzZZ [00:19] Hm-m.. I got disconnect while zero'ing a disk using mkfs. How can I get back to that screen? === sixstringsg is now known as sixstringsg|away [01:29] I changed my preseed.cfg partman/choose_recipe from multi to atomic. The filesystem type remained ext4 [01:29] the pxe boot completes without erorr, on first reboot it drops to the grub rescue prompt saying "out of disk" [01:29] ls shows (hd0) (hd0,gpt3) (hd0,gtp2) (hd0,gpt1) [01:30] if I set prefix=(hd0,gpt1)/boot/grub, then > insmod (hd0,gpt1)/boot/grub/linux.mod to load the modules (for a normal grub prompt) I get "unkown filesystem" === sixstringsg|away is now known as sixstringsg === sixstringsg is now known as sixstringsg|away [03:08] you must have done something wrong === koolhead17|zzZZ is now known as koolhead17 [06:23] hi folks [06:24] could somebody help me with telling how to update apache to 2.2.22 on ubuntu 10.4 server? apt-get is only showing 2.2.14 as the latest available apache version [06:25] You can't have that [06:25] GoldenP: Why do you want it? [06:27] I am having problems with apache going 100% on production servers and only a hard server reset can "unfreeze" the system [06:27] so I was thinking that it could be a security flow [06:27] or a newer version might help [06:28] (I mean 100% cpu on 6 cores and over 60 in load avereag in top) [06:28] So your solution to "I have a bug" is to try to upgrade to a version that isn't integrated with the OS? [06:29] Maybe you should analyse the problem first. [06:30] e.g. IIRC PHP bloat appears under apache in the process tree if using PHP via mod_php instead of mod_fcgi. [06:30] IME the most probably cause is a crap PHP script. [06:30] when I have a large dis, say 5TB, and configure it as one large partition on install, I get a grub prompt on first boot and an "error: out of disk" error. [06:30] oneiric 11.10 [06:31] I'm configuring an hands off install, so any lead on where the failure point is would be great [06:31] jkyle: that's because >2TiB disks must use GPT, and to use GPT grub needs its stupid little hand held with an extra ~100MB special grub bootstrap partition [06:32] that's right... I already did so. I could find nothing :) So now I am eliminating the "usual suspects". One of these usual suspects is outdated software. I see apache 2.2.14 having some security flaws, like this: http://m.h-online.com/open/news/item/Tool-causes-Apache-web-server-to-freeze-Update-1330105.html?mrw_channel=open;mrw_channel=open;from-classic=1 [06:32] ah, hm. when I ls, it says they're (hd0,gpt1) through 3 [06:32] If your "5TB disk" is actually a raid array, that might not be the case, but the installer defaults to using GPT for >=2TB (note: this includes <2TiB disks) [06:33] so I suppose the failure is not enough room to load the modules or something. thus, out of disk [06:33] What you should do is reinstall and pick "managed partitioning" or whatever, then go back and rearrange your main partitions but leave the special grub ones as-is [06:33] twb: it'l need to be automated [06:33] You MIGHT also have luck booting priority=low ("expert install") and forcibly telling it to use msdos instead of GPT disk label, by clicking on the disk itself in partman UI [06:33] so I'll have to dig into the manual install presed docs [06:34] jkyle: in that case you are in for a long night [06:34] nah [06:34] they're homogeneous machines [06:34] jkyle: you need to find how grub wants it set up, and then preseed that [06:34] jkyle: unfortunately I can't just tell you because I tend to throw such machines out the window in frustration [06:35] it'd be a whole lot of money to throw out [06:35] Shrug [06:35] got a full pod :P. this shouldn't be bad [06:35] Ugh, is that one of those "just add disks as you go" pseudo-NASes? [06:35] I forget the product name [06:36] no, qantas [06:36] The airline? [06:37] SAS * 1TB * 12 in a RAID 10 [06:37] quanta* the computer manufacturer [06:37] Ah [06:38] they're good machines :) [06:38] yeah, teh auto installer is only giving grub 1mb [06:40] maybe 1mb is right I don't remember [06:40] It basically contains code to make EFI look like BIOS or something [06:41] Some dirty-ass hack [06:55] twb: I'll be damned [07:48] Can someone help. [07:48] I just reinstalled ubutnu 11.10 server [07:48] The reason I call it a piece of crap is since 11.10, i dont get video out. [07:49] I don't have a ssh dameon installed to controll it over the network so I can't do anything and when i try and install 10.4 LTS, it thinks it needs cdrom drivers that don't exist. [07:49] Now im stuck with a broken system. [07:51] Can someone help?! [07:52] iToast: do you not get any video out, or does it stop after grub? [07:52] I dont get video out [07:53] The machine boots, it has a status light at the front that turns green when its at the login screen [07:53] My monitor will stay active for about 5 mins after the boot then just goes to standbye due to a lack of video [07:55] greppy, [07:55] iToast: what kind of system is this ? [07:56] Caribou, Its a thin client by wyse [07:57] Caribou, ubuntu 10.4 had no problem [07:57] 8.4 too, 11.4 had some issues [08:00] maybe some boot param has changed, lemme check [08:07] iToast: did you try to add vga=791 as a boot param to manually force the resolution ? [08:11] Caribou, no [08:11] As soon as its suppost to show grub, the screen goes blank [08:12] oh, I thought that you had the system installed and it was going blank after the reboot [08:12] Its installed [08:12] It boots, i can't get to grub or console... [08:16] Can I ask why you're using Ubuntu Server on a thin client ? I would expect Desktop to be used there [08:17] I need a low power machine that is supported by almost every linux distro. [08:17] ok, make sense [08:18] Its like a mac, you have one set of hardware... [08:18] Finding support is very easy the hardware is common and you can run almost anything ;P [08:19] I don't remember if grub behaves the same way on server, but on desktop you don't get the grub menu unless you keep the key pressed === smb` is now known as smb [09:19] Does anybody have a guide for installing a KVM client on a DRBD resource? [09:20] Womkes: have a look at http://code.google.com/p/ganeti/ [09:21] I will have a look now [09:21] Well henkjan [09:21] that looks freaking awesome [09:22] Going to try it this afternoon when Im home [09:24] morning o/ [09:25] henkjan, what distro and virtulisation option would you recommend for ganeti? [09:25] seems it is geared a bit more towards xen then kvm [09:26] and debian instead of ubuntu [09:28] Womkes: i would use ubuntu. its packaged and available in universe [09:28] Womkes: kvm support was added in 2.0 releases and should work [09:30] Does /tmp get cleared when ubuntu restarts? [09:30] Ah, thats great, so I just have to add the universe repo to my install [09:30] and get going [09:31] Yes they do, thanks DuckDuckGo :-) [09:41] jamespage: Hey, have you seen - http://kohsuke.org/2011/12/27/jenkins-now-acts-as-an-ssh-daemon/ ? [09:42] Daviey: yep - had spotted that [09:42] was working on the toolchain for jenkins modules yesterday [09:42] it's not playing that well with maven-debian-helper ATM [09:42] (oh - its implemented as a jenkins module I think) [09:44] sounds interesting, anyway :) [09:45] Sure is [09:46] I am having difficulties with getting CLI to work here [09:46] Daviey: once I get that working we should at least have support for SSH keypairs for cli access in precise [09:46] once/if [09:46] Cant figure out why it is not working, getting timouts [09:46] API works fine [09:46] jamespage: on the public facing instance? [09:46] Daviey: probably not :-) [09:47] but TBH having access to the public instance for Ubuntu does not actually get you anything - its a dumb read-only copy [09:50] Womkes: whats not working in the CLI? [09:50] Well, I am in the guy in our company assigned to CI project. Have setup a Jenkins environment for this [09:50] But I cannot get the CLI to work [09:51] It works fine in my local test setup but not on the production server [09:51] I get a timeout error [09:57] like this [09:57] java -jar jenkins-cli.jar -s http://url.to.jenkins/ help [09:57] Exception in thread "main" java.io.EOFException: unexpected stream termination [09:57] at hudson.remoting.Channel.(Channel.java:408) [09:57] at hudson.remoting.Channel.(Channel.java:366) [09:57] at hudson.remoting.Channel.(Channel.java:327) [09:57] at hudson.remoting.Channel.(Channel.java:323) [09:57] at hudson.remoting.Channel.(Channel.java:311) [09:57] at hudson.cli.CLI.connectViaHttp(CLI.java:122) [09:57] at hudson.cli.CLI.(CLI.java:105) [09:57] at hudson.cli.CLI.(CLI.java:83) [09:57] at hudson.cli.CLI._main(CLI.java:267) [09:58] at hudson.cli.CLI.main(CLI.java:216) [09:58] takes few minutes then I get this error [09:59] !pastebin | Womkes [09:59] Womkes: For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [10:01] Daviey: normally for bugs as #107044 should I just close it as "Invalid" or as "Fix Released"? [10:02] Sorry [10:04] bug 107044 [10:04] Launchpad bug 107044 in ubuntu "[needs packaging] Apache ActiveMQ" [Wishlist,In progress] https://launchpad.net/bugs/107044 [10:06] lynxman: sorry, i'm overwhelmed with bugs such as ipxe related ones to track all the others. [10:06] If only someone would help close ipxe bugs, i'd have a better idea :P [10:06] * lynxman *gets it* [10:16] i've got my own mailserver with postfix + dovecot and I would like to have got an autoreply on one of the email addresses. What do you recommend? [10:16] do I need some special service or is it supported by dovecot or such? [10:17] Aison: both postfix and dovecot support Sieve, I'd recommend that way, although I'm Sieve biased (http://koansys.com/tech/sieve-server-side-mail-filtering-with-postfix-dovecot) [10:18] Sieve is nice. [10:20] thx :) [10:21] other question: do you guys know a nice webbased software for a todo list or very simple project management? We are just three people and search something simple and not this big project managment tools [10:22] I already lookt at "Tracks" [10:22] -t +ed [10:24] Aison, I have done some research into this past few weeks [10:24] Tried a couple [10:24] Hard to find a good one, but I think Iḿ going with Open Atrium [10:25] what is "true" way to configure FQDN [10:25] oh, nice, have to try that :) [10:26] samba35, what do you mean with "true" way? :P would you like to setup your own dns servers? [10:27] i have many version of configure FQDN [10:27] samba35: follow the path of the fqdn warrior.... or just configure your /etc/hosts with both the hostname and full fqdn :) [10:27] do i have to replace 127.0.0.1 [10:29] no [10:29] 127.0.0.1 is expacted to be localhost in hosts file [10:30] if i have mail server and web server on same machine 192.168.1.10 ,do i have to use privite ip or public ip for [10:31] if the name ist public, use the public ip, else the private [10:31] i want to host webserver with my domain [10:32] well, if your domainname is foobar.example.com and you would like to have got email@example.com [10:32] you have to setup IP foobar.example.com foobar [10:33] in your hosts file and of course you have to setup your dns server also [10:34] the zone file for example.com have to contain a line like [10:34] @ IN MX 10 mail [10:34] i have setup a blog when i use www.abcd.com it work when i run www.abcd.com/blog then it show localhost in address bar [10:34] while mail is [10:35] mail IN CNAME foobar.example.com. [10:36] ok [10:36] i will try this again and get back to you [10:36] thanks for you co-operation [10:36] np [10:37] do u have fqdn on your server [10:37] or any working host file [10:37] with fqdn [10:38] yes [10:38] but i've got only one IP on my server and this is public [10:38] if you dont mind can you pleae pastbin to me ? [10:39] hi Gents... [10:39] samba35, http://lazarus.jaison.ch/hosts [10:39] ok [10:40] pretty new on a ubuntu aws box and i managed to login with putty after converting the default key-pair... [10:40] samba35, http://lazarus.jaison.ch/db.jaison.ch [10:40] so i have to use my publip ip [10:40] this is the zonefile [10:40] Dutchy^, presumably there was a question coming? ;p [10:40] but when i want to add more user to getin with ssh without having the public sent in front,,,is ther a link for this how to do this? [10:41] http://blog.sofasurfer.org/2011/07/16/ubuntu-ec2-add-new-admin-user/ this a action per user right? [10:41] Dutchy^, not entirely sure what you're doing [10:41] hi cwillu_at_work! [10:41] Dutchy^, what do you want to be able to do? (not in terms of ssh, but what you actually want to do) [10:42] Aison: if i want to use my isp's control pannel for dns and add dns /mx thier in that case what i will require on my local machine ? [10:42] well normally on a box,,,i add users and when those users are login,,,,they are promt to save the key and go ahead right? [10:42] please cut out the ",,," [10:43] Dutchy^, do you mean "key" or "password"? [10:43] samba35, well, you need an smtp server that accepts the mails ;) [10:43] but to answers your question [10:43] Aison: can i send you pm ? [10:43] yes [10:44] THANKS [10:44] i want to add users set the password and enable then with ssh [10:44] Dutchy^, do you want to permit people to log in via ssh using their password? [10:44] yes! [10:44] that's the default behaviour [10:45] you don't need to do anything further, other than making the user (and making sure it's not a system user) [10:45] PasswordAuthentication yes [10:45] Dutchy^, two things to keep in mind though: [10:45] one: password authentication is only as strong as the weakest password, and a strong password becomes weak the moment you type it into a keylogger by accident :p [10:46] oke i will test again wanted to make sure if this was a aws image issue [10:46] If you must allow password login via ssh, you really really should install fail2ban [10:46] Hello peepz, I just built my own NAS and am installing Ubuntu Server via USB. After running "Check disc for defects" it says "not a valid Ubuntu disc". I created the USB flash in Ubuntu GUI with the Startup Disc Creator. Is this normal or should I re-image the USB media? Giga-thanks! [10:46] two: be careful who you give shell access to; there's a constant trickle of vulnerabilities that can permit a non-root user to gain root permissions [10:46] Dutchy^, it's strongly recommend to disable password auth in ssh and just use keys instead [10:47] good point cwillu_at_work, however the usecase are on demand boxes for education [10:47] so i have to setup 15 users who will work on this box and then i stop it [10:50] Or, what would be the best way to install Ubuntu Server from a USB flash drive? Ergo UnetBootin or is Startup Disc Creator fine? [10:51] Or would I get the same result with both? [10:51] :) [10:52] I'll try UnetBootin... see how it goes... install-fest!;) [10:54] cwillu_at_work : so i logged in. made useradd test -g test, then passwd user and now should be able to login? [10:56] believe so [10:59] Is "Checking Disc for Defects" for Ubuntu Server on a USB flash drive the same as checking it on CD/DVD media? I'm getting the same result having created it with UnetBootin. The exact working is "No valid Ubuntu CD-ROM". Its saying that because its USB media and not an actual CD I assume, right? [10:59] Is it ok to go ahead and do the install? [10:59] wording* [11:00] cwillu_at_work, well during ssh connect its asking for apublic key [11:00] "The CD-ROM you have inserted is not a valid Ubuntu CD-ROM. Please change the disk" [11:00] Dutchy^, what does it say exactly? [11:01] i am using crt: a public key has not been specified for this session, do you want to specify now? [11:01] * NeoNetNinja is being anal (lol) [11:02] The client has disconnected from the server. Reason: Unable to authenticate using any of the configured authentication methods. [11:03] Dutchy^, pastebin /etc/ssh/sshd_config and /etc/passwd [11:05] Dutchy^, can you verify the problem with openssh's client? [11:05] lets try putty [11:05] lets try openssh :p [11:06] justamoment [11:06] I don't have putty in front of me, which makes it basically impossible to verify that things are working as expected [11:11] Permission denied (publickey). [11:11] its the same story,that my connects wants a public first [11:12] never had that with oter non aws boxes [11:12] so its not running as default and thats why stories as http://blog.sofasurfer.org/2011/07/16/ubuntu-ec2-add-new-admin-user/ exists [11:13] so how to get it just a a normal box to allow me the session in public setup, thats the q i think right? [11:14] Dutchy^, pastebin /etc/ssh/sshd_config and /etc/passwd [11:14] it's not that it wants a public first, it's that it's only accepting a public key [11:15] http://pastebin.com/cDwJjh31 [11:16] Dutchy^, you might want to kill PermitRootLogin yes [11:16] PasswordAuthentication no needs to be yes [11:17] that should be all you need to do [11:20] cwilu_at_work :-)! [11:20] superb sir, i overlooked this [11:20] feel a little bit dumb, thanks a lot [11:21] i was landed to much in the keys === Aison is now known as Aison|w === Ursinha` is now known as Ursinha [13:35] hi guys [13:35] to change the hostname of one machine i have to edit /etc/hostname and reboot the machine right? [13:38] tyska: you can change the hostname of a running system with 'hostname yourdesiredname' [13:44] good morning [13:44] hi guys, there is anyone here? [13:53] tyska: many people [14:01] Set up a new md array yesterday. Saw this as it was finishing, should I be worried or is Linux going to work around the problem? http://pastebin.com/Sj44G83J === moekg is now known as abcdude [14:04] kaipanoi: and you manipulate the meta device ? [14:05] hi [14:05] i have only small font in CLI . how to do? [14:05] i try setupcon. not ok [14:06] You mean in a terminal window or on the tty console? [14:11] kaipanoi i dont know what to call. the login screen I got after installing ubuntu server version 10.x [14:12] that's probably a tty then [14:13] Is eucalyptus something I could use to manage a whole lot of KVM hosts? [14:13] Check out sladen's post http://askubuntu.com/questions/97469/what-is-the-default-debian-ubuntu-console-tty-font-called [14:13] that was meant for, abcdude [14:15] kaipanoi: had to clarify that I'm not worth your time, huh? [14:16] wow, really? Sounds like you might need to take some time off. I was trying not to WASTE your time. [14:17] ikonia: what do you mean? [14:21] if I change or edit default console fonts, it is just temporary. after reboot, i still see the same [14:21] small font [14:24] hm.. i guess he couldn't tell i was joking :( [14:25] what should I do? [14:28] I've never changed tty fonts - I didn't even know that was possible (figured it should be but never thought about it) [14:28] I got this problem twice [14:28] * pmatulis remembers doing that in slackware installer (changing tty fonts) [14:29] i notice that whenever i installed on computer with better graphic port (on board) or graphics card, I got the same problem with small fonts [14:33] what do I do? [14:43] rbasak: ping [14:43] hey zul [14:43] rbasak: can you resubmit your console.fifo plllllleeeease :) [14:43] Resubmit to where? Upstream? [14:43] yeah [14:44] i dont want to have to main it [14:44] abcdude: I assume you did a quick google search and found this already? http://www.tankmiche.com/tips/customize-tty-appearance/ [14:44] They won't take it unless it's reworked to use processes, AFAIK. [14:44] arrgh...need sleep [14:44] can you try to rework it? [14:44] It's a lot of work, and I feel that it would be quite invasive. I'm not sure how to approach it in a way that would be acceptable to upstream. [14:45] rbasak: can you ask on #openstack-dev perhaps bug soren [14:45] rbasak: because its a rather large patch that we have to carry and its going to cause nightmares for me in falsom [14:46] The last I spoke to Daviey on this, my understanding is that I wouldn't be doing it because of the amount of work it would be for me [14:46] lovely...:) [14:46] Yes, that's what I said too, but Daviey didn't think it would be too much work. If it is, maybe he can reconsider applying this to Precise? [14:46] Daviey: ^^^ [14:46] maybe Daviey can get it upstream [14:47] mysql --debug --ssl --ssl-ca ca-cert.pem --ssl-cert client-cert.pem --ssl-key client-key.pem -h host.tld -u user -p = Segmentation Fault [14:47] Well, it asks for the password first, the segfaults. [14:48] I tried --debug, but it says debug is not installed. [14:48] * Daviey will re-read scrollback after this call [14:48] I designed it to have a very small and clean integration point with nova - nova just has to tell the class when to start and stop logging. Integrating it with processes is really down to how upstream want nova to manage processes of this form - making this happen should not affect the rest of the patch. I'm happy for upstream to take this on, or Daviey if he likes. [14:49] I would just try and fork, but IIRC I tried that and bad things happened to sqlalchemy. I think spawning a process "properly" would be needed. [14:50] I'm a bit miffed that upstream don't take this more seriously, tbh. It is a security vulnerability that they're carrying after all. [14:52] hi folks [14:52] just a quick question; will there still be an "alternative installation cd" with Ubuntu 12.04, given that the server and desktop branches will be merged? [14:54] zul, I think after upgrading the xen-utils-common, this broke (or at least makes it very unintuitive) usage of the xl state. Switched it around to xl, rebooted and have lots of trouble to get a pv guest to have a network... :( [14:55] *s/state/stack/ [14:55] son of a.. [14:56] * zul shakes his fist [14:56] I can do manually by adding the vif to the bridge I want and then ifconfig up it. Just not very user friendly... And documentation about that is... sparse [14:56] I know [14:57] tweaking or chaning various fonts in console-setup is not ok for me [14:57] what do I do? [14:58] it worked as i wish temporary. but after reboot, it changed back to small fonts [15:00] what do I do? [15:05] zul, or Daviey you have thoughts on my comment in bug 929523 ? [15:05] Launchpad bug 929523 in bacula "bacula-director does not start, dummy libbaccats " [Undecided,New] https://launchpad.net/bugs/929523 [15:05] this stuff is new to me. [15:06] stgraber: I'm considering the following lxc debdiff (http://people.canonical.com/~serge/lxc.debdiff), but there must be a more robust way to do the networking? [15:07] please? someone? [15:07] some type of network setup macros i'm not aware of... [15:07] hallyn: the check could at least be changed to [ -d /sys/class/net/${LXC_BRIDGE} ] [15:08] smoser: maybe remove the other libaccts and just have them symlinks maybe? [15:09] smoser: other than that im not sure..i might take a crack out of it [15:10] stgraber: ok (there's another instance of that check, will change both) [15:11] * Daviey reads scrollback [15:11] hallyn: you could also check for "/sys/class/net/${LXC_BRIDGE}/brif/*/" to detect bridge members I believe [15:13] zul: Is there complexity attached to porting this patch to precise? [15:14] Daviey: no its done, it just needs to be tested and maintained so whenever the code changes then the ci stuff will break [15:16] zul: break, or inform us we need to refresh the patch? [15:16] Daviey: inform [15:16] Daviey: break in my mind though ;) [15:17] zul, i dont htink that would fix it though [15:17] as its going by the soname [15:17] i tihnk [15:18] i would like to see how redhat does [15:18] does it [15:18] * zul cant type today [15:18] ie, if we moved the libbaccats-mysql-5.2.5.so to libbaccats-5.2.5.so, it would still have the soname describing the 'mysql' bit [15:18] and then it wouldn't resolve. [15:18] the one option i thin would work is to just override the deps [15:19] ie, shlibs.local === tero_ is now known as tero [15:27] Hi. I'm using the check_nrpe plugin checking the event log on a Windows host running NSClient++ with NRPE plugin installed. When I run my query, filtering for Backup Exec source, errors only, it comes back saying Eventlog check is ok. But when I look at the server, there's several error messages that are not being reported. === Lcawte|Away is now known as Lcawte [15:33] smoser: try it [15:34] zul, i'm not sure of the format and it seems generally like a bad idea [15:34] :) [15:35] there is no bad ideas just stupid ones :) [15:40] any good link for a student to setup a webhosting on ubuntu server laptop, i serach google not any relevant link can any provide or guide me [15:40] plz [15:40] if anybody can do [15:42] SpamapS, around? [15:45] mdeslaur, Hey, would you be the one to talk about an issue with virt-manager? [15:45] which is best option as a firewall [15:45] Iptable [15:45] or shorewall [15:46] ?? [15:46] smb: hrm, maybe :P [15:46] smb: what's up? [15:46] hallyn: so wrt switching lxc to upstart, I believe it should be done before feature freeze. It's not technically a feature because it "should" be pretty much identical to the user, but it's still a pretty significant change [15:46] mdeslaur, Still would need to file a bug. But it seems to me there is a minor issue of it to detect that a xen guest has shut down. [15:47] Doing a virsh connection and list, this is displayed correctly [15:48] Just the icon (and I think internal state) of the gui remains as running [15:48] stgraber: ok. I need to get those changes queued up for dlezcano, but will upstartify after that. [15:50] smb: file a bug, but usually virt-manager just does what libvirt says [15:51] mdeslaur, Ok, will do. Though I realize that maybe I need to try again with a precise desktop. /me keeps the work-desktop a bit back right now and does forget that fact sometimes [15:53] uh, so lxc wants to run it's own dnsmasq, and fails horribly when I already have it set up? [15:54] by cobbler [15:54] hallyn: I just noticed pitti uploaded a new LXC... [15:55] d'oh! [15:55] presumably mine will be rejected then [15:55] i'll rebase [15:55] tjaalton: yes, i watned to ask stgraber about a way to fix that [15:55] (checking bug #) [15:55] hallyn: ok, cool [15:56] stgraber: the suggestion in bug 925511 [15:56] Launchpad bug 925511 in lxc "lxc init script should fail when it ... failed" [High,Fix released] https://launchpad.net/bugs/925511 [15:56] also, looks like resolvconf doesn't follow dns-nameservers on /e/n/interfaces [15:56] EvilResistance: here now, whats up? [15:56] SpamapS, incoming /query [15:57] tjaalton: hmm, it definitely does, I'm using it on a few machines (resolvconf is the owner for the dns-* stuff in /e/n/interfaces) [15:58] i can configure policy routing with "ip route ..." and "ip rule ..." [15:59] where is the correct place to put these commands so they "stick" when i reboot? [16:00] stgraber: well it doesn't seem to work here :/ [16:02] tjaalton: can I have your /etc/network/interfaces + know where /etc/resolv.conf points to + "status resolvconf" + content of /run/resolvconf/resolv.conf and content of /run/resolvconf/interface/* ? [16:05] stgraber: ok one sec [16:08] stgraber: http://paste.ubuntu.com/835370/ [16:09] Hi. I have an Ubuntu Server 11.10 set up as a Nagios server. I have the check_nrpe addon installed, and am pulling the EventLog from a Windows2k8 machine running NSClient++ with NRPE addon. When I run my query, it returns with no errors in the event log. But, there are clearly errors when I remote to the server and look manually. Does anyone have any experience with Nagios and NSClient++? There's noone responding in #nagios [16:10] tjaalton: ok, that's pretty weird. I'm unfortuantely busy breaking my test machine at the moment so can't look at it just now, will do in a bit. [16:10] stgraber: no problem, I've just added the nameserver in resolv.conf.d/tail for the time being :) [16:12] I'll try to trace the script myself [16:17] mdeslaur, bug 929626 filed (seems to be same still in precise) [16:17] Launchpad bug 929626 in virt-manager "virt-manager misses xen guests shutting down" [Undecided,New] https://launchpad.net/bugs/929626 [16:18] smb: thanks...I may merge virt-manager and virtinst this week, so I'll probably test with the new versions before taking a look at the old ones [16:18] mdeslaur, ok. as soon as I see newer uploads I will re-test anyway === fjlacoste is now known as flacoste [16:31] how to amzon like service [16:47] Daviey: free? [16:49] roaksoax: always for you. [16:49] Daviey: so http://paste.ubuntu.com/835415/ [16:50] Daviey: the default profile/system preseed for the enlister is worrying me [16:50] :) [16:50] roaksoax: ok [16:50] Daviey: we are passing, user/pass, host-profile [16:50] roaksoax: right [16:50] Daviey: so, there's no *easy* way to determine this automatically [16:51] Daviey: and we are passing the password in clear text [16:52] Daviey: so I don't personally think we should have automatic enlisting by default, but rather, have the user input at least password, and a profile if different from default [16:52] roaksoax: cjwatson and SpamapS worked to make the preseed channel ssl. [16:55] Daviey: right but apart from that, you could read the kickstart by doing this: http://192.168.123.1/cblr/svc/op/ks/profile/oneiric-arm [16:55] which will also show the password [16:55] roaksoax: that needs tightening up. :) [16:55] roaksoax: lets get the functionality there, and we'll poke it next week. [16:56] roaksoax: Note, that this is a prerequisite for other work. we won't be passing cobbler creds long term. [16:56] Daviey: ok but besides of using ssl for preseeding, there's no way for us to automatically determine what password to use (as this is set when installing cobbler) unless we store it somewhere in base64 and decrypt it at the time of reading the preseed [16:57] roaksoax: it can be overridden via the API? [16:58] hallyn: I tracked down the problem I was having, and it is looking like its going to take a while to fix. [16:58] How import is being able to define rules based off of options? Well most of them specifically options that are not (bind,remount,move) [16:58] eg. you could still do [16:58] bind /foo -> /bar, [16:58] deny bin /foo -> /bar, [16:58] mount fstype=procfs -> /bar, [16:58] but [16:58] mount options=rw, [16:58] Daviey: you mean, if the enlisting process fails due to a wrong apassword, could you input it? [16:58] Daviey: [16:58] roaksoax: yeah! [16:59] Daviey: I've spent the last couple of days poking at openmpi. I have potential rebuild failures with libboost-(something)mpi, and haven't tested that much else (just one other package which works). So I'm concerned about getting it all fully rebuild tested before feature freeze, especially since I'm struggling with tooling to do rebuild tests against local openmpi build-depends. [16:59] Daviey: i guess so if the enlister udeb adam_g was working on supports that checking [16:59] Just trying to make sure you know before the last minute. [16:59] rbasak: can you draft a mail to ubuntu-release@lists.ubuntu.com outlining what you are doing, and potential concerns which might make it slip FF? [16:59] hallyn: I am thinking of just disabling the option match for now, you could still specify them but nothing would happen. That would should let me get you a ppa today and then I can mess with fixing the options stuff over the weekend [17:00] We could just dump it all in the archive to see what happens, but we won't know what happens until a rebuild test. [17:01] Daviey: I'm not sure it's anything fundamental to what I'm doing, but more that I'm unfamiliar with the tooling around testing dependent package rebuilds before uploading stuff, thus making me slow. [17:01] jjohansen: so we would be able to distinguish bind from non-bind right? [17:01] rbasak: yeah, that is understandable [17:01] that's still helpful [17:01] Daviey: anywya, i'll just put a sample preseed with a default user/pass cobbler:cobbler and make sure the functionality works. [17:02] roaksoax: cool [17:02] jjohansen: heck prolly useful without even that. we don't want to allow proc to be mounted *anywhere* else (or /sys), to enforce the rules we have [17:02] stgraber: can you comment on bug 928524 ? [17:02] Launchpad bug 928524 in lxc "lxcbr0 fails to come up when dnsmasq is installed" [Low,Confirmed] https://launchpad.net/bugs/928524 [17:03] jjohansen: and then i'l lneed to think about how to handle user-specifed per-container restrictions. but i can't think about that right now. [17:03] Daviey: you want me to email ubuntu-release@lists.ubuntu.com regardless? [17:04] rbasak: If it's a concern that something with lots of rdepends won't be ready, it's probably wise. [17:04] OK [17:04] (we could do with being more communicative :) [17:36] zul, Dammit, ok I found out why networking fails. Apparently we need vifscript uncommented and pointing to the full path (/etc/xen/scripts/vif-bridge) for it to be found. What I have not figured out is how to force it to use something different than xenbr0 without having that repeated in every guest cfg. [17:36] (meaning in /etc/xen/xl.conf and for xl) === dduffey is now known as dduffey_afk === dduffey_afk is now known as dduffey === sixstringsg|away is now known as sixstringsg === dduffey is now known as dduffey_afk [17:44] whats a cool graphical cli of junk regarding a system? [17:44] like htop [17:44] but cooler === sixstringsg is now known as sixstringsg|away [18:29] adam_g: how do you debug the enlistment process [18:29] in the installer [18:34] roaksoax: should be output in syslog, or drop to a shell and exec the enlister yourself with the same arguments you've preseeded? [18:35] roaksoax: also, you can export COBBLER_ENLIST_DEBUG=1 and get more verbose debug from the tool. [18:42] Just installed a new virtual network card. How do I make ubuntu server detect it? [18:46] Is it possible to use a password for a LUKS volume but feed the password in throught stdin or something? [18:49] I'm trying to have a one server log into another and mount that volume through an ssh connection so the server itself doesn't mount the luks volume, but a remote system does === marrusl_ is now known as marrusl [19:05] adam_g: cool... and does it validate things like wrong password and stuff like that (i.e. what if the password send by the preseed is wrong, does it request to input a new one?) [19:05] adam_g: what about the hostname?, can it be preseeded empty, or would it automatically detect a hostname? [19:10] roaksoax: you'll get an xml fault from the server, cobbler-enlist will print that and ext 1 [19:10] roaksoax: theres a branch here; https://code.launchpad.net/~gandelman-a/ubuntu/precise/cobbler-enlist/avahi [19:11] roaksoax: taht supports discovery of the orchestra server, feel free to take that [19:11] roaksoax: the avahi advertisement it looks for is hardcoded, so you'll need to update it to whatever it is your looking for [19:13] adam_g: right, so what i'm doing is simply create a default system with a enlistment preseed/ Once the machine boots, it will boot to this preseed by default and will register itself to cobbler, this, however, requires cobbler's user/pass, hostname and profile to use AFAIK. So my point was, if any of these are not passed in the preseed, will the process fail and cause an error? [19:14] adam_g: so if no ohstname is passed, will it just fail, or will it request to enter a hostname? if no profile to register the system with is passed, witll it be requested? If the password (or iuser) are wrong, will it be requested? [19:18] jcastro: ping [19:18] adam_g: http://paste.ubuntu.com/835626/ [19:18] Daviey: ^^ [19:20] roaksoax: if cobbler-enlist fails, it will exit with an xml fault and rc 1. it also will fail if it does not have the minimum required parameteres (hostname, username, password, profile and a few others i think) [19:22] adam_g: alright, so we were talking with Daviey about it, and we kinda agreed that if for example, password is incorrect, it should request for user input [19:22] adam_g: on the other hand, wouldn't it be better for the udeb to determine its own hostname with its mac address? [19:22] roaksoax: currently there is no user interaction like that in cobbler-enlist, if you can handle that in d-i great [19:22] roaksoax: yeah. [19:23] adam_g: ok cool, I;ll run this with Daviey and see what could be good improvements for it [19:23] thanks for the info [19:23] roaksoax: or generate a random hostname thats some mangled version of its mac [19:23] adam_g: indeed [19:24] adam_g: i do like that idea, cause the provider (cobbler) can't determine a hostname based on the mac cause we are preseeding that to a unkwnon system [19:25] roaksoax: yeah, just generate it somewhere on the client system and pass as input to cobbler-enlist [19:26] adam_g: ok cool [19:34] hi folks, sudenly my ubuntu 10.10 has no internet, but I am accessing it thru putty so it works in my LAN. What can be the problem? [19:37] aFeijo, dns, bad gateway, incorrect routing tables, misconfigured firewall, busted router === sixstringsg|away is now known as sixstringsg [19:38] checking... [19:42] adam_g: so if I do not specify hostname/profile in the preseed, it asks for it, however, it doesn't register the system in cobbler [19:42] adam_g: if I preseed those values, then it does register it successfully [19:45] hello guys, i install some pentest tools from another distro on kubuntu but i am not able to get the pentest menu in kmenu. They are all under Lost and Found menu === dduffey_afk is now known as dduffey [20:22] kirkland: pong [20:33] smoser: trying ot test out my port of your btrfs extensions to lxc-clone. but sure enough, after creating the first btrfs continer and start+stopping it, i can't mkdir on the fs at all any more - read-only filesystem [20:34] hallyn, as in you think there is a bug in my code or a bug in btrfs [20:34] ? [20:34] its possible i just used it wrong, being a luser [20:35] hallyn, remember i had some of the lxc-clone stuff done [20:35] but i ditched it [20:35] wiat.. [20:35] i had some of the lxc-create done [20:36] lxc-clone is committed. [20:37] hm, actually maybe it's not btrfs's fault. I dunno. [20:37] adam_g: so this is what I did to set the hostname/profile temporarily untill we find a better solution [20:37] adam_g: http://paste.ubuntu.com/835716/ [20:37] Daviey: ^^ === funkyHat_ is now known as funkyHat [20:37] hallyn, the whole fs goes ? [20:38] or just that dir ? [20:38] can you show me a recreate ? [20:38] smoser: ^^ you might also be interested as this is from bug #898840 [20:38] Launchpad bug 898840 in cobbler "'default' preseed should be enlister" [Medium,In progress] https://launchpad.net/bugs/898840 [20:38] smoser: the whole fs. [20:38] well i dont think thats my fault then. [20:38] kernel messages? [20:38] smoser: it happens after the lxc-stop. so i imagine it's being umounted badly. [20:39] smoser: i was never thinking it was your fault. [20:39] i thought btrfs was corrupted. but now i think it's lxc's fault [20:39] i'm confused as to what you're doing though. [20:39] I am having a problem with my network connection,the guy from ubuntu told me to ask here.I can't connect at all. [20:39] http://paste.ubuntu.com/835463/ This is what i got from followin a tut. [20:43] smoser: http://paste.ubuntu.com/835728/ on a canonistack instance [20:45] roaksoax: cool === sixstringsg is now known as sixstringsg|away [20:51] smoser: even if i add 'mount --make-rslave /var/lib/lxc', it still does it. so i think it's a problem with btrfs. but i'll need to think up some testcases for it when i have time [21:02] http://paste.ubuntu.com/835745/ <-- where can I find the connection between sdX and ataN? [21:03] smoser: nm, it happens with ext4 too. it has to do with my bind mounts [21:04] <_ruben> RoyK: i posted a similar question on askubuntu, which did get answered i think === fenris_ is now known as Guest25990 [21:26] roaksoax: okay, and that works with cobbler/cobbler creds? [21:34] Daviey yes it does [21:34] Daviey we still need to find thr better way to handle that and probably request the pass if not preseeded [21:35] roaksoax: if it is a null value, password request will happen. [21:36] roaksoax: We need to check in with bigjools, because it will not require a user/pass combination long term. [21:41] Daviey ok maybe a token that expires after registration will catch up with him next week [21:42] roaksoax: cool, i think it's going to be a use-once oauth token. However, it's still conceptial. [21:43] Daviey cool === bladernr` is now known as bladernr_afk [22:37] rbasak: bug 929780 :) [22:37] Launchpad bug 929780 in nova "console.ring files should not be world readable" [Undecided,New] https://launchpad.net/bugs/929780 [22:47] Daviey: I think that's an upstream bug. It's the permission on the instance directory or one of its parents that should be secure, and that has nothing to do with console.ring. [22:48] rbasak: ah, ok. thanks [22:48] (though it isn't clear what the permission of the parent directories are - maybe they're protected already?) [22:49] What does it mean if a system responds to pings, but there is nothing in /var/log/ to indicate that it booted? [22:49] rbasak: *shrug* :) [22:50] I suppose we could create console.ring 600, but we'd also have to worry about anything else that might go in that directory. I'd say it's sufficient to just protect the directory, but if it's decided otherwise I'd be happy for the ringbuffer class to accept a umaskk. [22:50] I don't recall console.log being anything other than 644 either, though I could be wrong :) [22:51] rbasak: Honestly, i don't know without reproducing [22:56] anyone have real world experience setting up ubuntu to authenticate and share drives over an existing active directory enviroment running server 2k8 r2? [22:57] I can authenticate... but my user has sudo permissions, unable to edit network controllers, or see the domains shared drives [22:57] but the local user can [22:58] https://gist.github.com/1784058 <<<< given a d-i partition map such as that, how can I determine which partition has what device name (sda1, sda2, etc)? === sixstringsg|away is now known as sixstringsg [23:04] well, looks like linux fails to do what 50 million people want it to do.. and fails on any support... all documentation on the internet is old.. does not apply.... and this chan is so far dead [23:05] and likewise-open is garbage [23:05] xystem: What are you brabbling about? [23:05] my first three posts [23:06] Well, first of all. You seem to have issues with likewise-open, and blaim linux for it [23:06] no [23:06] That's kinda strange [23:06] kerberos does not work [23:06] neither does samba [23:06] samba works fine for me, if i'd need it [23:07] im a long time user of linux.. never had to join to an active directory before... and this is not working [23:07] I use samba at home.. it's great [23:07] but in an enterprise envi... not so much [23:07] You should never join active directory :) [23:07] too bad.. it rules most networks... and makes the money [23:07] well [23:07] No, it costs the money [23:07] bussiness networks [23:08] it breaks.. i fix the active directory... therefore it makes me the money [23:08] Anyway, might be more useful to elaborate about your issue, than to blame all documentation on the internet that does not apply and nobody wants to support [23:08] IT'S THE INTERNET'S FAULT [23:08] * RoyK sniggers [23:08] what more is there to elaborate? [23:09] I'm of no help, btw. I haven't used Windows environments for about 15 years [23:09] documentation does apply [23:09] Yay! [23:09] but old [23:09] xystem: RTFS! [23:10] already did [23:10] im not stupid.. and this is why the ubuntu chan sucks...at least when i have an issue the mint chan doesn't have condescending assholes [23:12] Hi, you again? [23:12] Calling me an condescending asshole? :) [23:12] xystem: Have you ever considered to buy support? As you do with you super-duper Windows environments? [23:14] yeah well.... you are still doing it.... and im a single user, the only user in this network running linux... no use buying support.. in fact.. it's an attempt to convince my company to support linux.. but i have to figure this out myself [23:14] I can not help that most people use windows... therefore I have to support it [23:14] does not mean I like it [23:14] and yes [23:14] you are what I called you [23:17] amazing what people expect for nothing [23:17] hmm? === Lcawte is now known as Lcawte|Away [23:20] I can't remember ever having issues using AD on my ubuntu machines [23:21] I've never actually done it successfully, but it's got nothing to do with ubuntu or even linux in particular, just goes with the territory [23:21] Off to bed, see ya [23:22] I just mean that whole bit about how we're the jerks because a free support channel comprised mostly of volunteers doesn't have an immediate resolution to his specific problem [23:23] hey, he had a question [23:23] it wasn't solved on his timeline [23:23] We should ddos the ** out of him! [23:23] therefor the internail fail [23:23] internet [23:27] ubuntu server n00b, is it possible to enable pkgs for later releases? we're running lucid 10.4 which runs mysql 5.1.41 which has a bug. can i upgrade mysql to newer 5.1 release without upgrading the release? thanks for the help [23:29] if it's in backports [23:30] mpz, personally, I would just install mysql from http://www.percona.com/doc/percona-server/5.5/ [23:31] you can get newer 5.1 and 5.5 there [23:33] the service utility fails to stop the networking service with "stop: unknown instance" [23:35] Patrickdk: not in backports, if i'm on lucid can i not enable maverick repo? [23:38] mpz, not without making a complete mess [23:38] if you do, it will bring in every maverick dependency [23:39] and things you have in lucid could and likely will start breaking [23:39] https://gist.github.com/1784058 <<<< given a d-i partition map such as that, how can I determine which partition has what device name (sda1, sda2, etc)? [23:39] sometimes you can install a package from a newer or older release, but definitely do not add a repo [23:39] mpz, personally, I use the percona lucid build, rebuild myself and added to my ppa [23:40] if you go that route, manually download the package or packages you need from packages.ubuntu.com and install with dpkg [23:40] New bug: #929523 in bacula (main) "bacula-director does not start, dummy libbaccats " [Undecided,Fix released] https://launchpad.net/bugs/929523 [23:40] New bug: #929769 in cobbler-enlist (main) "Enlistment fails if some values are not preseeded" [Undecided,Confirmed] https://launchpad.net/bugs/929769 [23:40] New bug: #929780 in nova (main) "console.ring files should not be world readable" [High,New] https://launchpad.net/bugs/929780 [23:40] New bug: #929848 in nagios3 (main) "init script has hard coded chown" [Wishlist,Incomplete] https://launchpad.net/bugs/929848 [23:40] New bug: #929888 in openldap (main) "ldap_result returns -1 when called from sssd" [Undecided,New] https://launchpad.net/bugs/929888 [23:41] New bug: #929382 in lxc (universe) "package fails to install: SIOCSIFNETMASK: Cannot assign requested address" [High,Fix released] https://launchpad.net/bugs/929382 [23:41] New bug: #929514 in lxc (universe) "package lxc 0.7.5-3ubuntu20 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [High,Fix released] https://launchpad.net/bugs/929514 [23:41] New bug: #929563 in bind9 (main) "apparmor profile does not include local overrides" [Undecided,Confirmed] https://launchpad.net/bugs/929563 [23:41] New bug: #929827 in krb5 (main) "KDC (krb5-kdc-ldap) and kadmin.local segfault in libkdb5.so.5.0." [Undecided,New] https://launchpad.net/bugs/929827 [23:41] yikes [23:42] New bug: #929086 in lxc (main) "Missing depends: dnsmasq" [High,Invalid] https://launchpad.net/bugs/929086 [23:44] New bug: #928990 in cloud-init (main) "fsck / dirty filesystem on instance is death" [High,Triaged] https://launchpad.net/bugs/928990 [23:47] Patrickdk: thanks for the heads up, i can't find any percona pkgs with "apt-cache search percona" [23:47] mpz, you do know how to click on url's I posted right? [23:50] Patrickdk: so used to cli i forgot how to :p [23:55] stgraber: all right, got bogged down today, but i'm hoping tomorrow to upstartify lxc.init, and fix ureadahead and udevtrigger [23:56] hallyn: cool [23:56] the /dev/lxc/console thing would be nice to get done too, but that would require the rest to go VERY smoothly [23:57] hallyn: I did a few more tests with the whole having /dev/console and /dev/tty* be symlinks, getty definitely starts on a symlink but it seems to only receive partial input for some reason [23:57] not sure if that was my system being broken though ;) [23:57] drat [23:58] oh right and of course there is the whole multiple devpts mounts thing - though i think for 12.04 we rely on apparmor mount restrictions for that