/srv/irclogs.ubuntu.com/2012/03/21/#ubuntu-server.txt

=== Firebolt is now known as }
=== } is now known as Firebolt
hallyngary_poster: that shouldn't be lxc...00:56
uvirtbotNew bug: #960761 in bacula (main) "Typo in template files for mysql & pgsql director packages" [Undecided,New] https://launchpad.net/bugs/96076100:56
hallyngary_poster: to top running int he container, there's no difference between tasks in or not ina  continer00:56
hallyngary_poster: now if you set the cgroups to throttle the container, you can do that, but then the container would act slow...00:56
hallynand actually, you could pin it to one cpu and limit memory, but you can't make it slow (only give it fewer cpus shares if there are other active competing tasks)00:57
hallynsmoser: you've got impressive bash-fu.  Do you mind proofreading my bash replacement for lxc-wait?01:51
hallyn(it seems to work...)01:52
smosersure01:52
hallynsmoser: http://people.canonical.com/~serge/lxc-wait01:53
hallynthanks01:53
smoserhallyn, how real a critique do you want01:55
smoser?01:55
smoser:)01:55
hallynsmoser: particularly things that look dangerous (that a c programmer would mistakenly do in a bash script)01:56
smoser * container_exists does not check the return code of lxc-ls01:56
hallynsmoser: hopefully it won't have to live long...01:56
hallyn(only until i re-write all of lxc in go)01:56
smoser * verify_state() does not use local variables01:56
smoserand01:56
smoser  for((i=0;i<${#valid_states[@]};i++)); do ... ; done01:57
smoserwould be bash specific, but does not fork for 'seq'01:57
hallynsmoser: to spare others, do you mind pastebining?  :)01:57
smoseryou could also do that with a local 'i' counter variable and increment it with i=$(($i+1))01:57
hallynsmoser: i don't mind bash specific, this is definately bash.  will use that thanks01:58
smoserverify_states: use local variables01:58
smoserhm...01:59
smosercan i do this tomorrow, hallyn ?01:59
smosercan you just ping me when you get in ?01:59
smoseri'm way past should-be-working time01:59
hallynsmoser: sure - thanks01:59
smoseryou know, that in general, stuff like this:01:59
smoser s=`lxc-info -s -n $lxc_name | awk '{ print $2 }'`01:59
smoserjust doesn't check for failure01:59
smoserright?01:59
smosereven with set -e (which i generally dislike) that will not fail02:00
smoserbecause the return code used for checking is that of 'awk' which most likely didn't fial02:00
hallynyeah...  is therea  better idiom?02:00
hallynuse variable for each step?02:00
smoserthat is safer. then you can catch the failure of one.02:01
smoseror, direct to a file02:01
hallyn(it's tough to resist my love of pipelines :)02:01
smoserand then read from file02:01
hallyni'll split it into steps.  thanks.  good night.02:01
smoserin bash, you can actually do it02:01
smosersee BASH_PIPESTATUS (man page)02:01
smosermight be PIPE_STATUS02:01
smosergood night02:01
lifelesssmoser: pipefail isn't it?02:03
lifelesssmoser: or do you mean manually implementing it via $PIPESTATUS ?02:03
=== Robinux is now known as s
=== s is now known as sw0rdfish
hallynpipefail sounds nice02:04
twbI use pipefail all the time02:17
twbOtherwise false | true will not cause an abort in set -e02:17
twbhttp://paste.debian.net/160476/02:18
hallyntwb: i've learned something today02:31
hallyngary_poster: around?02:32
twbI strongly recommend having all sh code peer reviewed by #bash02:32
hallynfreenode?02:32
twbYes02:32
hallynare they going to bikeshed?02:32
twbtwkm, greycat et al may be acerbic, but they will help you avoid the most common fuckups02:32
twbhallyn: yes, but feel free to ignore that02:32
hallyn:)02:33
hallyncool, i think i'll start doing that. thanks!02:33
twbIt is a lot like #netfilter, if you read and understand the FAQ then you have 90% of the problems solved02:33
twbEven just lurking there helps02:33
linociscohi pfsense vs Ubuntu server , which is stronger and reliable ?02:54
qman__linocisco, both are strong and reliable02:58
qman__pfsense is a tailored firewall distribution, while ubuntu server is general purpose02:58
qman__both can run most of the same software, and perform most of the same tasks02:58
twbIn lucid, why are there both ipset and xtables-addons-common packages03:54
hallynjjohansen: any news on aa_getcon?  does it help if i file a bug?  i can't really push new lxc without it fixed03:54
hallyn(bc user wouldn't e able to disable apparmor)03:54
twbI have a lucid server.  I want to use ipset on it.  As at lucid, xtables-addons is implemented via module-assistant, but I want the dkms version.  I can cherry-pick xtables-addons-dkms from natty, but this needs a newer libxtables.so (from the iptables package).  Should I keep cherry picking from natty, or is it time to say "this is silly" and do something different?04:22
twbHmm, and natty's iptables package needs a newer nfnetlink04:22
jjohansenhallyn: aa_getcon should be working in current, as long as you make sure the profile has access.  Adding the following rule to the profile will do it05:18
jjohansen  /proc/*/attr/current r,05:18
jjohansenThe bug is in the failure path05:18
hallynjjohansen: but even just running a test case unconfined i get the weird result05:19
jjohansenor at least that is how it is working for me.  I have a patch for that, and am working on change_profile on exec, which isn't setting the perm in the profile correctly05:19
hallynjjohansen: i just (20 mins ago) switched to a hand-rolled read from /proc/%d/attr/current...05:20
hallyni can try switching back tomorrow though with that policy added05:20
jjohansenhallyn: hrmm, it has been working fine for me, but I haven't checked inside a container yet05:20
hallynjjohansen: i'm not doing it in a container05:21
uvirtbotNew bug: #960860 in lxc (universe) "fstab doesn't work for lvm based containers" [High,Confirmed] https://launchpad.net/bugs/96086005:21
jjohansenhallyn: hrmm strange.  can you send me your code so I can use that exactly05:21
hallynjjohansen: and even the code in lxc i was using, that was in the usr.bin.lxc-start profile which doesn't restrict /proc05:21
hallynok05:21
jjohansenhallyn: I will get it sorted out tonight, so you can play with it in the morning05:22
hallynjjohansen: http://paste.ubuntu.com/893227/05:24
hallynjjohansen: right now it's giving me the right profile, but 128 return value05:24
hallynjjohansen: yesterday i swear it was giving me NULL or something else for profile05:24
hallynjjohansen: i'm heading off - good night05:25
jjohansenhallyn: okay I will audit through again, and test. I can believe it failed especially if you did it in a profile, the failure path returned garbage05:26
hallynjjohansen: oh and i did figure out the lvm problem, fwiw.  apparmor just aggravated a weirdness05:26
jjohansenhallyn: oh! Thanks, thats one less thing to look at tonight05:26
hallynjjohansen: ok so i guess failure path needs to get cleaned up no matter what :)  otherwise i was going to say since workaround works, if you have other things to work on, i can get by...05:28
hallynthanks again - good night05:28
jjohansengood night hallyn05:28
=== jtv is now known as jtv-afk
=== smb` is now known as smb
linociscohi all08:20
lynxmanmorning o/09:02
bluefrogis this channel ok for 12.04 problems?09:04
sorenbluefrog: Probably.09:05
sorenbluefrog: Depends on the problem, really. The fact that it's on 12.04 isn't a problem.09:06
sorenI mean... er... the fact that it's on 12.04 doesn't disqualify it from this channel.09:06
sorenQuite the contrary, IMO. 12.04 is much more interesting.09:07
bluefrogupgraded yesterday to 12.04. (was 10.04 before). Have dns and dhcp server on the machine. before the search domain was ok i could host computer and have an answer. since the upgrade the search domain doesn't work. I have to enter an FQDN to do a host query09:07
sorenWhat's in /etc/resolv.conf?09:08
bluefrogadded dns-search domain.local to /etc/network/interfaces, restarted networking service but with no luck09:08
sorenbluefrog: Is resolvconf installed?09:09
bluefrogsoren,  basic stuff from resolvconf. hang on09:09
bluefrognameserver 127.0.0.109:09
sorenAh.09:09
bluefroghost computer.domain.local is ok host computer is not09:09
sorenIf that used to work, we should be looking at your DNS config.09:10
sorenCan you pastebin the output of "ls -l /etc/named" (or is it /etc/bind9? I always forget)09:11
* soren has a hunch09:11
* soren recommends pastebinit09:12
bluefrognamed.conf.local amongst other. the db are located in /var/lib/bind09:12
bluefrogsoren http://pastebin.com/Tyfmzmrz09:13
sorenHm. No .dpkg-old files.09:14
bluefrogno09:14
greppybluefrog: is "nameserver 127.0.0.1" all that is in your /etc/resolv.conf?09:16
bluefrogyes09:16
bluefrogthe rest is in /etc/resolvconf.resolv.conf.d/original09:16
greppybluefrog: try adding "search $domain" and "domain $domain" where $domain is what domain you expect it to find09:17
bluefroggreppy, this I don't need I know it works. I am fighting with the resovlconf package09:17
bluefrogit gets the domain ok as a fqdn host search works09:18
bluefroghttp://pastebin.com/HNR3vR0J09:19
bluefrogI suppose it get the domain form this file. I added search domain.local to that file, restarted networking and resolvconf but it still doesn't get the search part09:21
bluefrogand yes of course it works when adding the search part to resolv.conf directly09:24
sorenbluefrog: Can you pastebin your /etc/network/interfaces?09:27
sorenbluefrog: Does the search bit in /etc/resolv.conf get overwritten once you restart networking? (Just making sure that resolvconf actually does run)09:28
bluefroghttp://pastebin.com/minAwPdq09:28
bluefrogtesting the rest09:28
bluefrogsoren, right on. resolv.conf is not rewritten after a service networking restart09:29
bluefrogbut ifdown eth0 ifup eth0 does the trick09:35
bluefrogand it works now09:36
bluefrogthx soren09:36
bluefrogand greppy09:36
bluefroga bit weird though that I had to bring down/up eth0. thought networking service restart would d o that09:37
ivokssoren: i'm running for a motu again :) i would appriciate your input on https://wiki.ubuntu.com/AnteKaramatic/DeveloperApplicationMOTU :D thank you09:38
bluefrogwell iresolv.conf is not rewritten at every ifdown ifup09:40
sorenivoks: Whuh?09:42
sorenivoks: Oh, you expired?09:42
ivoksyeah :/09:42
sorentsk, tsk :)(09:43
soren:)09:43
ivokshehe09:43
uvirtbotNew bug: #961008 in rabbitmq-server (main) "rabbitmq-server starting rabbitmq-server failed post-installtion script error status 10" [Undecided,New] https://launchpad.net/bugs/96100809:45
sorenivoks: done09:46
ivokssoren: thanks09:46
uvirtbotNew bug: #925609 in glance "install throws errors about SADeprecationWarning" [Medium,In progress] https://launchpad.net/bugs/92560910:23
=== sw0rdfish is now known as Robinux
Davieyjamespage: please upload rabbitmq, FFe Ack'd11:52
jamespageDaviey, ack11:52
Davieysoren: if you can touch memberships, i also expired from MOTU.. (gah).. i'd like to re-be an explicit member please.11:53
Davieyjamespage: did you see bug 961008 ?11:53
uvirtbotLaunchpad bug 961008 in rabbitmq-server "rabbitmq-server starting rabbitmq-server failed post-installtion script error status 10" [Undecided,New] https://launchpad.net/bugs/96100811:53
Davieyjamespage: I think this upload solves that?11:54
jamespageDaviey, I don't think so - that looks like something local to the reporter11:55
jamespageI'll take a look tho11:55
Davieywin11:55
jamespageDaviey, no idea what 'airtime-easy-setup' is doing...11:56
Davieyjamespage: no, i don't know either.11:57
Davieyjamespage: don't worry about that one11:57
jamespageI won't11:57
jamespage:-)11:57
jamespagelynxman, Daviey: rabbitmq-server uploaded11:58
lynxmanjamespage: \o/11:58
=== smb` is now known as smb
=== amine is now known as endra
zulhallyn: ping12:44
hallynzul: .12:44
zulhallyn: have you ever came across the virtio-console stuff from qemu-kvm12:44
hallynno12:44
hallynzul: is it something supposedly in teh code, or proposed and never pulled in?12:45
zulhallyn: ah ok...we are running into a problem in openstack that if you send junk to the console then the console.log will just fill up and dos the machine12:45
zulthe code is there already but the patch isnt12:46
hallynpatch fixing the dos?12:46
zulhallyn: it just throttles the console basically when the chardev cant handle any more info: https://build.opensuse.org/package/view_file?file=0008-virtio-console-Enable-port-throttling-when-chardev-i.patch&package=qemu&project=home%3Aftr3g%3AVirtualisation-test&rev=1cecc426586196cfc468312adca8583a12:47
zulhallyn: what do you think?12:51
zultotally untested of course but thats my theory anyways12:52
hallynzul: I can't find mailing list discussion of it.  Amit is still active, so it might be worth asking him.12:55
hallynsince it sounds like you have a testcase, should take 3 mins to test right?12:55
zulhallyn: right12:56
zulhallyn: lemme see if i can find the thread12:56
zulhallyn: starts here: http://lists.gnu.org/archive/html/qemu-devel/2010-04/msg01048.html12:58
Cryp71cWorking with an ubuntu-server, it restarted and the openssh didn't seem to start (or at least I couldn't access it externally via ssh), one of our on-site guys had to fix it...want to make sure this doesn't happen again so I'm looking at the services that run at startup via "service --status-all" and ssh is listed as having a + next to it...12:58
hallynzul: so it was quite simply nacked13:06
hallynand the async api never showed up13:06
hallyn(which i don't think wouldve helped with your problem)13:06
zulhallyn: k13:08
hallynzul: what does the client do to dos the machine exactly?13:09
zulhallyn: im thinking this more what i need though: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=f1925dff7e6c4799f5951cf167a437c0737a266c13:09
hallynlooking13:09
zulhallyn: im not sure, if you just send malicious data it would be possible to keep filling up the log files13:10
hallyndefine malicious13:10
hallynthe patch you cite is there...13:10
zulyeah13:11
zulspamming /dev/ttyS0 with dd or some such from within the instance13:12
hallynand this is only for serial?13:12
zulcorrect afaik13:12
hallynI recommend you write the m-l, or if you prefer open a bug (and i'll lookat it after i clear lxc)13:12
hallyn(one more look at the patch)13:13
zulhallyn: heh bug already open https://bugs.launchpad.net/nova/+bug/832507 ;)13:13
uvirtbotLaunchpad bug 832507 in nova "console.log grows indefinitely" [Medium,In progress]13:13
hallyncrap been around awhile13:14
hallyni'll mark it affecting qemu-kvm.13:14
zulyeah we had a work around for a while now which is causing other problems now as well13:14
zulill try going down the rabbit hole with the virtio-serial throttling as well13:15
hallynthanks.13:15
uvirtbotNew bug: #961142 in cloud-init (main) "chef 0.10: package installation: returned 100, expected 0" [Undecided,New] https://launchpad.net/bugs/96114213:32
hallynstgraber: are you around, do you have 1.5 minutes?13:34
twbThat's a very specific interval...13:34
hallyni didn't say 1.50 :)13:34
hallynbuys me a half-moment more if i need it13:35
twb<steve> I'm after somebody who's got five minutes.  <twb> Five minutes... in a row?13:36
twbAh, the benefits of having an in-office fortune file.13:37
hallyntwb: you use containers right?  I'm trying to decide whether to risk slice-n-dicing containers on upgrade, or ask the few people usign lvm-backed containers to update themselves13:37
twbI'm using lxc but only on lucid, and it's about 50:50 whether I will even bother with precise or just wait til 201413:38
hallynyup i knew you were on lucid :)  ok thanks13:39
twbI am using lxc on lvm tho13:39
stgraberhallyn: yep13:39
hallyni *suppose* i could just force-mount proc if i need to13:39
hallynstgraber: for bug https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/96086013:39
uvirtbotLaunchpad bug 960860 in lxc "fstab doesn't work for lvm based containers" [High,Confirmed]13:39
hallynthe problem is: to change apparmor profile in lxc-start, you need to write to /proc/slef/attr/exec13:40
twbIt's too late to for me to think about that tonight13:40
stgraberhallyn: right, yeah, I noticed that and that's also what's forcing us to allow procfs and sysfs in the container as lxc won't mount them itself13:40
hallynstgraber: but the way lxc works, it refuses to mount a file listed in /var/lib/lxc/container/fstab if the target pth is absolute and doesn't start with the contaienrs rootfs13:40
twbAlso my brother and his friend both just busted in blind drunk13:40
hallynstgraber: i'm trying to figure out the best course of action...13:40
hallyntwb: good luck wwith that :)13:41
stgraberhallyn: could we allow entries like "/usr/lib/lxc/root/..." in the fstab?13:41
hallynstgraber: i was going to upgrade containers, but maybe it's better to figu13:41
hallynright13:41
hallynno13:41
hallynthat still requires a change to the containers13:41
hallyni'm wondering if i should update lxc to guess /var/lib/lxc/<containe/rootfs and allow that13:41
hallyni think that's best13:41
hallynso then even though rootfs.path = /dev/sda1, it'll allow /var/lib/lxc/container/rootfs...13:42
hallyni'll do that.  thanks  :)13:42
stgrabernp :)13:42
hallynstgraber: no reason not to use relative paths in new containers right?13:42
hallyn(i.e. 'proc proc proc defaults 0 0' in place of 'proc /var/lib/lxc/c1/rootfs/proc proc defaults 0')13:42
hallynok with that fixed i think i'm going to push the next version13:43
hallyn(then do one more update after aa_getcon is fixed)13:43
stgraberhallyn: relative sounds like a nice default13:46
hallynyeah looks prettier too.  ok i'll do that, thanks13:46
stgraberhallyn: that way people can rename/move their container without having to update the fstab13:46
hggdhroaksoax: I am using fence_cdu to reboot 4 machines in four individual processes; the output from fence_cdu (on all processes) show *all* machines, not only the one affected by each process. Is this a bug?14:00
hggdhroaksoax: the processes are started at the same time, BTW14:00
hggdhhallyn: what could cause http://pastebin.ubuntu.com/893637/ ? It happens every so often14:02
hggdhhallyn: this is Oneiric, BTW14:03
hallynhggdh: what are the lines pefixed with + ?14:04
hggdhhallyn: this is the output of a shell script, run with '-x'. The '+' lines are expansion from the '-x'14:05
hallynhggdh: no idea, never seen it..14:05
hallynheavy load?  precise?14:05
hggdhhallyn: OK. I will open a bug. What would you like for libvirt debugging?14:06
hggdhhallyn: at the time this happens, there are four different processes trying to start a domain, at the same time14:06
hggdhhallyn: oneiric14:06
hallynxml dump, ps -ef, result of repro wit libvirt_debug=1...14:07
hallynoh.14:07
hallynoneiric is known unstable under load :(14:07
hallyni haven't found the patch to cherrypick to fix it14:07
hggdhgawddammit..14:07
hallyni'm considering asking if i can backport the precise version14:07
hggdhso no need for a bug?14:07
hallynlemme find the existing bug14:07
hallynwell a new bug may provide new input...14:08
hggdhheh14:08
hggdhok. libvirt_debug=1, bounce libvirt, and try again, correct?14:08
hggdhhallyn: if you find the original bug, please tell me14:10
koolhead11hey all14:11
hallynhggdh: i think it was #90321214:12
hallynbug #90321214:12
uvirtbotLaunchpad bug 903212 in libvirt "libvirtd stops responding" [Undecided,Confirmed] https://launchpad.net/bugs/90321214:12
hallynhggdh: yeah, and hope debug doesn't hide the bug :)14:13
hallynthanks14:13
hallynfrankly i don't know tha ti believe the git lots - localtime_r specifically *shoudl* be thread-safe14:13
hggdhOK. I will request some time to test14:21
hallynstgraber: I'm going to push lp:~serge-hallyn/ubuntu/precise/lxc/lxc-shutdownv2 .  I'd rather push it now and have time to push fixes to it tonight if i need to before freeze.  (and everything appears to now be working)14:23
hallynstgraber: if you have *time* for a review, i'll wait, but i'm assuming you don't14:23
roaksoaxhggdh: maybe it is14:23
roaksoaxhggdh: haven't touched in a while14:23
hggdhroaksoax: the feeling I have is this is the CDU jumbling it all together. Anyway, want a bug?14:24
roaksoaxhggdh: sure!14:25
hallynjjohansen: the lxc i'm pushing today uses my hand-rolled aa_getcon.  i'll update to getcon when it's fixed.14:25
hggdhroaksoax: er. Againt which package? cobbler itself?14:25
roaksoaxhggdh: fence-agents14:25
hggdhroaksoax: roj14:25
stgraberhallyn: yeah, I'm quite busy at the moment, so just upload :)14:26
hallynstgraber: will do, see you on the other side :)14:27
uvirtbotNew bug: #959749 in multipath-tools (main) "disk-detect/multipath/enable=true fails at loading dm-multipath module" [Medium,Fix released] https://launchpad.net/bugs/95974914:41
uvirtbotNew bug: #961226 in cloud-init (main) "cloud-init should run resize2fs in the background" [Undecided,New] https://launchpad.net/bugs/96122614:46
sktdI’m profiling Firefox11. I can never get it to work, in enforce mode, without problems. I keep running it, then running aa-logprof to make corrections to the profile. Then I go into Edit A Profile (in YaST) to look at the changes and I see some weird entries at the beginning of the profile. They are as follows:14:56
sktd[+] ^null-1514:56
sktd[+] ^null-1e14:56
sktd[+] ^null-2714:56
sktd[+] ^null-3214:56
sktd[+] ^null-d14:56
sktdAnd it keeps making these things. I think this is why I keep having problems. Each time it creates one of the entries, it has a new name. I thought I’d try highlighting the first entry ([+] ^null-15) and doing an edit of the entry and set it to [+] ^null-*, but when I highlighted the entry and clicked the Edit Entry button, it was like it took me into another file that was full of14:56
sktdentries of its own.14:56
sktdAny idea on what I can do to resolve this?14:56
hallyngary_poster: so at least the aufs path corruption is a kernel issue.  I can only assume the overlayfs one is too then14:58
sktdAre there any AppArmor experts out there?15:00
uvirtbotNew bug: #961240 in cloud-init (main) "cloud-init does not run grub on PV Xen and KVM has issues" [Undecided,New] https://launchpad.net/bugs/96124015:00
hggdhsktd: you will probably get all experts you need in the #ubuntu-hardened channel15:03
sktdOk, thanks15:04
hallynjjohansen: I hate to disturb you, but i have a feeling pathname changes to do with apparmor attach_disconnected stuff may be related to bug 959352 ? (/proc/self/maps shows paths not relative to task's pivot_root'd root)15:04
uvirtbotLaunchpad bug 959352 in lxc "Ephemeral containers have "/rootfs" prefix in /proc/self/maps entries" [High,Confirmed] https://launchpad.net/bugs/95935215:04
gary_posterhallyn, ack.  thank you for looking at it15:06
hallynall though15:09
hallyni notice lxc is doing pivot_root without a chroot15:09
hallynthat should also hit non-ephemeral containers, but...  lemme try15:09
esuavequestion, so if i have a static IP defined in /etc/network/interfaces.. than how come the server still pulls a new IP automatically from time to time?15:10
sorenDaviey: You were interested in getting keystoneconfig-common into Ubuntu, is that right?15:12
Davieysoren: yes, very much so.15:12
DavieyBUT, need to go afk right now.15:12
sorenDaviey: It only really makes sense if the other openstack packages will be consuming it.15:12
sorenDaviey: Ok.15:12
sorenDaviey: I've got it ready now. Let's discuss later.15:12
Davieycool15:12
hallynnope.  doesn't help15:13
sorenesuave: 999 out of 1000 cases, it's because you didn't reboot after setting the interface to use static addresses.15:17
esuaveyou have to reboot the machine?!15:18
sorenesuave: Not really.15:18
sorenesuave: But it's easier to explain.15:18
sorenesuave: You need to get rid of the dhcp client that's still running.15:18
sorenesuave: You started the machien with dchp configuration.15:18
sorenesuave: Then you changed the network config15:18
sorenesuave: ...and maybe did and ifdown && ifup.15:19
esuaveright but cant i just restart the service?15:19
esuaveahh15:19
esuavecool15:19
esuaveok15:19
sorenesuave: By the time you did ifdown, /etc/network/interfaces claimed the interface was statically configured. I.e. ifdown didn't know that there was a dhcp client that needed killing.15:19
sorenHence, it didn't.15:19
sorenRebooting solves it.15:19
sorenSo does killing the dhcp client manually.15:20
esuaveso how can i do it without rebooting the server?15:20
sorenBut telling people to reboot is orders of magnitude easier than explaining how to kill a stray dhcp client.15:20
sorenMonkeys can reboot.15:20
sorenI've heard of cats doing it, too.15:20
sorenUnintentionally, but still.15:21
koolhead11 soren monkeys/cats15:21
sorenI've never heard of a cat hunting down and killing a dhcp client.15:21
sorenesuave: Kill the dhcp client.15:21
esuavesoren: how can i do that? :) without rebooting15:21
sorenesuave: See? Orders of magnitude more complicated to explain.15:21
esuavesoren: haha15:22
sorenit's a process.15:22
sorenKill it like  you would any other.15:22
esuavedhclient315:23
esuavewould that be the process?15:23
sorenI'm rather busy. My solution: Reboot. If that's a problem, see if you can work it out yourself or find someone to explain it.15:23
sorenSounds like a decent guess.15:23
esuavesoren: ok thank you for your help..15:23
sorenDepending on your hardware, you could have rebooted anywhere between 3 and 50 times in the time it took to have this conversation.15:25
sorenJust saying15:25
esuavesoren: :P your absolutely correct. sorry15:26
uvirtbotNew bug: #961277 in keystone (universe) "Cannot uninstall keystone" [Undecided,New] https://launchpad.net/bugs/96127715:31
JesseCAnybody have experience with PBIS / Likewise Open?15:32
JesseCI did a fresh install with thier script on Ubuntu 10.04 Server and it installs it, but Ubuntu doesn't recognize it.15:33
JesseCSo if I do a domainjoin-cli, Ubuntu just says that it isn't installed.15:33
cwillu_at_workJesseC, (I don't know anything about likewise, but) specific and exact errors messages will be more helpful than paraphrasings15:37
qhartmanI'm running into a problem where a large number of tiny log files are consuming all available inodes on a system. Does anyone know of a logratotion tool that handles this? They all seem to be geared towards rotating a few large files instead.15:41
=== Robinux is now known as sw0rdfish
JesseCcwillu: Sorry, I got it though. Seems the new PBIS isn't in the Ubuntu repos yet, so you have to specify the path with the commands for them to work correctly.15:54
JesseCqhartman: you could just write a shell script and put it in a cron job to clear the files at set intervals.15:55
qhartmanJesseC, Yeah, I'm about to dive into that. Was just hoping to use something off the shelf if possible.15:59
Davieyesuave: I switched a server from dhcp to static just last night.. rebooting is thoroughly recommended..16:01
Davieyif you made a goof, and the old lease is still valid.. you won't knwo you made a goof until next time you reboot/power cut16:02
esuaveDaviey: thanks! i just killed dhcp service though.. i think that should be sufficient16:02
DavieyTherefore, something like that.. i really think you should reboot.16:02
esuaveDaviey: ok ill get a reboot in there16:02
Davieyesuave: Okay, but soren and myself have recommended otherwise.. but, hey, it's your party :)16:02
DavieyOh, good.16:02
esuaveDaviey: nah your right.. ill reboot! its a good idea to see what it does16:03
esuaveDaviey: thank you!16:03
Davieyesuave: BTW, when i did it yeserday.. i DID make a goof.. and a reboot outlined it.. :)16:03
esuavenice!16:04
stgraberhallyn: /var/lib/dpkg/info/lxc.postinst: 43: /var/lib/dpkg/info/lxc.postinst: apparmor_parser: not found16:31
stgraberhallyn: that's with LXC in an LXC container where apparmor isn't installed (as it wouldn't work anyway)16:32
hallynstgraber: hrmph - should make apparmor a depend16:33
hallynstgraber: well, do you think it's worth making it work without apparmor?  i prefer not to...16:33
zulhallyn: how can you find what belongs to what in devices.list for cgroups?16:34
hallynzul: i don't understand?16:34
hallynstgraber: it's far too late to merge 0.8.0 right?16:34
zulhallyn: i have http://paste.ubuntu.com/893850/ in my devices.list how do i find out which major/minor it belongs to16:35
stgraberhallyn: it should work without apparmor16:35
stgraberhallyn: I tried installing apparmor in that container and it'd then fail because it doesn't have mac_admin16:36
hallynwell that's bad16:36
hallynbut ok, i'll fix the postinst to check for that16:36
hallyninstead of adding apparmor to Depends16:36
hallynzul: which major/minor *what* belongs to?  aparticular device you want to add?16:37
zulhallyn: actually i think i just answered my own question16:38
hallynok16:38
hallynstgraber: does http://paste.ubuntu.com/893863/ look sufficient?16:42
smoserhallyn, you should redirect output to /dev/null16:44
smosero rotherwise make it go away16:44
smoserno one really cares to see "apparmor_parser is /usr/bin/apparmor_parser"16:44
hallyni make it go away with my gruff demeaner16:44
hallynthanks will do16:44
hallyn(i did it when i did it on the cmdline...  :)16:45
stgraberhallyn: it works but you probably should >/dev/null 2>&1 it too otherwise I get "apparmor_parser: not found"16:46
hallynyup, done and pushed, thanks16:46
micahghallyn: what would you like to backport?16:47
hallynmicahg: i'm nto sure what you're referring to16:47
micahghallyn: [09:07] <hallyn> i'm considering asking if i can backport the precise version16:47
hallynmicahg: oh!  libvirt16:47
hallynthe oneiric version is just an unstable piece of junk16:48
micahgwell, it works for some use cases16:48
hallynmicahg: you mean libvirt works for some use cases?16:49
micahgyeah, worked fine for me for my VMs on oneiric AFAICR16:49
hallynyeah it works ok if you're using it casually, one thing at a time16:49
hallynbut these openstack ppl like to push it16:49
micahghallyn: the problem is that there are quite a few reverse dependencies (mostly openstack) and it gets frequent security updates16:50
hallynhggdh: zul: I trust there's heavy testing of openstack on precise going on too, so the instabilities are fixed in precise, not just not-yet-discovered?16:50
hallynmicahg: why is that a problem?  because some APIs might ahve changed o->p in libvirt and break users ,you mean?16:51
hggdhhallyn: zul is the one to answer on openstack16:52
hallynhggdh: sure, but what about your jenkins stuff?16:52
micahghallyn: yeah, or just general quirk interactions between the different versions, if you're willing to test the reverse dependencies (install/run), I'll throw up test packages, but I'd also need a commitment to test if there's a security update so we can make sure the -backports users aren't exposed16:52
micahgoneiric only has 13 more months of life, so it's not such a long commitment16:52
hggdhhallyn: on jenkins we have not reached openstack yet; there it is purely domains being started for other tests16:52
hallynmicahg: oh, wait, we're taking different things anyway.  i didn't mean in -backports16:53
hallyni meant one ginormous sru16:53
micahghallyn: oh :), I doubt you'll get a full SRU :)16:53
micahgbut you can ask, anyways, my offer stands if you want it16:53
hallynhggdh: yes 'im just trying to figure out whether you've done heavy use of libvirt on preicse16:53
hallynmicahg: thanks, i appreciate it16:53
hallynanyway i'll try to reproduce on a reintalled laptop16:54
hggdhhallyn: no, our test environment runs Oneiric16:58
zulhallyn: yeah we do lots of testing :)16:58
hallynzul: with lots of vms start/stopping simultaneously?16:58
hallynzul: I just want to make sure that bugs 961217 and 903212 don't show back up later in precise16:58
uvirtbotLaunchpad bug 961217 in libvirt "virsh start domain sometime fail" [Undecided,New] https://launchpad.net/bugs/96121716:58
uvirtbotLaunchpad bug 903212 in libvirt "libvirtd stops responding" [Undecided,Confirmed] https://launchpad.net/bugs/90321216:58
zulhallyn: not that far yet, still need to do more functional testing16:59
hallynall right then i need to find a testcase that works in oneiric and test in precise16:59
hallynlike asap16:59
jjohansenhallyn: makes sense, my updates to getcon, etc. are just waiting for review and we will try to get them into an upload today17:10
hallynthx17:11
adam_gSpamapS: ping17:18
SpamapSadam_g: pong, sup?17:19
adam_gSpamapS: https://launchpad.net/ubuntu/precise/+queue  , the nova upload has a new binary package and is blocked.   is there anything i can do to help  nudge that along?17:20
SpamapSadam_g: yes, an archive admin can review it.. there should be somebody who can do it in #ubuntu-devel17:22
SpamapSadam_g: technically I could do it but I'm not an "official" archive admin :-P17:23
adam_gSpamapS: ah, i see, thanks17:23
SpamapSadam_g: its a very fast process, I'm sure theyll just +1 it17:28
smoserSpamapS, speaking of +1...17:43
smoser https://launchpad.net/ubuntu/oneiric/+queue?queue_state=1&queue_text=cloud-init17:44
SpamapSsmoser: I will be doing SRU stuff later today17:45
smoserk. thank you. there are 4 of those.17:46
zuladam_g: i dont think truncate will do it18:06
uvirtbotNew bug: #961450 in samba (main) "package samba 2:3.6.3-2ubuntu1 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/96145018:06
zuladam_g:http://paste.ubuntu.com/893983/18:07
zuladam_g: nm i suck18:10
=== koolhead17|away is now known as koolhead17
koolhead17hi all18:32
* koolhead17 is happy today ^^18:32
Dr4gTrying to install mongo18:39
Dr4gThis was successfull: apt-get install mongodb-stable18:39
Dr4gnevermind, i got it working.18:39
Dr4gsorry :)18:39
adam_gzul: did you have a fix for Bug #948719  ?18:50
uvirtbotLaunchpad bug 948719 in keystone "uninstall  keystone error" [High,Confirmed] https://launchpad.net/bugs/94871918:50
zuladam_g: not yet18:50
zullemme finish what im doing here and ill see what i can do18:50
adam_gzul: im working on keystone packaging right now, is it an obvious error?18:51
zuladam_g: yeah i think you need || true in the postrm18:51
adam_gzul: looks like its prerm, tho18:52
zuladam_g: try in the || prem as well18:52
zulbah one of the two18:53
smoserhallyn, around ?18:55
smoserhm.. maybe this is more smb18:56
smoserbut...18:56
smoserwget https://cloud-images.ubuntu.com/server/precise/20120321/precise-server-cloudimg-amd64-disk1.img18:56
smoserfrom inside canonistack18:56
smoserlucid instance: 37.6 MB/s18:57
smoserprecise instance: 10.4 MB/s18:57
hallynsmoser: all right all right.  once i reproduce (or fail) libvirt wonkiness on oneiric, i'll do an io perftest18:58
hallyndo you know offhand if it uses virtio+raw?18:58
smoserjust changed to wget https://cloud-images.ubuntu.com/server/precise/20120321/precise-server-cloudimg-amd64-disk1.img -O /dev/null18:59
koolhead17noaXess, hey there18:59
smoserand the precise instances (tried 2) then get a bit of a boost (12M/S and 19M/S)18:59
smoserbut the lucid improves to 47.4 MB19:00
smoserwhat is '+raw' ? hallyn19:00
hallynsmoser: as in 'qemu-img create x.img 10G'.  not qcow2/qed19:01
smosernot raw.19:03
smoserwait.19:03
smoseryes.19:03
smoserthey're raw, almost cetain.19:03
smoseroh.19:03
smoserbut wait.19:03
smoserthey're backed by raw19:03
smoserthey're delta images19:04
smoserbut that concern was partially invalidated by the write to/dev/null19:04
smoseras i saw in a youtube video about mysql that writing to devnull is super fast19:04
hallynso you're saying it's network19:05
smoserwell, i actually think a bit of both.19:05
smoserbecause i *did* see an increase19:05
hallynvirtio network?19:05
smoserand even out of the 2, one was almost doubled.19:05
smoseryeah, virtio. is there a way i can tell in the guest for sure though?19:06
hallynlspci -v?19:06
hallynnot sure.  but there should be an indication due to the driver19:06
smoser$ ethtool -i eth019:06
smoserdriver: virtio_net19:06
smoseradam_g, around ?19:12
hallynsmb: zul: ^ ring any bells?19:12
smoseron canonistack, i just did euca-allocate-ip, and assigned that to an instance19:12
smoseri can then ssh to the instance by its new ip address19:12
adam_gsmoser: here19:12
smoserbut only the 10. addresses show up in euca-describe-instances *or* nova show.19:12
adam_gsmoser: try this19:13
adam_gsmoser: re-associate the IP19:13
adam_gsmoser: that is, run the associate command again and get an error19:13
adam_gthen check19:13
zulhallyn: missing context (kid is sick)19:13
smoserok. prior to that error.19:14
smoser$ euca-describe-addresses19:14
smoserADDRESS 91.189.93.84    i-00001ba7      standard19:14
smoserthat showed correct19:14
smoserand now, either human error, or weirdness, adam_g your suggested kick fixed things.19:15
adam_gsmoser: theres some weirdness or crappiness in the way floating IPs are associated. when they're initially associated, the instance's cache is not properly updated with its new IP (which is where describe/show is getting its info)  re-assocaiting somehow refreshes somewhere in its error path19:17
smoseradam_g, is there a bug open ?19:18
adam_gsmoser: theres now a periodic task that runs on compute that refreshes that nw info cache, but im not sure canonistack is running a new enough version for that19:18
smoserah.19:18
smoserok.19:18
adam_gsmoser: but even that is kind of crappy, because it takes a min or so for that to be updated19:18
smoserwell, it was well more than a minute or so.19:18
adam_gsmoser: i agree its annoying and something that should be looked and hopefully improved, but i probably wont be getting to it this week and not sure upstream would consider it release critical19:19
smoserright. well if it is eventually consistent (even at 60 seconds) thats better than nothing.19:19
hallynhggdh: you say one of the vms almost always fails to start?19:26
hggdhhallyn: one of them, not necessarily the same19:26
hallyn(haven't reproduced yet, but i don't have the i/o overhead of creating new images)19:26
hallynok i'll leave an image clonging while starting...19:26
hggdhhallyn: I am booting already-created images19:26
hallynhm19:26
hallyncan you post your virsh dumpxml output?  cause i'm not reproducing.  and this is on a crappy laptop19:27
hggdhI have some 14 images, one for every kernel flavour19:27
hallynhggdh: but you just boot 4 at a time and get one failing right?19:30
hggdhhallyn: correct19:31
hggdh4 our five at a time19:31
hggdhs/our/or/19:32
hallynhggdh: any xml for any one which has failed is fine19:32
hallynjust want to see your net and disk setups19:32
hggdhhallyn: will attach to the bug19:32
hallynthx19:32
hallynhggdh: ah - i did reproduce19:36
hggdhcool!19:36
hggdhand the XML in in the bug19:36
uvirtbotNew bug: #961536 in lxc (universe) "lxc failing to initialize after update of Precise" [Undecided,New] https://launchpad.net/bugs/96153619:36
hallynso now i'm going to do-release-upgrade and see if it gets fixed in precise19:37
hallynjjohansen: the usr.bin.lxc-start policy does 'umount /mnt/**'.  But lxc-start then does pivot_root and then umounts/mounts dev/pts.19:41
hallynjjohansen: do i have to allow all umounts, or is there a way to tell apparmor to use the pathname relative to original root?19:42
hallynit's not so bad, i don't mis-trust lxc-start, it's the container i want to confine19:42
hallynbut if possible would be nice to keep it stricter19:42
hallyn(see bug 961536)19:42
uvirtbotLaunchpad bug 961536 in lxc "lxc failing to initialize after update of Precise" [High,Confirmed] https://launchpad.net/bugs/96153619:42
jjohansenhallyn: maybe, pivot_root can transition the profile (do a change_profile), but it only works against the task doing the pivot_root atm, and it may be broken since the updates, as I don't have a regression test finished for it yet, and I haven't manually tested19:45
hallyni missed something - whawt only works against the task doing pivot_root?  name resolution against origianl root?  that's all i want in that case19:46
=== Lcawte is now known as Lcawte|Away
jjohansenhallyn: name resolution against the original root isn't possible atm, sorry19:47
hallynok then i'll have to open it up.  thanks19:47
jjohansenit will come but is not available yet19:47
bencer_jamespage: any update on the zentyal packages stuck on the new queue?19:48
bencer_from the docs team want us to hit the archive before merging, so kind of presure from there too19:48
adam_gzul: ping20:18
=== Lcawte|Away is now known as Lcawte
nancy--* urthmover has quit (Ping timeout: 250 seconds)20:55
nancy--* Leseb has quit (Ping timeout: 244 seconds)20:55
nancy--* Leseb_ is now known as Leseb20:55
nancy--* Leseb_ (~Leseb@45873hpv102119.ikoula.com) has joined #ubuntu-server20:55
nancy--* Leseb has quit (Ping timeout: 246 seconds)20:55
nancy--* Leseb_ is now known as Leseb20:55
nancy--<nancy--> wonderman,  http://pastebin.com/EfFLn92z any help?20:55
nancy--* dob_ (~dob@dslb-094-217-102-019.pools.arcor-ip.net) has joined #ubuntu-server20:55
nancy--* dob_ has quit (Remote host closed the connection)20:55
nancy--<nancy--> http://pastebin.com/EfFLn92z any help with permission for apache ?20:55
nancy--* jiboumans_ (~jib@99-9-208-230.lightspeed.sntcca.sbcglobal.net) has joined #ubuntu-server20:55
nancy--<oCean> nancy--: STOP posting in 2 channels20:55
nancy--<koolhead17> nancy--, have you tried installing apache before?20:55
nancy--<nancy--> yes but never configured bind20:55
nancy--<koolhead17> nancy--, what exactly y20:55
nancy--sory20:55
guntbert!paste | nancy--20:55
ubottunancy--: For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.20:55
nancy--does anybody knows whats the  meaning of the amazaons bandwidth means ? 15 GB of bandwidth out aggregated across all AWS services ,   1 GB of Regional Data Transfer21:07
patdk-lapI thought regional data transfer was free21:12
nancy--guys.. any good sites for php work? elance.com ? etc ?22:08
sorenDaviey: Areound?22:08
* soren is typing like it's 11 PM22:09
Davieysoren: always for ypu.22:13
Davieyyou*22:13
=== Lcawte is now known as Lcawte|Away
sorenDaviey: Cool.23:04
sorenDaviey: So, you're interested in the keystone config thing. It's only useful if you'll be changing at least one package to use it.. Will you be doing tht post betafreeze?23:05
adam_gsoren: im curious, what keystone config thing?23:07
sorenadam_g: I wrote a keystoneconfig-common (think dbconfig-common, but for hooking things into keystone)23:07
adam_gsoren: oh, nice23:08
fidothehello. stoopid network question. I have a machine with a static IP, and a block of other IPs, like this http://www.bytemark.co.uk/support/technical_documents/vmh_public_internal_bridge (i have a bytemark-hosted box). I've completely forgotten the magic route invocation to make this work with a libvirt-generated virbr0… Can someone point me?23:09
adam_gsoren: is the code somewhere, an example of how to use maybe?23:09
sorenadam_g: Code is at lp:~soren/+junk/keystoneconfig-common23:10
sorenadam_g: My glance packaging uses it. Hang on, I'll post the link.23:10
fidotheI have tried route add -net 1.0.0.0/24 dev virbr0 equivalent, FWIW23:11
sorenadam_g: lp:~cisco-openstack/glance/ubuntu23:12
Davieysoren: I think this makes much sense.. if it's regression free, i'd love to include it in precise.23:12
Davieyadam_g: thoughts?23:12
sorenDaviey: Well, it'll suddenly hook things into keystone.23:12
sorenDaviey: Which is different from what you've done so far.23:13
Davieyadam_g: Do you have capacity to look at hooking it in pre b2?23:13
Davieysoren: it's a new bin, not new src, right?23:13
sorenWhen's b2 again?23:13
sorenDaviey: New src.23:13
Davieysoren: we freeze tomorrow :)23:13
adam_gDaviey: heh definitely not23:13
Davieyadam_g: A day for you, is like 10 days for a normal person.23:14
sorenDaviey: Whether I add an extra bin to an existing src or I add a new src doesn't matter.23:14
Davieysoren: a binNEW is much cheaper on review time. :)23:14
sorenmeh23:15
sorenWhen is b2?23:15
* soren <- Too lazy to check23:15
Davieysoren: I'll check with the techboard.23:16
Davieysoren: beta2 freeze is tomorrow at ~9:00 PM UTC23:16
sorenOh. Heh.23:17
sorenRight.23:17
sorenToo many projects with freezes right around now.23:17
sorenIt's confusing!23:17
adam_gsoren: that looks really cool, im not sure if ill be able to get to play with it any point soon though23:19
sorenI have no problem with that. Daviey just sounded really interested.23:19
sorenIt's there. Take it if you want it.23:20
sorenOr rather: Let me know if you want it, and I'll upload it.23:20
sorenIt's going to be quite a bit of rowk still to get everything integrated with keystone.23:20
sorenrowk == work23:20
adam_gthere was a chat in #openstack-packaging  yesterday about the same problem23:21
sorenI'm solving all of this, though.23:22
sorenI just won't be done for another two weeks, probably.23:22
Davieyhallyn: numactl is showing as a libvirt candidate for main promotion, is it required?23:22
sorenI'll be doing all of glance, nova, swift, horizon, and quantum.23:23
Davieyadam_g: This makes it much easier to install openstack from apt-get.. so it's quite exciting really.23:23
adam_gspeaking of keystone, ive been working on getting unit tests going okay at package build. its going to require some tweaks to a config override file in the $src/tests/ directory to setup the environment properly. is it kosher to scribble on that file during override_dh_auto_test (and possibly revert changes) or should it be patched with quilt?23:25
hallynDaviey: define required....  it's wanted by people23:25
hallynit got MIR23:25
hallyn(biab)23:25
adam_gDaviey: yeah, definitely23:26
Davieyhallyn: i'm not seeing a MIR?23:27
=== bladernr_ is now known as bladernr_afk
Davieyadam_g: depends on the size of the change TBH... both are valid, but quilt allows easier inspection of our diff23:28
adam_gDaviey: its minimal stuff, but im not sure the changes applied via a quilt would be useful to anyone after the package is installed (ie, creating a temporary db a build time, in debian/tmp/ or some such)23:29
Davieyadam_g: Yeah, either are valid.. do the path that is easier.23:32
adam_gDaviey: thanks23:32
jMCgHow do I get this string 'lib/x86_64-linux-gnu' from debian build tools?23:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!