/srv/irclogs.ubuntu.com/2012/03/05/#ubuntu-server.txt

uvirtbot`New bug: #946737 in libcgroup (universe) "Broken logic in /etc/init/libvirt-cgred-wait.conf" [Undecided,New] https://launchpad.net/bugs/94673700:21
=== herpes is now known as juicy
hallynstgraber: (on blog post) cool.  I've had smoser asking about thigns like that before (and handed him a custom script iirc).  so i wonder if we want to support that in the pkg03:45
hallyni.e. have a single command that takes an image of any kind and starts it as a container03:45
hallyn(probably ephemeral)03:45
hallyn(out)03:51
=== sixstringsg|away is now known as sixstringsg
ZanzacarI was looking over this certified hardware http://www.ubuntu.com/certification/ and was wondering if ubuntu server could be run on the desktops? Any thoughts?04:12
qman___Zanzacar, ubuntu and ubuntu server are largely the same and can, for the most part, run on any x86 compatible hardware04:16
qman___certified hardware is simply hardware that's been tested, verified, and basically guaranteed to work04:16
qman___there are always edge cases and certain hardware that has partial or no support, but it's reached a ~99% point04:17
Zanzacargotcha well that cool. I guess I can just build my own machine to meet my own specs.04:17
qman___the hardware to look out for is mostly brand new stuff and rare or unusual stuff04:17
Zanzacarok that good to know.04:18
qman___the latest and greatest sometimes takes a while to get support04:18
qman___but it's usually easy to find out whether the hardware you want will work04:18
ZanzacarYa I dont think I am going to be building anything that powerful. I was just thinking about running a small samba server for a friend company.04:18
ZanzacarI dont even know if I would need anything over a dual core with 4gigs of ram. Main thing I think would be large enough HDD.04:19
Zanzacaranyways thanks for the input. I guess I wont worry about it to much thne.04:20
qman___just do a quick search on the chipsets before you buy04:21
qman___e.g. "sandy bridge linux support", which took a little while to get implemented04:21
qman___it's well covered now, though04:21
qman___if you want to be safe, pick something that's been out a year or so04:22
qman___and popular04:22
Zanzacarseems reasonable.04:23
ZanzacarI know I had a usb wireless adapter that I had to really work to get working. I was just not looking forward to something like that.04:23
ZanzacarSince if it was his company on the server the last thing I want is some driver/support issue.04:23
qman___with wireless, always search04:23
Zanzacarya I learned my lesson haha.04:24
qman___same with other cheap, consumable hardware04:24
qman___but the base systems and main components are generally well supported04:24
qman___wireless chips are literally flavor of the month04:24
qman___TV tuners are another hard area04:25
Zanzacarya I dont think I am going to have the server running anythign wirelessly04:25
ZanzacarI think I am just going to have the main components. Nothing fancy.04:25
qman___hardware RAID controllers usually have linux support, and fakeraid controllers shouldn't be used anyway04:26
qman___I've had to upgrade a system to accomodate a newer network card, but it did have support04:27
twbqman___: um, consumable?  That means printer ink and stuff04:27
twbqman___: ITYM fungible04:28
twb...which is an awesome word you should use at every opportunity04:28
stgraberhallyn: I think it'd be interesting to have a script to deal with VM images bootted in LXC indeed. Supporting using the VM image in read-only mode with an overlay (so ephemeral mode) as well as what I described in the blog post using the .img file as read/write partition.04:39
twbstgraber: VM as in kvm?04:39
stgraberhallyn: ideally extending a bit to read /etc/fstab from the disk image and figure out the partition scheme, generating a matching fstab file for LXC (in the case where /usr or /home are on a different partition)04:40
stgrabertwb: yes04:40
stgrabertwb: http://www.stgraber.org/2012/03/04/booting-an-ubuntu-12-04-virtual-machine-in-an-lxc-container/04:40
stgrabertwb: basically explains how to take an Ubuntu 12.04 VM disk image and boot it in a LXC container04:40
twbephemeral writes generally require a union tool like mount --union, aufs or unionfs -- and they're usually on a per-file not per-block basis, so a KVM qcow2 would become a whole new image immediately...04:40
* twb reads04:41
twbWhy do you bother partitioning a VM's disk?04:41
hallynstgraber: of course that's p+1 territory :)04:41
stgraberhallyn: definitely :)04:41
hallyntwb: for kvm :)04:42
stgrabertwb: I don't but I'm sure some people do ;) or use some automated partitioning doing that for them04:42
twbYes, silly people do :-(04:42
stgrabertwb: as for the ephemeral stuff, we'd use aufs or overlayfs on top of the mounted filesystem from the VM, not on top of the block device04:43
twbstgraber: ah, OK04:43
stgraberso we'd essentially do "kpartx -a" + mount + mount overlayfs + boot lxc from the overlayfs mount point04:43
twbOK, but at that point you're using lxc with an ex-KVM image, rather than using lxc *and* KVM?04:44
stgraberwell, the idea here is that you can use a single .img and either boot it in a VM or in LXC depending on what you want to do04:44
twbNod.04:44
twbThat approach means your LXC is a lot weaker, though. e.g. you can't drop the mount cap04:45
twbYou could, but only if you rewrote bits of the VM's disk (e.g. /lib/init/fstab or /bin/mount) in a way that'd break its ability to boot under KVM04:46
twbIs overlayfs the one from openwrt?04:46
stgraberas long as LXC is doing the mounting before calling init, we can still drop mount capability, the system will simply detect they are already mounted at boot time and will work just fine04:47
stgraberthough in 12.04 with the new apparmor changes, having mount capabilities in the container isn't as much as a problem as it used to04:47
hallyn(i'm out - gnight)04:49
twbstgraber: IME that is not the case04:50
twbstgraber: in lucid, if you drop mount caps, upstart will shit itself because even though it doesn't NEED to mount, it will fall down and die because it tries to and fails04:50
twbThat is why all my containers have /bin/mount -> true04:51
twbThat stuff drove me nuts, because there was no easy way to say "no mountall, you DON'T need to mount /var/run again" or whatever it was04:51
koolhead17hi all05:05
hana i cant format my external hard disck in ubuntu?06:03
twbhana: sure you can.06:04
twbhana: mkfs.ext4 /dev/sdz06:04
hanatwb:mkfs.ext4/dev/sdz mean by the way the hard disck was i was try to format before in FAT32 and during the format it shows me the error Error formatting volume  Error creating file system: helper exited with exit code 1: helper failed with: mkfs.vfat: failed whilst writing FAT  mkfs.vfat 3.0.9 (31 Jan 2010) and now i cant mount it it06:07
twbpastebin the full transcript06:09
hanatwb:http://pastebin.ubuntu.com/869421/06:14
twbIt is not obvious what is causing that failure.06:18
hanatwb:i don't now exactly but at the currnet time is also when i insert the cable it doesn't mount proporly. the hard disck have abackup06:20
twbIs this on a server?06:21
twbHave you installed a GUI?06:21
=== jtv1 is now known as jtv
hanatwb:  currently i am using in my pc whcich is not serevr06:26
hanait have GUI06:26
twbI cannot support that, sorry.06:26
twbhana: try #ubuntu.06:40
=== sixstringsg is now known as sixstringsg|away
linociscohow to install vbox guestaddition on ubuntuserver?08:05
=== smb` is now known as smb
linociscohi08:22
linociscohow to use nano like to see line no. as column?08:22
linociscohi all08:29
linociscoI want to find firewall like on fedora08:29
linociscoin Fedora, there is a file called firewall under /etc/kerber/firewall. How about on ubuntu?08:30
koolhead17!firewall08:39
ubottuUbuntu, like any other Linux distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command - see https://help.ubuntu.com/community/UFW | An alternative to ufw is the 'iptables' command - See https://help.ubuntu.com/community/IptablesHowTo | GUI frontends such as Gufw (GNOME) and Guarddog (KDE from Lucid onwards) also exist.08:39
linocisco!firewall = ?08:53
ubottulinocisco: I am only a bot, please don't think I'm intelligent :)08:53
linociscokoolhead17, so can I edit in ufw ?08:54
koolhead17!shorewall08:55
ubottuUbuntu, like any other Linux distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command - see https://help.ubuntu.com/community/UFW | An alternative to ufw is the 'iptables' command - See https://help.ubuntu.com/community/IptablesHowTo | GUI frontends such as Gufw (GNOME) and Guarddog (KDE from Lucid onwards) also exist.08:55
koolhead17linocisco: shorewall is what your looking for i suppose08:55
linociscokoolhead17, umm. do I have to download shorewall?08:56
koolhead17linocisco: you need to check/click the documentation link to start with :P08:56
lynxmanmorning o/08:56
linociscokoolhead17, I want to enter this "$ipt -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128"08:58
linociscokoolhead17, i am refering video on Fedora. but I dont know where to put this command on which file of ubuntu08:58
koolhead17linocisco: for same reason i gave you the ubuntu documentation link. kindly look/readup08:59
linociscokoolhead17, I entered one command using nano. but I want to put description or remark beside. how to "syntax"?09:07
jamespagemorning all09:10
koolhead17hello jamespage09:12
* jamespage waves at koolhead1709:12
koolhead17wondering why keystone commands started using native --name --service options :P09:12
koolhead17hello lynxman09:13
lynxmankoolhead17: ello09:13
uksysadminmorning koolhead17 (and the rest)09:13
koolhead17:P09:13
koolhead17uksysadmin: how was it man?09:13
uksysadminwas a great weekend. good to get back to my own bed though. urs?09:14
koolhead17great, not at all bad09:14
uksysadmin:)09:15
linociscoi want to setup proxy server for windows clients. do I need to do iptables or NAT apart from squid configuration?09:45
eutheriabbcmicrocomputer B/B+ or master?09:51
linociscoi want to setup proxy server for windows clients. do I need to do iptables or NAT apart from squid configuration?09:52
eutherialinocisco, http://bit.ly/z0OI6v09:52
Davieylinocisco: If you are setting the config on the windows client, then no - just stting up squid to allow connection from the LAN is enough10:01
linociscoDaviey, I am now configuring squid as per "http://www.ubuntugeek.com/how-to-setup-transparent-squid-proxy-server-in-ubuntu.html". is it enough?10:05
smbDaviey, upgraded my orchestra server from O to P over the weekend and it is not a happy bunny. Squid->squid3 apparently did not migrate options. And I still have to find out where the cobbler_web went to... :(10:06
bigonhi, do you think it could be possible to backport last version of puppet to lucid?10:07
micahgbigon: the oneiric version isn't enough?10:08
eutheriabigon, what version of puppet do you want?10:08
bigonwith 2.7.1-1ubuntu3~lucid1 I've, in some case, issue with require not being honnored10:09
bigonworks perfectly with 2.7.1110:09
micahgbigon: is it a no change rebuild on lucid?10:10
micahgbigon: until maverick is EOL, we'd have to backport lucid all the way through oneiric10:10
bigonhttps://launchpad.net/~bigon/+archive/ppa/+build/325416410:10
micahgright :)10:10
bigonwell not the right version of debhelper10:10
micahgbigon: 2.7.10-2 will also cause issues10:12
bigonwell I didn't investigate much10:12
micahgyeah, backporting from precise will not be fun10:12
bigon:/10:13
micahgbigon: I'd suggest waiting for maverick to be EOL next month, and if you then want to create a patch will revert all the newest debhelper/dpkg stuff, I would certainly consider approving backport10:15
micahg*patch that will revert10:15
micahgoh, and the ruby package name changes as well10:15
bigon*sigh*10:15
linociscodo I also need to setup DNS before we need to setup proxy server?10:17
linociscodo I also need to setup DNSserver  before we need to setup proxy server?10:17
bigonmicahg: I'll have a look at creating the backport, I need it for a customer anyway10:18
micahgbigon: if you're willing to make patches for the intermediate releases, I'd consider it as well, but that seems like a lot of work10:18
micahgbigon: it also requires install/run tests of all the reverse dependencies10:19
RoyKhrmf. trying to migrate a vm from one host to another fails after upgrading to precise beta http://paste.ubuntu.com/869629/10:19
bigon:(10:25
eutheriabigon, can i ask what you use puppet for?10:27
eutheriai know what is it supposed to do for me, i just never got why i would want to install another app to manage my server10:27
bigonautomatic deployement :p10:27
eutheriato manage apt?10:28
bigonwell it's a 'company policy' to use puppet to make repeatable deployement10:28
bigonand here it's for a deployement in the amazon cloud10:28
eutheriaor your own software?10:28
bigonwe try to package everything10:28
eutheriaah ok10:28
eutheriai always try and keep my software sandboxed10:29
koolhead17the essex4 keystone pkg is broken with new error10:29
linociscodo I also need to setup DNS before we need to setup proxy server?10:56
linocisco<linocisco> do I also need to setup DNSserver  before we need to setup proxy server?10:56
=== jodh` is now known as jodh
Davieyzul / adam_g: Can you comment how http://bazaar.launchpad.net/~ubuntu-server-dev/glance/essex/revision/120 relates to https://launchpad.net/ubuntu/+source/glance/2012.1~e4~20120224.1290-0ubuntu1 please?10:59
Davieyzul: Did you do a local build of https://launchpad.net/ubuntu/+source/python-eventlet/0.9.16-1ubuntu3 before uploading?11:00
eutheriathis duplicity backup system is very unreliable11:07
RoyKduplicity?11:08
eutheriayes11:08
eutheriathe backend of dejadup11:08
eutheriai constantly get missing gpg errors11:09
* RoyK uses Bacula11:09
RoyKand Bacula is *not* unreliable ;)11:09
eutheriai am not sure if it is entirely duplicity's fault11:09
RoyKlooks more like a hack than a backup system to me...11:11
eutheriasomeone here suggested it11:11
RoyKeutheria: there are a lot of different species in here ;)11:11
eutheriai figured as it was the backend to the desktop app it would be ok11:12
eutheriai am backup up to an external thirdparty, so duplicity seems to fit the bill11:13
eutheriaseems i need to make a backup of the cached sigs as they don't get copied up11:15
eutheriasometimes11:15
Tm_Tanyone got an idea about a tool that would monitor and alarm (log) when some process takes mem or cpu over defined limit12:00
eutheriaTm_T, nagios? munin? that sort of thing?12:01
Tm_Twe've been logging once a minute with ps what processes take most of cpu and mem, but between one minute there seems to be something that suddenyl takes all available mem and then disappears (OOM-Kill happens)12:02
Tm_Teutheria: something that preferably logs to file with as little setup as possible, and is active on monitoring things, as once a minute, or once every 5 minutes isn't enough12:03
eutheriaTm_T, not sure if there is anything that requires little setup12:04
Tm_Tyeah12:04
Tm_Tthere used to be "runaway process catcher" on KDE3, but haven't been able to find anything similar to server environment12:05
koolhead17Tm_T: i dont know about catcher/monitor but cgroup is something you can look it, i heard it does something12:06
Tm_Tkoolhead17: thanks12:13
Tm_TI'll try make yet another fancy script too12:14
koolhead17Tm_T: love to read your blog on same :)12:15
thys_hi.. There are 8 zombie processes on my webhosting server. All my domains stopped working yesterday could the zombies have anything to do with this?12:28
koolhead17thys_: who knows12:29
thys_how do I get rid of a zombie process?12:30
eutheriathys_, fix the parent process12:31
thys_how do I see information like this using the terminal?12:32
eutheriaps -axuf ?12:33
thys_how do I find out which the parent process is12:33
eutheriadoes the pretty tree not help?12:34
thys_how do I know which one I am looking for?12:38
eutheriathys_, http://bit.ly/AsfyPE12:46
koolhead17am having another error/warning during dashboard installation from repository http://paste.ubuntu.com/869792/12:48
koolhead17Daviey: ^^12:48
Davieykoolhead17: can you report a bug please?13:01
Davieykoolhead17: is this a clean box?13:02
koolhead17Daviey: yes.13:03
koolhead17never installed dash before13:03
koolhead17i can start a new VM and try it again before reporting :)13:03
Davieykoolhead17: no, both use cases are valid.. but knowing if it is an upgrade bug, or a new install bug is also useful.13:04
tdnHow can I have my server get two DHCP addresses? It only has one network interface, but I would like to create some aliases for eth0 that also obtains DHCP config. I guess I will have to somehow assign different MAC addresses for each alias. How to do this?13:06
koolhead17Daviey: let me know when you want to check the keystone again for the fix you pushed13:07
* koolhead17 puts all existing keystone documentation in trash13:08
koolhead17and points to keystone.openstack.org13:09
Davieykoolhead17: it's still in the build queue, should be an apt-get away when resolved.13:10
koolhead17sounds great13:14
rbasaktdn: perhaps you could use multiple tap devices bridged to eth0 and run dhcp clients against the tap devices. No idea if that'll cause any issues but I can't think of any.13:25
=== caribou_ is now known as Caribou
koolhead17Daviey: https://bugs.launchpad.net/horizon/+bug/94711813:38
uvirtbot`Launchpad bug 947118 in horizon "Horizon package on Precise throws warning during installation" [Undecided,New]13:38
koolhead17let me know if i should add some more info?13:38
tdnrbasak, hmm... Ok. Not sure how to use tap devs.13:53
lynxmanjamespage: Question for you sir, if I wanted to say that package B is an upgrade for B but also obsoletes package A just adding in the control file Replaces: A would be enough?14:13
rbasaktdn: on second thought I'm not sure it'll work anyway. You have to send to the bridge device to get stuff to go out on the correct interface and then you'd only have one mac address again. Might be worth experimenting though.14:31
tdnrbasak, ok. Can I create virtual NICs in ubuntu?14:50
patdk-wkthe dummy interface :)14:51
rbasaktdn: this stuff isn't really about what Ubuntu supports; it's what Linux supports. I'm sure there's a way to do what you need, but I'm not sure if you can do it without writing code. Others may be able to suggest something that just works.14:53
=== cmagina_ is now known as cmagina
patdk-wkoh, this is the multible ip's per dhcp nic thing15:01
patdk-wkthere is a way to do that, I helped someone a few months ago15:01
patdk-wkbut I don't remember and didn't really care for it, so dunno how it happened15:01
koolhead17Daviey: keystone is getting installed now :)15:14
koolhead17bug needs to be closed i suppose15:14
koolhead17hey zul15:14
zulkoolhead17: hi15:14
zuljdstrand: fyi keystone mir updated15:16
jdstrandzul: ack15:18
uvirtbot`New bug: #947183 in setserial (main) "package setserial 2.17-45.3ubuntu1 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/94718315:28
=== Ursinha is now known as Ursinha-lunch
jdstrandlynxman: hi! what is the status of the puppet 2.7.11 merge?16:42
lynxmanjdstrand: it was merged back by SpamapS16:42
jdstrandlynxman: ah, perfect :)16:43
jdstrandI see it now16:43
jdstrandSpamapS, lynxman: thanks! :)16:43
SpamapSjdstrand: np :)16:46
SpamapSand really I just synced it.. :)16:46
jdstrandzul: I'm curious about your change to python-eventlet to allow the tests to unconditionally pass. seems one of the criteria for main acceptance was that its test suite was enabled. is there more information on the failures? are you working on fixing them?16:57
zuljdstrand: its on the todo list for today16:57
jdstrandzul: excellent, thanks, then please ignore me :)16:57
zuljdstrand: consider it done ;)16:57
=== Ursinha-lunch is now known as Ursinha
axisysPhinnay: so can you login as root?17:04
Phinnaynope, no root logon either17:04
axisyscan you boot into recovery mode?17:04
Phinnayyes, if i use the CD, i can boot from there, mount / and get a prompt17:05
Phinnayi see all the files, etc... I just am not sure where to look to determine what is preventing logons from working...17:05
axisyswithout the cd, can you boot into single user moder ?17:05
axisysmode*17:05
Phinnayi've not tried that, trying now..17:06
Phinnayok, selected recovery mode, its loading now17:08
Phinnaynope, it does the same thing17:09
Phinnayi am not using the user 'root',  that is disabled on the server for login as per ubuntu17:10
Phinnayat setup time, the user i created was 'localadmin' that is the account I tried17:10
axisysPhinnay: edit the grub with init=/bin/bash .. that should drop you into root17:11
Phinnayso, boot from the CD and mount / to do that?17:11
axisysno.. reboot and get hold of the grub17:11
axisysi think holding shift while booting gives the grub.. its been a while17:12
Phinnayok, gotcha17:12
axisysis it lucid ?17:12
Phinnay11.1017:12
axisysok17:12
axisysmight be grub217:13
Phinnayit is grub2, am sure of that17:13
axisysk17:13
Phinnaywhere in the grub editor thingie do i add the init=/bin/bash?17:17
axisysI dont remember.. can you possibly paste it?17:18
Phinnayhttp://www.lphin.com/grub.png17:20
Phinnayhere ya go17:21
Phinnayits in a VM cluster so cant really paste per se ;p17:21
axisyson the linux line17:21
Phinnayok, that gave me a 'Kernel panic - not syncing: Attempted to kill init!'17:23
axisysremove the 'ro recovery nomodeset'17:25
axisysyou want rw17:25
axisysyou need to modify something17:25
axisysso remove the 'ro ..' part and add 'rw init=/bin/bash' there (without the quotes)17:26
wondermancan someone tell me if this module is needed in apache? modsetenvif17:26
axisyswonderman: probably a question for #httpd17:26
wondermannot when its default ubuntu setup17:26
wondermanthey always tell me 'goto #yourdistrohere'17:27
wondermanso here i am17:27
wondermani think its a module enabled by default on ubuntu server, but not other OS's17:27
wondermanor distros rather17:27
axisysdis2mod (?) and try restart apache .. but #httpd guys are the expert17:28
axisysa2dismod*17:29
wondermani know howot disable, im asking why/if they are needed, many modules by default17:29
wondermanauthz for example17:29
wondermanmod_reqtimeout17:29
wondermanthat module rendered the web server unusable ^17:29
Phinnay this is my grub with that init= thinger: http://www.lphin.com/grub.png17:30
Phinnayand i got the same kernel panic error17:30
Phinnayeep. change that file to grub2.png17:31
Phinnaysorry17:31
axisyshttp://www.lphin.com/grub2.png <-- not found17:32
Phinnayarrghghhh grub1.png17:32
Phinnayim a doof17:32
axisysyou need rw as well17:33
axisys`rw init=/bin/bash'17:33
Phinnayok, added the rw, booting now17:34
Phinnaysame kernel panic17:34
axisysboot from CD .. mount the root partition to /mnt and then chroot /mnt and then give root a password .. make sure shell path is correct and then reboot17:35
axisysyou could pastebin the kernel panic as well..17:35
Phinnaycant copy / paste out of a vsphere17:36
uvirtbot`New bug: #947309 in ipsec-tools (main) "racoon phase 2 negotiation fails with Win Vista/7" [Undecided,New] https://launchpad.net/bugs/94730917:36
Phinnayok, so all mounted17:39
Phinnayto give root a password i make the edits in the /etc/passwd file?17:40
axisyspasswd root.. since you chrooted17:40
Phinnayright17:40
Phinnayok, done17:40
axisyssync17:40
Phinnaytyped 'sync', got another # prompt, no errors17:41
axisysgood17:41
axisysgrep root /etc/shadow17:41
axisysdo you see a encrypted passwd there?17:41
axisysjust to make sure17:42
Phinnayyep!17:42
axisysyou are in chroot env .. right?17:42
Phinnayi belive so17:42
axisysok.. otherwise you did not change the root passwd .. :-)17:43
axisysreboot and you should be able to login as root17:43
Phinnayi did the same grep command for one of my local users on this server and it came back with a simalar looking entry so i know im on the hdd filesystem17:43
axisysok17:44
stgraberhallyn: around?17:44
hallynstgraber: yup17:45
stgraberhallyn: do you already have a fix for LXC not working with the current kernel?17:45
stgraber[13879.309454] type=1400 audit(1330969466.790:35): apparmor="DENIED" operation="mount" parent=26752 profile="/usr/bin/lxc-start" name="/usr/lib/lxc/root/" pid=26791 comm="lxc-start" src_name="/home/stgraber/data/vm/lxc/containers/precise-i386/rootfs/" flags="rw, rbind"17:45
hallynstgraber: no17:45
hallynstgraber: I'm trying to amke it work with the *old* kernel right now17:45
hallyn(so we can get an 0.8.0 release)17:46
Phinnayok, tried to log in as root, it did not say Access Denied as it did before we did this17:46
Phinnaybut it still did the same thing with returning me right to the prompt17:46
hallynstgraber: I guess until the real rules come, we need a "allow all mounts" sort of rule17:46
axisysyour shell might not be working17:46
stgraberyeah, I'm trying to figure out the right way of setting that :)17:46
hallynjjohansen: ^ where is a url describing the apaprmor mount rule syntax?17:47
stgraberjjohansen: how do we allow all mounts? (a quick grep through the man didn't help)17:47
jjohansenstgraber: mount,17:47
axisysmount back with cd.. and see if root shell is working17:47
axisysinit=/bin/bash gives panic might indicates bad shell.. not sure17:47
Phinnaywww.lphin.com/login.png17:48
Phinnayso you have a visual of whats goin on17:48
axisysnot quite :-) .. but i think you need to fix at least root's shell for a start17:49
axisysmount the root partition in /mnt17:49
stgraberjjohansen: /sbin/apparmor_parser is stuck at 99% of CPU parsing the profile if I add "mount"17:49
stgraberjjohansen: http://paste.ubuntu.com/870223/17:50
axisysthen find the shell root is using17:50
axisysand then run the shell .. see if it is working17:50
axisysbrb17:50
jjohansenstgraber: really :(,  try mount /**,17:50
stgraberjjohansen: that one worked apparently (at least /etc/init.d/apparmor reload finished in a few seconds)17:51
Phinnayso, in rescue mode, i have the options 'execute a shell in /dev/appserver/root' and 'execute a shell in the installer environment'17:52
stgraberor not ...17:52
stgraber[14336.219686] type=1400 audit(1330969923.894:76): apparmor="DENIED" operation="mount" parent=27585 profile="/usr/bin/lxc-start" name="/usr/lib/lxc/root/" pid=27604 comm="lxc-start" src_name="/home/stgraber/data/vm/lxc/containers/precise-i386/rootfs/" flags="rw, rbind"17:52
stgraberjjohansen: ^17:52
Phinnaywich one would be best?17:52
jjohansenstgraber: hrmm, something is out of sync.  Try mount /** -> /**,17:53
jjohansenhallyn: http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Mount_rules17:55
hallynthx17:55
jjohansenit hasn't been updated with the full docs but it should cover the basics17:55
jjohansenstgraber: there should be a new upload of the userspace today with some bug fixes17:56
jjohansenhallyn, stgraber: also for capability you should be able to just use17:58
jjohansen  capability,   # allow all capabilities17:58
jjohansenand then if you want to not allow a specific one17:58
jjohansen  deny capability X,17:58
stgraberjjohansen: ok, /** -> /** doesn't work either...17:59
stgraberjjohansen: oh, that's really nice!17:59
jjohansenstgraber: those are compiling and loading but failing to allow correct?18:00
stgraberjjohansen: yep18:01
jjohansenstgraber: actually you should be able to do that with file to but there is a bug there, that I need to track down.  That is18:01
jjohansen  file,18:01
jjohansenshould give all permissions18:01
jjohansenstgraber: so I have duped, and traced down to the code that is failing, will see if we can't get this fixed in todays upload18:21
stgraberjjohansen: cool, thanks18:21
Phinnay(axisys): let me know when ya get back :D18:21
Phinnayls18:21
SpamapSlynxman: you working on those changes we talked about to rabbitmq-server ?18:23
adam_gzul: did that ec2-fixes.patch get merged into nova yet?18:23
zuladam_g: dont think so18:23
zuladam_g: i been dealing with trying to get libvirt-console patch upstream18:23
adam_gzul: if that looks like an uphill battle, it might be easier to add a periodic task to nova that truncates console logs18:24
adam_gzul: i actually DOS'd myself over the weekend without that libvirt patch :)18:25
zuladam_g: yeah i suggested logrotate but apparently its not the "correct fix"18:25
lynxmanSpamapS: yes, there's more changes than I foresaw, the config syntax has been changed again and also the init.d file has been completely revamped from scratch18:25
adam_gzul: is there something in gerrit atm for the console stuff?18:25
zuladam_g: not yet working on it now though18:26
SpamapSlynxman: which explains why Thomas saw the regression.. bummer.18:26
uvirtbot`New bug: #947342 in euca2ools "euca-describe-instances  should have additional fields in output" [Undecided,New] https://launchpad.net/bugs/94734218:26
lynxmanSpamapS: yeah also added some extra checks in the control file18:26
axisysPhinnay: execute a shell in /dev/appserver/root18:37
zuladam_g: https://review.openstack.org/#change,493218:44
=== Qalqi is now known as pythoner
adam_gzul: Patch Set 1: Abandoned ?18:50
zuladam_g: yeah made a typo18:50
adam_gzul: also you have the original review for robbies original patch?18:50
zuladam_g: https://review.openstack.org/#change,493218:50
Davieyzul: why did you abandon?18:51
zulDaviey: typo in one of the tests18:51
Davieyzul: again, why did you abandon ?18:51
zulDaviey:  typo in nova/tests/test_utils.py18:52
Davieyzul: I think you are missing the question, you do know that you can re-push to the same topic, right?18:52
adam_gzul: found it. https://review.openstack.org/#change,70618:52
zulDaviey: really?18:53
adam_gzul: there are some concerns in there that will block the patch again, i think18:53
Davieyzul: i hope you are not being serious.18:53
zulDaviey: im not i dont know why i abandoned it18:54
zuladam_g: yes unfortunately18:54
adam_gzul: for the patches we're currently carrying (specifically the console fifo and the ec2-fixes.patch), moving forward can we do all refreshes in lp:~openstack-ubuntu-testing/$foo/essex and sync the most recent versions into ~ubuntu-server-dev/$foo/essex on upload day? we should ideally have a test case for each one to ensure the patch still does what its supposed to, i can try to come up with one for each of those 2 patches18:59
adam_gzul: i think the two of us refreshed console patch in the other branch at different times, and there were merge conflicts at build19:00
zuladam_g: sure19:01
adam_gzul: hopefully we wont be carrying those for much longer, but i think that is a good way to ensure we're not carrying a busted patch for any of the projects19:02
zuladam_g: ack19:02
adam_gzul: oh, FYI we're now running CI on KSL19:06
adam_gDaviey: ^19:07
zuladam_g: sweet...daviey uploaded your keystone fix this morning19:07
Davieyadam_g: sweet19:08
koolhead17SpamapS, hi19:10
Phinnayoooooohh, ok19:11
Phinnayso, mounted, went to execute bash, and got the same 'segmentation fault' messages i was seein in the boot log19:11
Phinnaylooks like bash is corrupt somehow o.o19:12
Phinnaystrace came back with some stuff, but i dont know how to read it...19:12
koolhead17zul, there is another bug with dashboard https://bugs.launchpad.net/horizon/+bug/94711819:14
uvirtbot`Launchpad bug 947118 in horizon "Horizon package on Precise throws warning during installation" [Undecided,New]19:15
zulkoolhead17: k ill have a look19:15
adam_gzul: did you already merge https://review.openstack.org/#change,4932 into ~ubuntu-server-dev?19:18
zuladam_g: not yet19:19
adam_gzul: where did libvirt_console_buffer flag come from? :)19:19
zuladam_g: ergh...19:20
zuleffing hell19:20
adam_gzul: theres syntax errors in there, btw19:20
zuladam_g: yeah its fixed in my tree sorry about that19:20
adam_gzul: well i guess that explains the merge conflicts19:22
=== sixstringsg|away is now known as sixstringsg
kieppie1hi guys. are there any details available re virt for the upcoming 12.04 release? I'm thinking of re-installing my new host once it's released, and I'd like to know what to expect. I saw "openstack" as an option when I installed a desktop beta19:34
Phinnay;19:37
zuladam_g: the lxc console changes got merged as well so it needs to take that into account now as well19:43
uvirtbot`New bug: #947424 in python-boto (main) "boto/utils.py makes use of boto.provider, but doesn't import it" [Undecided,New] https://launchpad.net/bugs/94742420:02
axisysPhinnay: do you have sh ?20:06
axisysmay be /sbin/sh or /bin/sh20:06
Phinnayim checking now - was just researching this a bit...20:07
axisysgrep root /mnt/etc/passwd ?20:07
Phinnayyeahhh20:09
Phinnaythis is weird, for the root user, its set as /bin/bash20:09
Phinnayfor everything else, its set as /bin/sh20:09
axisysgrep root /mnt/etc/passwd ?20:10
Phinnaythat comes up listing /bin/bash20:10
axisysok .. run /mnt/bin/bash .. and tell me what happens20:11
Phinnayit says segmentation fault20:11
axisyshow about run just bash ?20:12
Phinnaysame thing20:12
axisysrun which bash20:12
Phinnaycame back with /bin/bash20:12
=== sixstringsg is now known as sixstringsg|away
axisysls -ld /bin/bash20:13
axisysand ls -ld /mnt/bin/bash20:13
Phinnaywww.lphin.com/ls.png20:15
axisysls -ld /mnt/bin/bash /20:15
axisysls -ld /mnt/bin/bash ?20:16
Phinnayi am booting from the CD and using the root partition directly, so no /mnt20:16
axisys15:11:31 < axisys> ok .. run /mnt/bin/bash .. and tell me what happens20:16
axisys15:11:52 < Phinnay> it says segmentation fault20:16
axisyshow did you run that /mnt/bin/bash ?20:16
Phinnayi didnt, i changed it to /bin/bash20:17
Phinnaybecause no mounting20:17
axisysthat is not what I asked20:17
axisysmount root partition of the disk to /mnt20:18
Phinnayok20:18
axisysi have to run.. fix your bash.. copy it from cdrom20:19
Phinnayjust copy the bash file?20:20
Phinnaylike, /bin/bash ?20:20
angel282 Does anyone familiar with the zend optimizer? I have Ubuntu 10.04 lucid, and I cant get it to work?  I've searched google and I found many posts that said optimizer not support php 5.3? any idea?20:33
Davieysmoser: can you triage bug 947424, before i upload please? ;)20:34
uvirtbot`Launchpad bug 947424 in python-boto "boto/utils.py makes use of boto.provider, but doesn't import it" [Undecided,New] https://launchpad.net/bugs/94742420:34
smoserbefore you upload it ?20:35
smoserDaviey, i'm confused20:36
Davieysmoser: Can you confirm that the correct fix is to add "import boto.provider" ?20:37
zulDaviey: i just fixed up the console stuff that i been working on ill push it tonight20:38
smoserit sure looks like it to me, Daviey20:39
smoseris there an upstraem bug ?20:39
Davieysmoser: thanks, yes20:39
Davieyhttps://github.com/boto/boto/issues/61420:39
zulDaviey: the lxc console stuff got merged so ill have to remerge it20:39
Davieysmoser: sadly, LP won't allow you to use github as an upstream tracker20:40
smoseryeah.20:40
smoseri just treid20:40
DavieySeems github isn't popular enough to warrant supporting it20:40
DavieySourceforge FTW.20:40
kieppie1 hi guys. are there any details available re virt for the upcoming 12.04 release? I'm thinking of re-installing my new host once it's released, and I'd like to know what to expect. I saw "openstack" as an option when I installed a desktop beta20:44
smoserDaviey, yeah, that looks like a reasonable fix.20:44
smoseri added a reproduce to your bug report20:44
Davieythanks smoser20:45
mok0I am wondering how to set the hostname of my mailserver, which is connected via portforwarding from my internet router20:46
Davieyzul / adam_g: Can you confirm the PPA's used for those wanting to try pre-uploaded openstack?20:46
Davieyie, post jenkins?20:46
mok0should I just pretend that the machine is directly on the internet?20:48
zulDaviey: that is done the tarball script uploads to the local openstack-ci archive at the same time its uploaded to the ppa iirc20:48
adam_gDaviey: https://launchpad.net/~openstack-ubuntu-testing/+archive/openstack-trunk-testing20:49
adam_gDaviey: that lags behind whats been recently tested, depending on build queue20:50
wondermancan someone please tell me if in ubuntu SYN cookies are disbaled or enabled by default ?20:55
jpdswonderman: Enabled.20:57
jpdswonderman: See: /etc/sysctl.d/10-network-security.conf20:58
wondermannet.ipv4.tcp_syncookies = 120:58
wondermanthat is in the normal config20:58
Davieyadam_g: right, perfect!20:58
wondermanshould it be in both places?20:58
=== Firebolt is now known as CVNBot16
adam_gDaviey: keep in mind now is probably not the greatest time to install from there20:59
supremo13I have a Ubuntu Server 8.04 running BIND. If I upgrade to 10.04 will my server retain the BIND configs?20:59
=== CVNBot16 is now known as Firebolt
EvilResistance!8.0421:00
ubottuUbuntu 8.04 LTS (Hardy Heron) was the eighth release of Ubuntu. Desktop support ended on May 12 2011, Server support continues until 2013. See !upgrade, !lts and !eol for more details.21:00
EvilResistanceah21:00
EvilResistancesupremo13, it should, afaik it doesnt purge your configs21:00
EvilResistancebut you might want to back up the configs first21:00
EvilResistanceas a precaution21:00
Davieyadam_g: right, but once we clear up the process, it should be pretty good throught the cycle21:01
supremo13Thanks!!21:01
adam_gDaviey: well, packages get upload there after a succesful build, not after a deploy/testrun21:02
=== ukdkbr is now known as baby_aids
Davieyadam_g: ah, good point.. we might benefit from a 'known reasonably good' ppa21:02
=== baby_aids is now known as baibby_aids
adam_gDaviey: thats kinda tricky because theres so many variations of packages being built for every test run, i think we could only reasonably do that with a nova ppa, since thats what we use to trigger deployment tests21:03
adam_gDaviey: er, ..so many variations of packages being deployed for every test run21:03
=== baibby_aids is now known as chicks_dig_it
Davieyadam_g: I want a place where people can get the latest crack, before it's hit the archives, and be of reasonable standard21:04
DavieyHave ideas?21:04
adam_gDaviey: once we have this process in shape, we can build nightly/hourly/per-commit packages on changes to ubuntu-server-dev branches. that is, if we keep ubuntu-server-dev branches up to date regularly instead of before an upload21:05
zulDaviey: why not something like nightlies21:07
zulwith using sourece package reciepes21:08
xr600Hi... Anybody here with a good load of experience on Ubumtu's support for hibernation on various HW-confifurations ?21:09
GranHi, everyone! Could someone help me to figure out where is the problem: I'm trying to configure L2TP/IPSec on my Ubuntu Server 11.04 as described at http://blog.riobard.com/2010/04/30/l2tp-over-ipsec-ubuntu and when I'm running command: "sudo /etc/init.d/ipsec restart", it says: "openswan failed to exec the requested action - the following error occurred:" and no error code is given?21:09
Davieyzul: ooo, good thinking!21:10
Gallomimiaafter upgrading the server with do-release-update the /boot partition is full. what commands can i run to purge the system of these old kernel releases?21:28
cerealcan i run a v4 and v6 on isc-dhcp-server ?21:29
cerealwant to setup radvd to tell my clients to request an ipv6 address ;)21:29
cerealpreviously I had to run two instances to do so21:30
cerealone for v4 and one for v621:30
zulDaviey: you'll have to make sure the bzr mirror for the projects in up to date though21:33
Davieyzul: right!21:33
Aisonhello21:56
=== alaing is now known as funkymonk
Aisonafter a reboot today my ubuntu server no longer creates the bonding devices21:56
Aisonvery strange21:56
AisonI have to use ifenslave by hand multiple times until it is created21:56
AisonLoading kernel module for a network device with CAP_SYS_MODULE (deprecated).  Use CAP_NET_ADMIN and alias netdev-bond0 instead21:57
=== sixstringsg|away is now known as sixstringsg
Spanky99If anybody could give me a simple and clean recommendation of hardware and software with minimal amount of fuss for a UPS battery backup solution for Ubuntu 10.04 Server (running Zentyal) let me know.22:08
Spanky99I have some old APC Back-UPS 1000/1100's with the "dumb" serial cable.  Looks like a complete pain in the !@#$ from what I've read.  Will happily buy another unit that is easier to hook up and has "plug and play" software in the repositories...22:08
rbasakSpanky99: good question. The nut package might be a good place to start. There's a compatibility list here: http://www.networkupstools.org/stable-hcl.html. But I'm not sure about Lucid support (though there is a package in main for Lucid), or if there's a better supported solution.22:58
JanCSpanky99: dumb serial cables can't provide plug'n'play, but newer USB ones should22:59
rbasakSpanky99: I don't have any experience with UPS management software for Linux myself, apart from with apcupsd from around ten years ago. But I do know that nut exists.22:59
=== Lcawte is now known as Lcawte|Away
=== sixstringsg is now known as sixstringsg|away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!