=== Firebolt is now known as } === } is now known as Firebolt [00:56] gary_poster: that shouldn't be lxc... [00:56] New bug: #960761 in bacula (main) "Typo in template files for mysql & pgsql director packages" [Undecided,New] https://launchpad.net/bugs/960761 [00:56] gary_poster: to top running int he container, there's no difference between tasks in or not ina continer [00:56] gary_poster: now if you set the cgroups to throttle the container, you can do that, but then the container would act slow... [00:57] and actually, you could pin it to one cpu and limit memory, but you can't make it slow (only give it fewer cpus shares if there are other active competing tasks) [01:51] smoser: you've got impressive bash-fu. Do you mind proofreading my bash replacement for lxc-wait? [01:52] (it seems to work...) [01:52] sure [01:53] smoser: http://people.canonical.com/~serge/lxc-wait [01:53] thanks [01:55] hallyn, how real a critique do you want [01:55] ? [01:55] :) [01:56] smoser: particularly things that look dangerous (that a c programmer would mistakenly do in a bash script) [01:56] * container_exists does not check the return code of lxc-ls [01:56] smoser: hopefully it won't have to live long... [01:56] (only until i re-write all of lxc in go) [01:56] * verify_state() does not use local variables [01:56] and [01:57] for((i=0;i<${#valid_states[@]};i++)); do ... ; done [01:57] would be bash specific, but does not fork for 'seq' [01:57] smoser: to spare others, do you mind pastebining? :) [01:57] you could also do that with a local 'i' counter variable and increment it with i=$(($i+1)) [01:58] smoser: i don't mind bash specific, this is definately bash. will use that thanks [01:58] verify_states: use local variables [01:59] hm... [01:59] can i do this tomorrow, hallyn ? [01:59] can you just ping me when you get in ? [01:59] i'm way past should-be-working time [01:59] smoser: sure - thanks [01:59] you know, that in general, stuff like this: [01:59] s=`lxc-info -s -n $lxc_name | awk '{ print $2 }'` [01:59] just doesn't check for failure [01:59] right? [02:00] even with set -e (which i generally dislike) that will not fail [02:00] because the return code used for checking is that of 'awk' which most likely didn't fial [02:00] yeah... is therea better idiom? [02:00] use variable for each step? [02:01] that is safer. then you can catch the failure of one. [02:01] or, direct to a file [02:01] (it's tough to resist my love of pipelines :) [02:01] and then read from file [02:01] i'll split it into steps. thanks. good night. [02:01] in bash, you can actually do it [02:01] see BASH_PIPESTATUS (man page) [02:01] might be PIPE_STATUS [02:01] good night [02:03] smoser: pipefail isn't it? [02:03] smoser: or do you mean manually implementing it via $PIPESTATUS ? === Robinux is now known as s === s is now known as sw0rdfish [02:04] pipefail sounds nice [02:17] I use pipefail all the time [02:17] Otherwise false | true will not cause an abort in set -e [02:18] http://paste.debian.net/160476/ [02:31] twb: i've learned something today [02:32] gary_poster: around? [02:32] I strongly recommend having all sh code peer reviewed by #bash [02:32] freenode? [02:32] Yes [02:32] are they going to bikeshed? [02:32] twkm, greycat et al may be acerbic, but they will help you avoid the most common fuckups [02:32] hallyn: yes, but feel free to ignore that [02:33] :) [02:33] cool, i think i'll start doing that. thanks! [02:33] It is a lot like #netfilter, if you read and understand the FAQ then you have 90% of the problems solved [02:33] Even just lurking there helps [02:54] hi pfsense vs Ubuntu server , which is stronger and reliable ? [02:58] linocisco, both are strong and reliable [02:58] pfsense is a tailored firewall distribution, while ubuntu server is general purpose [02:58] both can run most of the same software, and perform most of the same tasks [03:54] In lucid, why are there both ipset and xtables-addons-common packages [03:54] jjohansen: any news on aa_getcon? does it help if i file a bug? i can't really push new lxc without it fixed [03:54] (bc user wouldn't e able to disable apparmor) [04:22] I have a lucid server. I want to use ipset on it. As at lucid, xtables-addons is implemented via module-assistant, but I want the dkms version. I can cherry-pick xtables-addons-dkms from natty, but this needs a newer libxtables.so (from the iptables package). Should I keep cherry picking from natty, or is it time to say "this is silly" and do something different? [04:22] Hmm, and natty's iptables package needs a newer nfnetlink [05:18] hallyn: aa_getcon should be working in current, as long as you make sure the profile has access. Adding the following rule to the profile will do it [05:18] /proc/*/attr/current r, [05:18] The bug is in the failure path [05:19] jjohansen: but even just running a test case unconfined i get the weird result [05:19] or at least that is how it is working for me. I have a patch for that, and am working on change_profile on exec, which isn't setting the perm in the profile correctly [05:20] jjohansen: i just (20 mins ago) switched to a hand-rolled read from /proc/%d/attr/current... [05:20] i can try switching back tomorrow though with that policy added [05:20] hallyn: hrmm, it has been working fine for me, but I haven't checked inside a container yet [05:21] jjohansen: i'm not doing it in a container [05:21] New bug: #960860 in lxc (universe) "fstab doesn't work for lvm based containers" [High,Confirmed] https://launchpad.net/bugs/960860 [05:21] hallyn: hrmm strange. can you send me your code so I can use that exactly [05:21] jjohansen: and even the code in lxc i was using, that was in the usr.bin.lxc-start profile which doesn't restrict /proc [05:21] ok [05:22] hallyn: I will get it sorted out tonight, so you can play with it in the morning [05:24] jjohansen: http://paste.ubuntu.com/893227/ [05:24] jjohansen: right now it's giving me the right profile, but 128 return value [05:24] jjohansen: yesterday i swear it was giving me NULL or something else for profile [05:25] jjohansen: i'm heading off - good night [05:26] hallyn: okay I will audit through again, and test. I can believe it failed especially if you did it in a profile, the failure path returned garbage [05:26] jjohansen: oh and i did figure out the lvm problem, fwiw. apparmor just aggravated a weirdness [05:26] hallyn: oh! Thanks, thats one less thing to look at tonight [05:28] jjohansen: ok so i guess failure path needs to get cleaned up no matter what :) otherwise i was going to say since workaround works, if you have other things to work on, i can get by... [05:28] thanks again - good night [05:28] good night hallyn === jtv is now known as jtv-afk === smb` is now known as smb [08:20] hi all [09:02] morning o/ [09:04] is this channel ok for 12.04 problems? [09:05] bluefrog: Probably. [09:06] bluefrog: Depends on the problem, really. The fact that it's on 12.04 isn't a problem. [09:06] I mean... er... the fact that it's on 12.04 doesn't disqualify it from this channel. [09:07] Quite the contrary, IMO. 12.04 is much more interesting. [09:07] upgraded yesterday to 12.04. (was 10.04 before). Have dns and dhcp server on the machine. before the search domain was ok i could host computer and have an answer. since the upgrade the search domain doesn't work. I have to enter an FQDN to do a host query [09:08] What's in /etc/resolv.conf? [09:08] added dns-search domain.local to /etc/network/interfaces, restarted networking service but with no luck [09:09] bluefrog: Is resolvconf installed? [09:09] soren, basic stuff from resolvconf. hang on [09:09] nameserver 127.0.0.1 [09:09] Ah. [09:09] host computer.domain.local is ok host computer is not [09:10] If that used to work, we should be looking at your DNS config. [09:11] Can you pastebin the output of "ls -l /etc/named" (or is it /etc/bind9? I always forget) [09:11] * soren has a hunch [09:12] * soren recommends pastebinit [09:12] named.conf.local amongst other. the db are located in /var/lib/bind [09:13] soren http://pastebin.com/Tyfmzmrz [09:14] Hm. No .dpkg-old files. [09:14] no [09:16] bluefrog: is "nameserver 127.0.0.1" all that is in your /etc/resolv.conf? [09:16] yes [09:16] the rest is in /etc/resolvconf.resolv.conf.d/original [09:17] bluefrog: try adding "search $domain" and "domain $domain" where $domain is what domain you expect it to find [09:17] greppy, this I don't need I know it works. I am fighting with the resovlconf package [09:18] it gets the domain ok as a fqdn host search works [09:19] http://pastebin.com/HNR3vR0J [09:21] I suppose it get the domain form this file. I added search domain.local to that file, restarted networking and resolvconf but it still doesn't get the search part [09:24] and yes of course it works when adding the search part to resolv.conf directly [09:27] bluefrog: Can you pastebin your /etc/network/interfaces? [09:28] bluefrog: Does the search bit in /etc/resolv.conf get overwritten once you restart networking? (Just making sure that resolvconf actually does run) [09:28] http://pastebin.com/minAwPdq [09:28] testing the rest [09:29] soren, right on. resolv.conf is not rewritten after a service networking restart [09:35] but ifdown eth0 ifup eth0 does the trick [09:36] and it works now [09:36] thx soren [09:36] and greppy [09:37] a bit weird though that I had to bring down/up eth0. thought networking service restart would d o that [09:38] soren: i'm running for a motu again :) i would appriciate your input on https://wiki.ubuntu.com/AnteKaramatic/DeveloperApplicationMOTU :D thank you [09:40] well iresolv.conf is not rewritten at every ifdown ifup [09:42] ivoks: Whuh? [09:42] ivoks: Oh, you expired? [09:42] yeah :/ [09:43] tsk, tsk :)( [09:43] :) [09:43] hehe [09:45] New bug: #961008 in rabbitmq-server (main) "rabbitmq-server starting rabbitmq-server failed post-installtion script error status 10" [Undecided,New] https://launchpad.net/bugs/961008 [09:46] ivoks: done [09:46] soren: thanks [10:23] New bug: #925609 in glance "install throws errors about SADeprecationWarning" [Medium,In progress] https://launchpad.net/bugs/925609 === sw0rdfish is now known as Robinux [11:52] jamespage: please upload rabbitmq, FFe Ack'd [11:52] Daviey, ack [11:53] soren: if you can touch memberships, i also expired from MOTU.. (gah).. i'd like to re-be an explicit member please. [11:53] jamespage: did you see bug 961008 ? [11:53] Launchpad bug 961008 in rabbitmq-server "rabbitmq-server starting rabbitmq-server failed post-installtion script error status 10" [Undecided,New] https://launchpad.net/bugs/961008 [11:54] jamespage: I think this upload solves that? [11:55] Daviey, I don't think so - that looks like something local to the reporter [11:55] I'll take a look tho [11:55] win [11:56] Daviey, no idea what 'airtime-easy-setup' is doing... [11:57] jamespage: no, i don't know either. [11:57] jamespage: don't worry about that one [11:57] I won't [11:57] :-) [11:58] lynxman, Daviey: rabbitmq-server uploaded [11:58] jamespage: \o/ === smb` is now known as smb === amine is now known as endra [12:44] hallyn: ping [12:44] zul: . [12:44] hallyn: have you ever came across the virtio-console stuff from qemu-kvm [12:44] no [12:45] zul: is it something supposedly in teh code, or proposed and never pulled in? [12:45] hallyn: ah ok...we are running into a problem in openstack that if you send junk to the console then the console.log will just fill up and dos the machine [12:46] the code is there already but the patch isnt [12:46] patch fixing the dos? [12:47] hallyn: it just throttles the console basically when the chardev cant handle any more info: https://build.opensuse.org/package/view_file?file=0008-virtio-console-Enable-port-throttling-when-chardev-i.patch&package=qemu&project=home%3Aftr3g%3AVirtualisation-test&rev=1cecc426586196cfc468312adca8583a [12:51] hallyn: what do you think? [12:52] totally untested of course but thats my theory anyways [12:55] zul: I can't find mailing list discussion of it. Amit is still active, so it might be worth asking him. [12:55] since it sounds like you have a testcase, should take 3 mins to test right? [12:56] hallyn: right [12:56] hallyn: lemme see if i can find the thread [12:58] hallyn: starts here: http://lists.gnu.org/archive/html/qemu-devel/2010-04/msg01048.html [12:58] Working with an ubuntu-server, it restarted and the openssh didn't seem to start (or at least I couldn't access it externally via ssh), one of our on-site guys had to fix it...want to make sure this doesn't happen again so I'm looking at the services that run at startup via "service --status-all" and ssh is listed as having a + next to it... [13:06] zul: so it was quite simply nacked [13:06] and the async api never showed up [13:06] (which i don't think wouldve helped with your problem) [13:08] hallyn: k [13:09] zul: what does the client do to dos the machine exactly? [13:09] hallyn: im thinking this more what i need though: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git;a=commit;h=f1925dff7e6c4799f5951cf167a437c0737a266c [13:09] looking [13:10] hallyn: im not sure, if you just send malicious data it would be possible to keep filling up the log files [13:10] define malicious [13:10] the patch you cite is there... [13:11] yeah [13:12] spamming /dev/ttyS0 with dd or some such from within the instance [13:12] and this is only for serial? [13:12] correct afaik [13:12] I recommend you write the m-l, or if you prefer open a bug (and i'll lookat it after i clear lxc) [13:13] (one more look at the patch) [13:13] hallyn: heh bug already open https://bugs.launchpad.net/nova/+bug/832507 ;) [13:13] Launchpad bug 832507 in nova "console.log grows indefinitely" [Medium,In progress] [13:14] crap been around awhile [13:14] i'll mark it affecting qemu-kvm. [13:14] yeah we had a work around for a while now which is causing other problems now as well [13:15] ill try going down the rabbit hole with the virtio-serial throttling as well [13:15] thanks. [13:32] New bug: #961142 in cloud-init (main) "chef 0.10: package installation: returned 100, expected 0" [Undecided,New] https://launchpad.net/bugs/961142 [13:34] stgraber: are you around, do you have 1.5 minutes? [13:34] That's a very specific interval... [13:34] i didn't say 1.50 :) [13:35] buys me a half-moment more if i need it [13:36] I'm after somebody who's got five minutes. Five minutes... in a row? [13:37] Ah, the benefits of having an in-office fortune file. [13:37] twb: you use containers right? I'm trying to decide whether to risk slice-n-dicing containers on upgrade, or ask the few people usign lvm-backed containers to update themselves [13:38] I'm using lxc but only on lucid, and it's about 50:50 whether I will even bother with precise or just wait til 2014 [13:39] yup i knew you were on lucid :) ok thanks [13:39] I am using lxc on lvm tho [13:39] hallyn: yep [13:39] i *suppose* i could just force-mount proc if i need to [13:39] stgraber: for bug https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/960860 [13:39] Launchpad bug 960860 in lxc "fstab doesn't work for lvm based containers" [High,Confirmed] [13:40] the problem is: to change apparmor profile in lxc-start, you need to write to /proc/slef/attr/exec [13:40] It's too late to for me to think about that tonight [13:40] hallyn: right, yeah, I noticed that and that's also what's forcing us to allow procfs and sysfs in the container as lxc won't mount them itself [13:40] stgraber: but the way lxc works, it refuses to mount a file listed in /var/lib/lxc/container/fstab if the target pth is absolute and doesn't start with the contaienrs rootfs [13:40] Also my brother and his friend both just busted in blind drunk [13:40] stgraber: i'm trying to figure out the best course of action... [13:41] twb: good luck wwith that :) [13:41] hallyn: could we allow entries like "/usr/lib/lxc/root/..." in the fstab? [13:41] stgraber: i was going to upgrade containers, but maybe it's better to figu [13:41] right [13:41] no [13:41] that still requires a change to the containers [13:41] i'm wondering if i should update lxc to guess /var/lib/lxc/ i think that's best [13:42] so then even though rootfs.path = /dev/sda1, it'll allow /var/lib/lxc/container/rootfs... [13:42] i'll do that. thanks :) [13:42] np :) [13:42] stgraber: no reason not to use relative paths in new containers right? [13:42] (i.e. 'proc proc proc defaults 0 0' in place of 'proc /var/lib/lxc/c1/rootfs/proc proc defaults 0') [13:43] ok with that fixed i think i'm going to push the next version [13:43] (then do one more update after aa_getcon is fixed) [13:46] hallyn: relative sounds like a nice default [13:46] yeah looks prettier too. ok i'll do that, thanks [13:46] hallyn: that way people can rename/move their container without having to update the fstab [14:00] roaksoax: I am using fence_cdu to reboot 4 machines in four individual processes; the output from fence_cdu (on all processes) show *all* machines, not only the one affected by each process. Is this a bug? [14:00] roaksoax: the processes are started at the same time, BTW [14:02] hallyn: what could cause http://pastebin.ubuntu.com/893637/ ? It happens every so often [14:03] hallyn: this is Oneiric, BTW [14:04] hggdh: what are the lines pefixed with + ? [14:05] hallyn: this is the output of a shell script, run with '-x'. The '+' lines are expansion from the '-x' [14:05] hggdh: no idea, never seen it.. [14:05] heavy load? precise? [14:06] hallyn: OK. I will open a bug. What would you like for libvirt debugging? [14:06] hallyn: at the time this happens, there are four different processes trying to start a domain, at the same time [14:06] hallyn: oneiric [14:07] xml dump, ps -ef, result of repro wit libvirt_debug=1... [14:07] oh. [14:07] oneiric is known unstable under load :( [14:07] i haven't found the patch to cherrypick to fix it [14:07] gawddammit.. [14:07] i'm considering asking if i can backport the precise version [14:07] so no need for a bug? [14:07] lemme find the existing bug [14:08] well a new bug may provide new input... [14:08] heh [14:08] ok. libvirt_debug=1, bounce libvirt, and try again, correct? [14:10] hallyn: if you find the original bug, please tell me [14:11] hey all [14:12] hggdh: i think it was #903212 [14:12] bug #903212 [14:12] Launchpad bug 903212 in libvirt "libvirtd stops responding" [Undecided,Confirmed] https://launchpad.net/bugs/903212 [14:13] hggdh: yeah, and hope debug doesn't hide the bug :) [14:13] thanks [14:13] frankly i don't know tha ti believe the git lots - localtime_r specifically *shoudl* be thread-safe [14:21] OK. I will request some time to test [14:23] stgraber: I'm going to push lp:~serge-hallyn/ubuntu/precise/lxc/lxc-shutdownv2 . I'd rather push it now and have time to push fixes to it tonight if i need to before freeze. (and everything appears to now be working) [14:23] stgraber: if you have *time* for a review, i'll wait, but i'm assuming you don't [14:23] hggdh: maybe it is [14:23] hggdh: haven't touched in a while [14:24] roaksoax: the feeling I have is this is the CDU jumbling it all together. Anyway, want a bug? [14:25] hggdh: sure! [14:25] jjohansen: the lxc i'm pushing today uses my hand-rolled aa_getcon. i'll update to getcon when it's fixed. [14:25] roaksoax: er. Againt which package? cobbler itself? [14:25] hggdh: fence-agents [14:25] roaksoax: roj [14:26] hallyn: yeah, I'm quite busy at the moment, so just upload :) [14:27] stgraber: will do, see you on the other side :) [14:41] New bug: #959749 in multipath-tools (main) "disk-detect/multipath/enable=true fails at loading dm-multipath module" [Medium,Fix released] https://launchpad.net/bugs/959749 [14:46] New bug: #961226 in cloud-init (main) "cloud-init should run resize2fs in the background" [Undecided,New] https://launchpad.net/bugs/961226 [14:56] I’m profiling Firefox11. I can never get it to work, in enforce mode, without problems. I keep running it, then running aa-logprof to make corrections to the profile. Then I go into Edit A Profile (in YaST) to look at the changes and I see some weird entries at the beginning of the profile. They are as follows: [14:56] [+] ^null-15 [14:56] [+] ^null-1e [14:56] [+] ^null-27 [14:56] [+] ^null-32 [14:56] [+] ^null-d [14:56] And it keeps making these things. I think this is why I keep having problems. Each time it creates one of the entries, it has a new name. I thought I’d try highlighting the first entry ([+] ^null-15) and doing an edit of the entry and set it to [+] ^null-*, but when I highlighted the entry and clicked the Edit Entry button, it was like it took me into another file that was full of [14:56] entries of its own. [14:56] Any idea on what I can do to resolve this? [14:58] gary_poster: so at least the aufs path corruption is a kernel issue. I can only assume the overlayfs one is too then [15:00] Are there any AppArmor experts out there? [15:00] New bug: #961240 in cloud-init (main) "cloud-init does not run grub on PV Xen and KVM has issues" [Undecided,New] https://launchpad.net/bugs/961240 [15:03] sktd: you will probably get all experts you need in the #ubuntu-hardened channel [15:04] Ok, thanks [15:04] jjohansen: I hate to disturb you, but i have a feeling pathname changes to do with apparmor attach_disconnected stuff may be related to bug 959352 ? (/proc/self/maps shows paths not relative to task's pivot_root'd root) [15:04] Launchpad bug 959352 in lxc "Ephemeral containers have "/rootfs" prefix in /proc/self/maps entries" [High,Confirmed] https://launchpad.net/bugs/959352 [15:06] hallyn, ack. thank you for looking at it [15:09] all though [15:09] i notice lxc is doing pivot_root without a chroot [15:09] that should also hit non-ephemeral containers, but... lemme try [15:10] question, so if i have a static IP defined in /etc/network/interfaces.. than how come the server still pulls a new IP automatically from time to time? [15:12] Daviey: You were interested in getting keystoneconfig-common into Ubuntu, is that right? [15:12] soren: yes, very much so. [15:12] BUT, need to go afk right now. [15:12] Daviey: It only really makes sense if the other openstack packages will be consuming it. [15:12] Daviey: Ok. [15:12] Daviey: I've got it ready now. Let's discuss later. [15:12] cool [15:13] nope. doesn't help [15:17] esuave: 999 out of 1000 cases, it's because you didn't reboot after setting the interface to use static addresses. [15:18] you have to reboot the machine?! [15:18] esuave: Not really. [15:18] esuave: But it's easier to explain. [15:18] esuave: You need to get rid of the dhcp client that's still running. [15:18] esuave: You started the machien with dchp configuration. [15:18] esuave: Then you changed the network config [15:19] esuave: ...and maybe did and ifdown && ifup. [15:19] right but cant i just restart the service? [15:19] ahh [15:19] cool [15:19] ok [15:19] esuave: By the time you did ifdown, /etc/network/interfaces claimed the interface was statically configured. I.e. ifdown didn't know that there was a dhcp client that needed killing. [15:19] Hence, it didn't. [15:19] Rebooting solves it. [15:20] So does killing the dhcp client manually. [15:20] so how can i do it without rebooting the server? [15:20] But telling people to reboot is orders of magnitude easier than explaining how to kill a stray dhcp client. [15:20] Monkeys can reboot. [15:20] I've heard of cats doing it, too. [15:21] Unintentionally, but still. [15:21] soren monkeys/cats [15:21] I've never heard of a cat hunting down and killing a dhcp client. [15:21] esuave: Kill the dhcp client. [15:21] soren: how can i do that? :) without rebooting [15:21] esuave: See? Orders of magnitude more complicated to explain. [15:22] soren: haha [15:22] it's a process. [15:22] Kill it like you would any other. [15:23] dhclient3 [15:23] would that be the process? [15:23] I'm rather busy. My solution: Reboot. If that's a problem, see if you can work it out yourself or find someone to explain it. [15:23] Sounds like a decent guess. [15:23] soren: ok thank you for your help.. [15:25] Depending on your hardware, you could have rebooted anywhere between 3 and 50 times in the time it took to have this conversation. [15:25] Just saying [15:26] soren: :P your absolutely correct. sorry [15:31] New bug: #961277 in keystone (universe) "Cannot uninstall keystone" [Undecided,New] https://launchpad.net/bugs/961277 [15:32] Anybody have experience with PBIS / Likewise Open? [15:33] I did a fresh install with thier script on Ubuntu 10.04 Server and it installs it, but Ubuntu doesn't recognize it. [15:33] So if I do a domainjoin-cli, Ubuntu just says that it isn't installed. [15:37] JesseC, (I don't know anything about likewise, but) specific and exact errors messages will be more helpful than paraphrasings [15:41] I'm running into a problem where a large number of tiny log files are consuming all available inodes on a system. Does anyone know of a logratotion tool that handles this? They all seem to be geared towards rotating a few large files instead. === Robinux is now known as sw0rdfish [15:54] cwillu: Sorry, I got it though. Seems the new PBIS isn't in the Ubuntu repos yet, so you have to specify the path with the commands for them to work correctly. [15:55] qhartman: you could just write a shell script and put it in a cron job to clear the files at set intervals. [15:59] JesseC, Yeah, I'm about to dive into that. Was just hoping to use something off the shelf if possible. [16:01] esuave: I switched a server from dhcp to static just last night.. rebooting is thoroughly recommended.. [16:02] if you made a goof, and the old lease is still valid.. you won't knwo you made a goof until next time you reboot/power cut [16:02] Daviey: thanks! i just killed dhcp service though.. i think that should be sufficient [16:02] Therefore, something like that.. i really think you should reboot. [16:02] Daviey: ok ill get a reboot in there [16:02] esuave: Okay, but soren and myself have recommended otherwise.. but, hey, it's your party :) [16:02] Oh, good. [16:03] Daviey: nah your right.. ill reboot! its a good idea to see what it does [16:03] Daviey: thank you! [16:03] esuave: BTW, when i did it yeserday.. i DID make a goof.. and a reboot outlined it.. :) [16:04] nice! [16:31] hallyn: /var/lib/dpkg/info/lxc.postinst: 43: /var/lib/dpkg/info/lxc.postinst: apparmor_parser: not found [16:32] hallyn: that's with LXC in an LXC container where apparmor isn't installed (as it wouldn't work anyway) [16:33] stgraber: hrmph - should make apparmor a depend [16:33] stgraber: well, do you think it's worth making it work without apparmor? i prefer not to... [16:34] hallyn: how can you find what belongs to what in devices.list for cgroups? [16:34] zul: i don't understand? [16:34] stgraber: it's far too late to merge 0.8.0 right? [16:35] hallyn: i have http://paste.ubuntu.com/893850/ in my devices.list how do i find out which major/minor it belongs to [16:35] hallyn: it should work without apparmor [16:36] hallyn: I tried installing apparmor in that container and it'd then fail because it doesn't have mac_admin [16:36] well that's bad [16:36] but ok, i'll fix the postinst to check for that [16:36] instead of adding apparmor to Depends [16:37] zul: which major/minor *what* belongs to? aparticular device you want to add? [16:38] hallyn: actually i think i just answered my own question [16:38] ok [16:42] stgraber: does http://paste.ubuntu.com/893863/ look sufficient? [16:44] hallyn, you should redirect output to /dev/null [16:44] o rotherwise make it go away [16:44] no one really cares to see "apparmor_parser is /usr/bin/apparmor_parser" [16:44] i make it go away with my gruff demeaner [16:44] thanks will do [16:45]