/srv/irclogs.ubuntu.com/2012/03/27/#ubuntu-server.txt

uvirtbotNew bug: #959262 in python-novaclient (main) "[Errno 13] Permission denied: '/var/www/.novaclient'" [Undecided,Confirmed] https://launchpad.net/bugs/95926200:35
adam_ghallyn: around?00:36
twbSigh.  So I backported xtables-addons from natty to lucid, so I would have a DKMSized version.  This installed PERFECTLY on the local test machine.00:37
twbI send my boy out to the airgapped prison, and it's reporting "I need kernel sources", despite not needing them here (only the headers)00:37
twbWith any luck he is now sneakernetting the dkms build output & similar diagnostics to somewhere that can get to me.00:38
Patrickdkhmm?00:40
Patrickdkwhy didn't you send him the compiled package?00:40
SpamapSPatrickdk: too easy ;)00:44
twbUh, because when the kernel gets a minor update, the .kos will need to be recompiled00:44
twbe.g. 2.6.32-33 to 2.6.32-3400:45
SpamapSdkms always builds though so I don't think this is a "just send him the binary" issue00:45
twbI did send him the xtables-addons-dkms .deb, of course00:45
Patrickdkya, dkms is nice for auto-upgrades00:45
twbThat was the whole point of using dkms instead of m-a00:45
Patrickdkbut I build my dkms on a build machine, and push them out00:45
twbPatrickdk: I suppose I would've done that if I had anticipated this not working00:45
Patrickdk33 to 34? you living life like 3 months ago?00:46
Patrickdkwe are on -40 :)00:46
twbPatrickdk: whatever, I made thhose numebrs up00:46
* Patrickdk is pissed at his isp00:47
Patrickdktheir providers provider is broken00:47
Patrickdkand they *dunno* how to work around the issue00:47
Patrickdkyay for 1000ms latency00:47
hallynadam_g: half00:59
twbat least your site is on the internet01:01
twbstupid airgap01:01
adam_ghallyn: do you know of any circumstances where libvirt would take the liberty of setting a domain to 'paused'?01:02
hallyn(thinking)01:02
hallyni don't.  it'd be neat if it did that based on host load :)01:03
adam_gseems to be related to load, but trying to determine if its libvirt or nova thats pausing01:03
hallyninteresting01:03
hallyni haven't heard of such a thing01:03
adam_gok, ill look closer at nova in that case, thanks01:03
hallyni'd look at nova01:04
hallynyeah01:04
hallynnp - ttyl01:04
adam_gnight01:04
uvirtbotNew bug: #965836 in openssh (main) "`ssh-add -x` does not prevent key use" [Undecided,New] https://launchpad.net/bugs/96583601:11
RalliasSince my installation of nginx is no longer tasked with listening on a port below 1024, how do I set it so it never is root when it starts up?01:57
twbHow is it started presently?  sysvinit or upstart?02:01
aarossigQuestion regarding my network.. I just did a hardware refresh and upgraded to 11.10 Server. While copying on my gigabit network, the network transfer will stop for periods of time and then start back up. Using sshfs, the cpu will go down to 0 for ~10 or 20s and then the transfer resumes. Any ideas?02:10
twbaarossig: you... aren't the guy who wants me to configure his UPS, are you?02:10
aarossigam I?02:10
twbDunno, his name was Andrew Rossi02:11
twbof Designer Networks02:11
aarossigtwb: I don't think so, I am capable of configuring my own UPS (as well as those of my clients)02:11
aarossigah, no I don't own a business02:11
twbOK, no worries :-)02:11
aarossig:P02:11
aarossigso do you happen to have any suggestions for my situation?02:11
twbWell I would definitely encourage you to go 12.04 not 11.10, since 12.04 is LTS02:12
aarossigthis happpens on both sshfs and samba, but with samba it is much more catastrophic and the transfer actually itimes out02:12
aarossigtwb: yeah, I plan to do a dist upgrade to it02:12
twbNot sure about your issue; could be I/O or something02:12
aarossigmoral of the story.. I can't wait anymore. I've been putting up with old packages and ppas with 10.04 for far too long02:13
twbdump ps auxf to a file every second or so and diff them around the time an issue occurs, looking for D state procs, or watch "iostat 5"02:13
aarossigthanks, i'll look into it02:13
twbif you're copying with e.g. scp, it could be the buffering when it actually hits the disk02:13
aarossigI believe it is something IO related, I am running 8 hard drives and some are on the PCI/PCI-e busses.02:14
twbso e.g. you do "scp example.com:foo.img ." and it will block when it runs out of buffer writing to the local disk02:14
aarossigyeah, that sounds accurate. I will try02:14
twbaarossig: 8 HDDs in what array, RAID6?02:14
aarossigit is actually several RAID1 arrays02:14
aarossigone for root, one for home, and then several for data02:14
twbTrack down which ones have the data in question, watch their iostats02:15
aarossigokay, thanks for the suggestions02:15
aarossigi'll give it a shot02:15
twbAlso look at the flush stuff in /proc see if its interval corresponds to your blocking interval02:15
twbe.g. if your ext4 filesystem is set to flush every five minutes and you see issues every five minute02:15
aarossigthe frequency is much higher, but I see your point02:16
aarossigtwb: yeah, iostat shows fairly constant writing02:19
aarossigyou're probably right about the caching, it might be filling up the caches and then flushes them to the disk, rinses and repeats.02:19
twbI hear there is also iotop; I haven't tried it02:19
aarossigi was using iotop02:19
aarossigiostat is more device lebel02:20
aarossiglevel*02:20
twbThe other thing to read up on is "write amplification"02:20
aarossigiotop is process level02:20
tarvidboot setup temperature dropped from 76 C to 36 C after installing a new Corsair A50 fan, how would I go about monitoring remotely?02:22
=== michaelh1 is now known as michaelh1|away
=== michaelh1|away is now known as michaelh1
twbtarvid: how are you measuring it now?02:23
tarvidthe setup screen reports tempereature02:23
tarvidBIOS02:23
twbOK02:24
twbThe raw data is in /sys somewhere; there is a package that tries to understand how to interpret it...02:24
twbCan't remember the name02:24
tarvid/proc/acpi/... on some boxes, not this one02:25
twblm-sensors02:25
tarvidinstalled but hard disk is the only it reports02:26
twbYou probably have to rice it up02:26
twbIME it's a pain and usually not worth the hassle02:26
tarvidThis box was a gift from the local library - free as in free cats02:27
aarossigbecause the library doesn't serve beer.02:27
twbI hope they don't serve cats either02:27
tarvidalas02:27
tarvidthey have one02:27
aarossigtwb: I ended up here https://bugs.launchpad.net/ubuntu/+source/linux/+bug/427210, rather interesting stuff. Thanks for the general direction pointing.02:28
uvirtbotLaunchpad bug 427210 in linux "CFQ may not be the right choice of i/o scheduler for the most common desktop systems" [Medium,Invalid]02:28
tarvid!lm-sensors02:28
ubottuTo access CPU temperature sensors and detect fan speeds, install the lm-sensors package. See https://help.ubuntu.com/community/SensorInstallHowto for installation and usage instructions.02:28
twbaarossig: you have a server, CFQ is probably best for your case IIRC, but feel free to experiment02:28
aarossigdeadline seems to have improved it slightly, the network transfer seems to be more continuous02:29
aarossigI will be doing some more debugging02:29
twbaarossig: at least in my case, the problem wasn't the scheduler, it was that I was doing so damn much I/O.  Which was mostly due to RRDs (collectd) plus a lot of write amplification.02:29
twbI fixed it by telling collectd to STFU and buffer an hour of writes and flush them all at once, instead of trying to do random-access writes into the RRDs every ten seconds02:29
twbIt was interesting to see how badly it raped the system, though -- e.g. dpkg would issue an fsync for every file (or dir, depending on version) and bring the whole system crashing down.02:30
aarossiglol02:31
aarossigvery good, these are good starting points for me to google form02:31
twbIncidentally, if you are into BDSM you can look at libeatmydata02:31
twbWhich is an LD_PRELOAD wrapper that discards all attempts by the app to explicitly flush data.02:32
twbPatrickdk: fyi, the problem at the prison was he just had the wrong header package installed02:34
aarossigI am quite proud of my little server. I can boot up from cold 8 drives and the voltage only falls from 12.2 to 11.9V. Quite pleased.02:38
tarvid!dns02:46
ubottuTo set up a Domain Name Service see the !serverguide - https://help.ubuntu.com/10.04/serverguide/C/dns.html02:46
tarvidwhere do I setup my isp's nameservers02:58
tarvid!nameservers02:58
tarvid!nameserver02:59
tarvid!name server02:59
tarviduswed to be resolv.conf but that gets overwritten03:00
twbtarvid: resolvconf package03:01
twbIIUC if you remove that symlink you can just make it an ordinary file and it won't fuck with it03:01
erichammondtarvid: If you're using DHCP, then you might set up the nameservers in the DHCP server.03:01
tarvidstatic assignment03:02
qman__remove network-manager if you have it, then disable resolvconf, then set resolv.conf manually03:02
qman__or if you want quick and dirty, set resolv.conf then chattr +i03:02
tarvidthanks, that seems like the hard way, does Ubuntu havge a reason?03:04
qman__well, this stuff exists to make networking on desktops and laptops easy03:04
qman__why it gets thrown in on servers too, I have no clue03:04
qman__caused me plenty of trouble before03:04
tarvidavahi with two nics gets things wrong half the time03:06
twbqman__: resolvconf is hard dep in precise (and 11.10?) so would need to disable rather than remove... oh, you said that03:13
tarvidcfd /etc/root03:19
tarvidso how am I supposed to set up static name servers in 12.04?03:25
twbtarvid: you learn to use resolvconf, or you bypass it03:26
twbWhen I grumped about the same thing recently, I was told 14:01 <twb> IIUC if you remove that symlink you can just make it an ordinary file and it won't fuck with it03:26
tarvidI looked at thye man page, it is inscrutable03:27
tarvid        dns-nameservers 68.105.28.16, 68.105.29.1603:27
tarviddns-search ls.net03:27
tarvid03:27
tarvidchattr: Operation not supported while reading flags on resolv.conf03:28
tarvidby adding nameservers to /etc/network/interfaces I now have nameservers in roslv.conf but dns does not work03:39
twbtarvid: is /etc/resolv.conf a symlink?03:52
twbDefine "does not work"03:53
twb$ dig PTR 8.8.8.8.in-addr.arpa @8.8.8.8 +short ==> google-public-dns-a.google.com.03:54
tarvidcan't get out, can ping peers but nothing beyond the gateway03:56
twbtarvid: so you did "mtr 8.8.8.8" and got nothing?03:57
tarvidnothing03:57
twbThen your network is fucked; nothing to do with DNS03:57
tarvidyou are correct03:58
tarvidgiving up for the night, thanks for the help04:23
twbHmm, any gotchas in online growing of an XFS filesystem?04:33
twbToo late, I did it anyway04:39
KM0201lol04:40
andoltwb: Any fun suprises? :)04:55
twbNot yet04:57
twbBut $stupid_customer has no barriers, it's an 8-disk array w/hardware raid and then LVM on top, and the ENTIRE PV is allocated04:58
twbSo the "solution" to give them another 6TB of storage, was to put in another 8 disks in a second array, and pvcreate /dev/sdb and vgextend vg1 /dev/sdb and then fill /home over the entire second PV as well04:58
twb"whee"04:58
twbAlso this is lenny04:58
andolAh04:59
koolhead11hi all05:11
koolhead11Daviey: :)05:12
SpamapStwb: I've done a lot of online growing of XFS partitions in exactly the manner you described. Works fine06:09
SpamapStwb: and when i did it, it was kernel 2.6.18 (old ass redhat)06:09
Malekowhy i dont see if labels in 'ip a'? i assigned few additional ips under labels/aliases06:19
lynxmanmorning o/09:01
uvirtbotNew bug: #966038 in keystone (universe) "Downloadable user OpenStack credential files (settings... OpenStack) doesn't work" [Undecided,New] https://launchpad.net/bugs/96603809:10
uvirtbotNew bug: #966039 in net-snmp (main) "netsnmp_assert 1 == new_val->high failed int64.c:419 netsnmp_c64_check32_and_update()" [Undecided,New] https://launchpad.net/bugs/96603909:10
yolanda2hi, good morning09:13
yolanda2i have a question about dbconfig09:13
yolanda2is there any way to skip database creation? i only want to create postgres user, but no database09:13
bencerjamespage: SpamapS would you have a look at https://wiki.ubuntu.com/JorgeSalamero/PerPackageDeveloperApplication and maybe support my application?09:14
casHi, I got some problems with formatting my (hardware)RAID disk10:00
casI get the error it is in use while it is not mounted10:00
casAny idea what I can do to "release" this disk for mkfs?10:02
lynxmanjamespage: Question, I've seen a package I'd like to create for Ubuntu (and maintain) which would possibly land in Universe (or multiverse), due to this the restrictions of the freeze for precise do not exactly apply, right?10:13
jamespagelynxman, they still apply - i.e. you will need a FFe IMHO - but if its a new package they I think the release team would ack that10:17
jamespagebencer, on my list10:17
bencerjamespage: ok thanks!10:17
bencerbtw, i've already sent some blueprints on things we want to work now10:18
lynxmanjamespage: its a mysql load balancer (ala pgbouncer), I reckon pretty useful for ops people10:18
bencerhttps://blueprints.launchpad.net/~zentyal10:19
iclebytehas any one ever seen 'rt6_redirect: source isn't a valid nexthop for redirect target' in syslog? I can only seem to find references to the kernel source where the message is and other people asking the same question. I have no way of working out which node is causing this.10:21
yolanda2hi, just another question about dbconfig: i need to create an user, but this user needs to have rights to create database. Currently the user created by dbconfig cannot do it, how can i do it?10:29
yolanda2please, any help with dbconfig?10:37
yolandaplease, any one can help with dbconfig?10:47
uvirtbotNew bug: #966115 in nova (main) "nova-api{,-os-compute,-ec2,-os-volume} relationship" [Undecided,New] https://launchpad.net/bugs/96611510:56
sorenyolanda: Why would the user need to create the database?10:57
=== gustav- is now known as beerbro
yolandahi soren, because openerp works like that...10:57
sorenyolanda: dbconfig is supposed to have created it ahead of time.10:57
yolandathere is a "manage databases" screen, that allows to create new databases, so the user needs to have createdb permissions10:58
sorenyolanda: And it gets upset if the db is already there?10:58
yolandawell, we don't use that db that is created by dbconfig, if we could just skip the db creation will be fine. But the main problem is that the openerpuser must be able to create new db10:58
yolandathe way that openerp works, it allows to create different databases for different companies for example10:59
yolandawe cannot mess with it, it's how openerp is built10:59
sorenOh.10:59
sorenI'm not sure dbconfig will let you do that. Giving admin creds to an app sounds like a recipe for disaster.11:00
yolandasoren, not admin rights, only createdb11:00
yolandai'm trying to use install-dbadmin files to add an "alter user openerp createdb", am i right?11:00
sorenyolanda: For postgres? No idea.11:01
yolandait's a mandatory condition to run openerp...11:01
* soren is a MySQL sort of person11:01
yolandasoren, the alter has right syntax, no advice for that :) ... but for the place to put it11:01
sorenThen yes.11:02
sorenAt least, that's what the docs say. I've never used that functionality.11:02
iclebytesoren, could you please take a quick look at this for me and see if it rings a bell? http://ubuntuforums.org/showthread.php?t=194774311:02
yolandaok, will try11:02
Davieyyolanda: Hola!11:02
DavieyHow goes it?11:02
yolandabad...11:03
DavieyO_O11:03
yolandaDaviey, currently having some problems with user permissions11:03
lynxmanDaviey: by bad she means she's having troubles with dbconfig and setting up the openerp database :)11:03
* lynxman helps sometimes as a cultural translator from Spanish to English11:03
Davieyyolanda: just run everything as root?11:03
Daviey(not being serious)11:03
yolandaDaviey, i will be happy just embedding a doc in the package and telling the users to do all by themselves :)11:04
soreniclebyte: No idea. I'm remarkably lost when it comes to ipv6.11:04
iclebytesoren, as am I! no problem, thanks for looking.11:04
yolandathe problem i have, is that opnerp user is created by dbconfig, but doesn't have permissions to create new databases, which is completely mandatory for openerp11:05
yolandai'm thinking in use install-dbadmin scripts, and paste some alteruser there11:05
Davieyyolanda: GRANT access?11:07
yolandaDaviey "ALTER USER openerp CREATEDB"11:07
yolandathis is the clue11:07
DavieyAh no11:07
yolandahow can i do it?11:07
Davieyyolanda: I think you need to add GRANT CREATE11:09
yolandaDaviey, only need that openerp user can create new dbs11:09
yolandaso doing that in install-dbadmin is right?11:09
Davieyyolanda: So, you don't want the package to create the database, or create the schema ?11:11
yolandano, only the user11:11
yolandaif it creates an empty db, it isn't a big problem, but the user will have to do it by the UI11:12
Davieyyolanda: In this case, there is actually little benefit to using dbconfig :(11:12
yolandaDaviey, to configure the user11:12
yolandathat's the only thing11:12
Davieyyolanda: You are going to hate me for this, but if you want the database to be managed by the app.. I wouldn't use dbconfig.11:13
Davieyespecially as you only care about pg11:13
uvirtbotNew bug: #507007 in asterisk (universe) "make dahdi a suggests or recommends" [Undecided,Confirmed] https://launchpad.net/bugs/50700711:13
yolandawell, what i need is just to create that openerp user, and modify config file with that settings. Obviously can be done in rules, as it was done before11:13
yolandado you think that is better?11:14
yolandai mean, in postinst, but with shell, sorry11:15
yolanda        # Register "openerp" as a postgres superuser11:15
yolanda        su - postgres -c "createuser -s openerp" 2> /dev/null || true11:15
yolandathat is the old way11:15
Davieyyolanda: if that is ALL you want to do for database handling at package level, i think i'd probably stick with that.  I'd probably put a debconf question of medium, asking if i should do it or not.11:17
DavieyYou must hate me now :)11:17
yolandaDaviey, i put you in my blacklist :)11:17
yolandai've learned a new thing, that's good11:18
Davieyyolanda: sorry!  When i suggested dbconfig, it was when i thought you'd be handling the database at packaging level11:20
Davieyyou don't care about the database at that stage, it seems11:21
Davieyi'm suhc an ass.11:21
yolandaDaviey, doesn't matter11:21
yolandai've learned an useful thing, and fighted with packaging a bit, that is good11:21
yolandai will do some modifications to that, because we need random password for that user, and modify config file, but this can be done by script11:22
Davieyyolanda: You can generate a random password if wanted.11:22
yolandai know11:23
yolandai was doing it11:23
yolandawith dbconfig :)11:23
Davieyheh11:24
Davieyjamespage: Do we care to have: jsvc, libcommons-daemon-java and tomcat6-user in main?11:26
jamespageDaviey, any specific reason you ask that question?11:27
Davieyjamespage: i removed them from the CD, and want to know if i should do anything to keep them in main11:27
jamespageDaviey, I don't think they really need to be in main TBH11:29
jamespageesp tomcat6-user11:30
jamespageits source package still will be BTW11:30
jamespagetomcat611:30
jamespageassume you did not take tomcat6 off the ISO?11:30
Davieyjamespage: no, tomcat is still on the cd11:31
jamespageDaviey, great11:31
Davieyjust not -user11:31
Davieyjamespage: happy for -user to drop to universe?11:31
jamespageDaviey, good with me - I can't see why jsvc, libcommons-daemon-java where in main anyway?  maybe euca?11:31
Davieymaybe11:32
RoyKhrmf - seems my server is booting, but after kernel bootup, jumping to initramfs11:32
RoyKany idea how to remedy that?11:32
DavieyRoyK: try the prior kernel?11:32
RoyKgrub config looks good, and it must be, otherwise it shouldn't be booting kernel11:32
derknechti want to set up a apache with php. I normally used mod-php5, but since ubuntu 11.x there are dependency issuses with apache worker and mod-php5. how is the recommended way of using php with apache? suphp? cgi/fastCGI? mod_php5? Thanks for your opinions.11:49
ikoniaderknecht: there shouldn't be dependency issues11:49
derknechtproblem with mod_php5 is that prefork worker is needed11:49
ikoniaderknecht: apache/php modules are pretty strongly tested each release11:50
derknechthow stable is suphp? find the user/group setting attractive11:54
ikonianever used suphp11:57
ikonianever really even researched it11:57
Davieyderknecht: I've used apache2-mpm-itk when i want apache running as a user/group12:00
=== smb` is now known as smb
derknechtDaviey: itk looks very promising, thanks a lot12:23
derknechtdoes that work for php and html with the same user? i mean is both affected when i assign a user/group in a vhost?12:23
=== koolhead17|away is now known as koolhead17
Davieyderknecht: yes12:29
macnixis there a way to create & control upstart jobs as a regular system user?12:31
macnixI keep getting the dbus error message whenever I use start/stop as anyone else but root12:31
macnixideally, each app has will have its own regular user, it will create upstart jobs as that user and it will be able to start/stop them, no admin privileges required12:31
Davieyjodh: ^^12:32
jodhmacnix: you can create jobs as regular users but this feature is not enabled in Ubuntu by default. See http://upstart.ubuntu.com/cookbook/#user-job12:32
jodhmacnix: and presumably this is the dbus error you get: http://upstart.ubuntu.com/cookbook/#strange-error-when-running-start-stop-restart-or-initctl-emit12:33
Davieythanks jodh12:34
jodhDaviey: np12:34
ikoniajodh: that's very useful ! I didn't know you could do that12:35
ikoniathank you12:36
jodhikonia: np.12:36
jodhthere is a restriction on user jobs currently: they do not have their output logged. That feature is essentially complete but won't be available in Precise.12:37
koolhead17hi all12:38
uvirtbotNew bug: #966184 in nis (universe) "package nis 3.17-31ubuntu0.10.04.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/96618412:46
zulgood morning13:02
=== bladernr_afk is now known as bladernr_
lynxmanzul: morning13:16
macnixjodh: yes, that's the error13:28
macnixjodh: my LTS is running upstart 0.6.513:28
macnixis it safe to force an upgrade to 1.3?13:28
wiherekHi13:29
jodhmacnix: no13:29
jodhmacnix: well, you can do it, but you'd need to recompile a few packages your self including nih and dbus.13:30
wiherekshould I go with Ubuntu 10.10 or 11.04 and 32 or 64 bit on a 4GHz 4GB RAM VPS?13:30
Angtagapagligt11.04 32 Bit13:30
macnixjodh: don't really want to open that can of worms13:30
wiherekk, thanks.13:31
Myrtti10.04 :-P13:31
macnixjodh: can I accomplish my goal in a different way?13:31
jodhmacnix: quite - I wouldn't recommend it.13:31
wiherekcant do 10.04 :(13:31
wiherekits not in the options.13:31
Myrtti:-(13:31
wiherek:-(13:31
Angtagapagligt:-P13:31
macnixjodh: I mean, others must have tackled this13:32
macnixsystem user per app with upstart jobs, without sudo privileges, can't be THAT difficult, surely13:32
jodhmacnix: you could play elaborate tricks with sudo+initctl+user directories below /etc/init/, but again, I really wouldn't recommend it. What types of jobs do you want your users to be able to create? When do you want these jobs to start?13:32
jodhmacnix: I really don't know I'm afraid. But what is the user case here? You can run system jobs as a different user if required.13:34
macnixjodh: this is what I'm doing now 1.1 - 1.3 https://github.com/gerhard/deliver/tree/master/strategies13:35
macnixjodh: that requires anyone who deploys to have sudo privileges, so that upstart jobs can be created properly, and the app start via sudo start13:36
macnixjodh: so we have developers which have sudo privileges just because they can't deploy new versions of an app without it.13:37
jodhmacnix: I don't understand - why does all this need to run through upstart and need root privs? Can't this app server run on non-priv ports?13:38
macnixjodh: yes, it can, but how do you re-generate new upstart files for that app (new services get added, old ones removed) without sudo privileges?13:39
macnixjodh: it's not the ports, it's writing those upstart files in /etc/init & starting/stopping the service which requires sudo13:40
jodhWhy do you need to regenerate new upstart jobs? Why not have 1 central (root) job that uses "instance" and can somehow "look" for other instances of this app-server thing in non-priv users home directories?13:41
macnixjodh: how would that work? I know the instance job, but not sure how it could "look" for other jobs part of this app13:42
macnixlet me give you a live example13:43
jodhmacnix: look here: http://upstart.ubuntu.com/cookbook/#instance13:43
jodhmacnix: that first example is looking for instances of some service in /var/lib/queues. Tweak to suit.13:44
macnixjodh: tweaking away. will let you know how it goes. cheers!13:46
jodhmacnix: np. good luck.13:46
hallynDaviey: hey14:26
hallynDaviey: https://bugs.launchpad.net/ubuntu/+source/vde2/+bug/776818/comments/13   I'd missed that comment.  I don't know how to answer that :)14:28
uvirtbotLaunchpad bug 776818 in vde2 "[MIR] vde2" [Undecided,Confirmed]14:29
hallynDaviey: specifically wrt bug 77665014:32
uvirtbotLaunchpad bug 776650 in qemu-kvm "Build qemu-kvm with native VDE support" [Medium,Confirmed] https://launchpad.net/bugs/77665014:32
hallynshoudl this be added to today's mtg agenda?14:32
hallynI'll add it14:32
wiherekcan I build a views search form that would work by just adding /search argument to the end of a taxonomy term url?14:37
wiherekso like this: mysite.com/taxonomy/term/search14:37
Piciwiherek: Are you sure you're in the right channel for your question, this is #ubuntu-server14:38
wihereklol14:38
wiherekthought it was drupal14:38
wihereksry :D14:38
Picitis okay ;)14:38
uvirtbotNew bug: #966269 in rabbitmq-server (main) "Starting rabbitmq-server on installer stalls installation" [Undecided,New] https://launchpad.net/bugs/96626914:41
rbasaksmoser: in cloud images, I can sudo without specifying a password, but the sudo configuration does not look like it's changed and the password is just disabled by prefixing a "!". When I do this in a netinst, I still need a sudo password (or NOPASSWD adding to /etc/sudoers). Any hints as to how the cloud images manage to work this way? I want to do the same in a netinst.14:45
smosersudoers.d14:45
smoser$ sudo cat /etc/sudoers.d/90-cloudimg-ubuntu14:46
smoser# ubuntu user is default user in cloud-images.14:46
smoser# It needs passwordless sudo functionality.14:46
smoserubuntu ALL=(ALL) NOPASSWD:ALL14:46
Davieypasswords are overrated14:46
rbasak#includedir /etc/sudoers.d14:46
rbasakand there I was thinking that the "includedir" directive was commented out, so I didn't examine sudoers.d.14:47
rbasakthanks :)14:47
hallynstgraber: do you have a minute?14:50
hallynstgraber: let's say that user namespaces came with a limitation: you have to map userids in container to userids on host a priori (prior to starting container at least).  How bad is that in your opinion?14:51
hallynso for instance, installing mysql without planning in advance could cause setuid(mysql) to fail until you stop the container, reconfigure, and restart14:52
hallyn(of course if you just map everything in container from 0..500 and 1000..1100 you might be pretty safe)14:52
stgraberhallyn: sounds pretty bad as your regular user won't be able to create users on the host14:53
hallynwell in any case the mapping will need to be created on the host, so that part i'm not sure is a problem14:53
hallynbasically, i think you'd find a way to say host ids 50000-55000 are usable by hallyn, for whatever14:54
hallynthen uid 0 in my container maps to 50000 on host, etc14:54
hallynthe part that worries me is that the mapping may not be dynamically changeable14:54
hallynit may become so, depending on performance impact14:55
hallynstgraber: I'm going to cc you on my next email regarding this14:57
stgraberhallyn: hmm, right, thinking some more, if we assign 5k uids per container it should be fine for most cases14:59
stgraberhallyn: that's as long as they don't use LDAP or any other large user directory14:59
hallynright, but the q is is it reasonable to assume the container can predict the contaienr uids needed, so they can map them15:00
hallynlet's move to email :)  thx15:00
=== hazmat is now known as kapilt
antiherohow do I make it do an automatic security update each night?15:03
antiheroby "it" I mean a clean ubuntu server distro15:03
SpamapSantihero: do you want an ISO each night, or do you want to just download and install upgraded packages every night?15:46
lynxmanroaksoax: ping15:57
hallynsmoser: regardign kvm perf regression, feb 20 I uploaded a pkg based on upstream git head to ubuntu-virt ppa, might be worth trying with that16:02
hallyn(i'm waitnig for lucid vm to finish building)16:02
smoserhallyn, well, you can remove variables (specifically variables i dont care about) by using the cloud images16:03
hallyndrat.  yeah16:04
=== Lcawte|Away is now known as Lcawte
roaksoaxlynxman: pong16:07
lynxmanroaksoax: I'm having some issues deploying precise with orchestra (sitting on an oneiric machine), I'd like to pick your brain for some mins whenever its okay for you :)16:10
roaksoaxlynxman: sure,16:10
roaksoaxlynxman: sure, what are your issues16:11
lynxmanroaksoax: It looks like when importing the isos if the profile already exists it won't be updated, I'm having an issue with precise where it complains about different kernel versions between the archive and the pxe boot16:11
roaksoaxlynxman: cobbler-ubuntu-import -u precise-i38616:12
lynxmanroaksoax: let me try16:12
lynxmanroaksoax: yeah did that already, facing the same issue :/16:14
roaksoaxlynxman: is cobbler-ubuntu-import updating the ISO?16:15
uvirtbotNew bug: #966351 in nis (universe) "package nis 3.17-31ubuntu0.10.04.2 failed to install/upgrade: le sous-processus script post-installation installé a retourné une erreur de sortie d'état 1" [Undecided,New] https://launchpad.net/bugs/96635116:15
lynxmanroaksoax: http://pastebin.ubuntu.com/902393/16:18
lynxmanroaksoax: it says "skipping import", that's the issue, I'd pretty much like to force it :)16:18
=== jvdz_ is now known as jvdz
roaksoaxlynxman: cobbler-ubuntu-import -U16:19
lynxmanroaksoax: no -U option on the oneiric version16:20
roaksoaxlynxman: ah then you need to remove the prefoile and import one16:20
lynxmanroaksoax: cool! will do that then :)16:20
roaksoaxlynxman: unless you wanna install the precise version of cobbler-ubuntu-import16:20
lynxmanroaksoax: nah it's fine, will go that way16:21
roaksoaxok16:21
lynxmanroaksoax: the only problem is that the oneiric orchestra version does -c which throws the same error, doesn't update the profile16:21
roaksoaxlynxman: -c = check16:22
roaksoax-u should update16:22
roaksoaxlynxman: that's all fixed in precise btw16:22
lynxmanroaksoax: yeah that's good news, but it'd be also interesting to do a SRU for oneiric16:22
lynxmanroaksoax: don't you think?16:22
Adri2000I've just realized I proposed a merge request into lp:ubuntu/horizon instead of lp:~ubuntu-server-dev/horizon/essex ...16:41
Adri2000is it going to be handled anyway?16:41
arosalessmoser: utlemming: Do you think you be able to get to  ubuntu-cloudimg-query and cloud-publish-ubuntu to query2 along wit hthe cloud-image-sync this cycle?16:46
arosalesutlemming: smoser: per https://blueprints.launchpad.net/ubuntu/+spec/servercloud-p-cloudutils16:47
smoseri think both of those qualify as Feature, and I really think we're past that point in the cycle.16:47
smoserboth suck that we dont have them.16:47
smoserbut..16:47
utlemmingsmoser, I agree with your assesment here16:49
Davieysmoser: if we didn't have control of the API, and the API was deprecated mid-cycle, we'd consider it for an SRU.16:49
utlemmingI would like to ship it, but we're late.16:49
Davieytherefore, we can still consider it for release if the risk benefit is met.16:49
arosalessounds like something we can still push for ?16:50
utlemmingarosales: yes...but I need to do a bit of work to get it ready. The bits are done, the documentation is so-so and the packaging needs doing.16:52
smoseri'll let utlemming comment on it, and i can review that. having cloudimg-query read /query2 woudl be good, but its not terribly useful.16:53
smoserit would remove 1 hack, which is that you can't really download (or get data for) the disk images with it.16:54
smoseryou just have to get the url for the tarball ("uec style") image and then take off .tar.gz and add .img16:54
smoserso my personal feeling would be to not bother with cloudimg-query, but if we had sync, that would be good.16:57
arosalesutlemming: do you have cycles to work on sync?16:57
utlemmingsmoser: I concur...16:57
utlemmingarosales: I may or may not...it really depends on whether another project interfers. Right now I have the cycles since I'm blocked. So I can give a noble effort.16:58
Davieyutlemming: Have you solved the LANG PITA?16:59
smbhallyn, smoser If some hard evidence comes out of the kvm perf issue, it would be best to have a bug report for collecting data and working on it. If you then could mail me (and I thinkg tgardner is interested too) that number it will have a lesser chance to get lost in noise.16:59
utlemmingDaviey: yes, but I want to talk about it with you and smoser during our meeting shortly16:59
Davieyutlemming: If you have capacity, kernel upgrades still suck.. and infinity doesn't seem to be touching it as promised.16:59
arosalesutlemming: ok, lets see where you are able to make progress on sync. Perhaps leave sync as a todo and postpone cloudimage-query?16:59
utlemmingarosales: that sounds like a plan17:00
utlemmingDaviey: are you referencing the grub error messages?17:00
arosalesSpamapS: thanks for charing todays meeting17:01
SpamapSalways a pleasure :)17:01
hallynsmb: was just checking to see if smoser had filed one, looks like no.  I'll file one against qemu-kvm and linux (later today)17:05
smoserhallyn, i have not.17:06
smoseri really just don't have amore than a finger in the wind17:06
smbhallyn, sounds good17:06
smoserand i'm embarrarisingly ignorant about what even *is* good17:06
hallynditto, really.  but i'm pretty sure 9m/s is bad :)17:06
smoserregressions are easy to spot, though, given 2 setups to compare.17:06
tarvidcan I reload without setting up the dm again?17:13
tarvidor how can I get dns resolution working again?17:14
tarvidsince switching to static ip address, I've lost dns17:15
e_t_tarvid: Did you switch to static IP in NetworkManager? Did you specify a DNS server to use there?17:16
tarvidI don't havge network namager, this is a basic server install17:16
tarvidmanger17:16
tarvidwithout desktop17:16
e_t_What's the output of cat /etc/resolv.conf ?17:17
tarvidit had nameserver 192.168.1.117:17
tarvideven after adding dns-nameservers to /etc/network/interfaces17:18
e_t_Do you get anything from "dig @192.168.1.1 google.com" ?17:19
tarvidno name resolution works17:19
e_t_That's what the @ is for, it directs dig to point to a specified server, regardless of defaults. Also try it with @8.8.8.817:21
tarvidno name servers could be reached17:22
e_t_can you ping other hosts?17:22
tarvidonly this machine17:22
e_t_The your real problem is that networking is busted.17:23
tarvidtrue17:23
tarvidbut it worked before attempting a static ip and nameservers17:23
e_t_Can you pastebin your /etc/network/interfaces ?17:24
tarvidhttp://paste.ubuntu.com/902512/17:25
e_t_What address do you get from DHCP?17:27
tarvidI'll swith from static to auto and see what happens17:28
Aisonon my ubuntu server, the networking is completly fucked up :(((17:30
tarvidI'm downloading the daily build, can I reinstall without setting up the dm again?17:30
AisonI didn't change anything in the configuration, but now, after reboot I have to configure the network devices all by hand17:30
e_t_tarvid: what do you mean by "dm" ?17:31
Aison /etc/network/interfaces is somethow not working right17:31
tarvidRAID117:31
tarvidAison, at least you have company17:31
tarvidresolvconf is supposed to take dns-nameservers from that file17:32
e_t_tarvid: I think the installer will detect an existing Linux RAID.17:33
tarvidencoueraging17:33
tarvidtook overnight the last time to erase it17:33
Adri2000zul: is it a problem that my merge request is for lp:ubuntu/horizon instead of lp:~ubuntu-server-dev/horizon/essex ?17:33
Adri2000(realized that today :/)17:34
e_t_tarvid: At that point in the installer, nothing has been changed, so you can just reboot if the raid isn't detected.17:34
zulAdri2000: yeah can you merge it against lp:~ubuntu-server-dev/horizon/essex please17:34
Aisontarvid, since ubuntu 11.04, I've got also this strange "Waiting for network connection" message at boot up, on ALL my desktop machines, it's just crap17:35
=== Patrick is now known as Guest63868
tarviddoes not make one cheery17:35
uvirtbotNew bug: #949442 in maas (main) "hard coded list of ubuntu release names, should use distro-info" [Undecided,New] https://launchpad.net/bugs/94944217:36
tarviddhcp fails on install, time to fix that first17:43
Adri2000zul: done https://code.launchpad.net/~adri2000/horizon/rename-apache-config-file/+merge/9957417:45
zulAdri2000: cool thanks17:46
tarvidhow am i supposed to use network-manager to add aliases?17:49
=== Arc_ is now known as a5m0
bluefrogtarvid, aliases? oh thought you had your own dns server17:55
tarvidI do but want to add ethernet aliases to a host17:56
bluefrogtarvid, is your resolv.conf still a symlink?17:56
bluefrogtarvid, deit /etc/hosts for aliases17:57
bluefrogedit17:57
tarvidabout to reload, testing static IP addresses issued by ISP, that is why I want to add aliases on another machine to make sure the routes work17:58
koolhead17popey, around?18:03
koolhead17popey, just wanted to tell you we should not feed those trolls!! :)18:05
tarvidhow come aliases in network-manager do not show up in ifconfig?18:07
rbasakDaviey: can we talk about my service orchestration / system management blueprints tomorrow?18:08
Davieyrbasak: ping me in the morning?18:09
Davieyrbasak: well have a voice chat18:10
=== bladernr_ is now known as bladernr_afk
roaksoaxSpamapS: how can I start an upstart job after a init script has started a daemon18:22
SpamapSroaksoax: two options. Either a) change the init.d script to emit an event when it is started, or b) convert the init.d script to an upstart job18:40
roaksoaxSpamapS: cool thanks and yes I had to patch the init script18:41
rbasakDaviey: will do, thanks18:45
=== bladernr_afk is now known as bladernr_
Davieyrbasak: still around?19:23
Davieyrbasak: Does OpenMPI need to be in beta2?19:23
rbasakDaviey: I'm not aware of a need. I think janimo uploaded it19:24
Davieyhttp://launchpadlibrarian.net/98532550/openmpi_1.4.3-2.1ubuntu2_1.4.3-2.1ubuntu3.diff.gz19:25
tarvidinstalling 12.04 server - long pause after configuring network manually. What is it doing?19:31
SpamapStarvid: testing your patience ;)19:45
SpamapSUrsinha: what happened to the old server team SRU report?19:46
UrsinhaSpamapS, it's supposed to be there19:46
SpamapSUrsinha: where?19:47
UrsinhaSpamapS, where it was before :) let me find the link19:47
SpamapSshould go in the knowledge base19:47
SpamapSUrsinha: and thank you for finding it for me. :)19:48
smoserDaviey, we're expecting cloud-images for beta-2 candidates tomorrow?19:49
smoser(and the same for ISO)19:49
zuladam_g: i added convert_to_sqilte.sh and sample_data.sh to keystone.install19:52
UrsinhaSpamapS, hm, it seems it's a bit broken19:53
Ursinhazul, where did you place your old sru report?19:53
adam_gzul: whats convert_to_sqlite do?19:53
Ursinhait was you?19:53
Davieysmoser: Yep, i'm not going to bed until we have a viable candidate19:55
smoseryou have a bed?19:55
Ursinhalol19:56
* SpamapS sleeps on a pile of old scraps and feathers19:56
zulUrsinha: should be in the same place as last time19:58
Ursinhazul, I can't remember where19:58
Ursinhahahahaha19:58
Ursinhawe're all doomed19:58
zulhttp://people.canonical.com/~chucks/SRUTracker/19:58
Ursinhaah, it's chucks19:58
UrsinhaI was trying zul19:58
Ursinhay u no use the same nick!?19:59
zulalter-ego19:59
Ursinhalol19:59
Ursinhathanks zul19:59
Ursinhabad news is that it seems equally broken19:59
Ursinhasigh19:59
UrsinhaSIGH19:59
UrsinhaSpamapS, I'll fix that19:59
SpamapSUrsinha: thank you!20:00
* SpamapS had not looked at it in a while but was wondering how we were doing at keeping up w/ SRU's20:00
UrsinhaSpamapS, it's here: http://reports.qa.ubuntu.com/reports/ubuntu-server/sru-report.html20:01
Ursinhayou can bookmark it20:01
Ursinha:)20:01
SpamapSUrsinha: done, and maybe once its fixed, add it to the KnowledgeBase page as well?20:03
UrsinhaSpamapS, surely20:03
Ursinhawe might want to add stats.qa.ubuntu.com/reports/ubuntu-server/ as well20:04
zulSpamapS: im not keeping up with the sru report at all20:09
allowoverridewhats a good program for vitualizing OS on debian based servers like ubuntu20:11
allowoverridei did a headless a while back on ubuntu 6.x. wondering what other free progs are avail... thanks!20:11
guntbert!kvm | allowoverride20:12
ubottuallowoverride: kvm is the preferred virtualization approach in Ubuntu. For more information see https://help.ubuntu.com/community/KVM20:12
allowoverrideuses libvrt20:13
allowoverrideok, anything else?20:13
allowoverridei like virt-manager :) and xm cmd's20:13
allowoverrideoh im new to xen by the way20:14
rhysso orchestra. anyone using it yet?20:20
uvirtbotNew bug: #966552 in net-snmp (main) "error with netsnmp.snmpwalk in libsnmp-python " [Undecided,New] https://launchpad.net/bugs/96655220:26
uvirtbotNew bug: #966558 in juju (universe) "add explicit ingress rule on non-Local provider bootstrapping node for zookeeper" [Undecided,Triaged] https://launchpad.net/bugs/96655820:31
uvirtbotNew bug: #966563 in juju (universe) "document best practices for keeping systems up to date" [Undecided,Triaged] https://launchpad.net/bugs/96656320:31
uvirtbotNew bug: #966566 in juju (universe) "create/document charm store review process" [Undecided,Triaged] https://launchpad.net/bugs/96656620:36
uvirtbotNew bug: #966569 in juju (universe) "document current lack of zookeeper ACLs (dup-of: 966573)" [Undecided,Triaged] https://launchpad.net/bugs/96656920:42
uvirtbotNew bug: #966573 in juju "document current lack of zookeeper ACLs" [Undecided,Triaged] https://launchpad.net/bugs/96657320:42
uvirtbotNew bug: #966577 in juju (universe) "add explicit egress 'owner' rule on non-bootstrapping nodes to require root access to zookeeper" [Undecided,Triaged] https://launchpad.net/bugs/96657720:42
uvirtbotNew bug: #966583 in juju "document lack of encryption in the juju environment" [Undecided,Triaged] https://launchpad.net/bugs/96658320:46
uvirtbotNew bug: #966584 in juju (universe) "implement explicit ingress filtering for Maas nodes" [Undecided,Triaged] https://launchpad.net/bugs/96658420:46
uvirtbotNew bug: #966590 in juju (universe) "implement full explicit ingress filtering on non-Local provider bootstrapping node" [Undecided,Triaged] https://launchpad.net/bugs/96659020:51
pabelangerIs the ubuntu release team responsible for actually creating the ISO (specifically the mini.iso)?20:54
pabelangerI'm looking for the process that is actually used (eg: scripts)20:55
uvirtbotNew bug: #813773 in juju "Juju should have security rules/acls for every path in zk" [High,In progress] https://launchpad.net/bugs/81377320:56
uvirtbotNew bug: #966601 in juju (universe) "encipher or remove sensitive credentials from zookeeper" [Undecided,Triaged] https://launchpad.net/bugs/96660121:06
uvirtbotNew bug: #966605 in juju (universe) "document best practices for securing communication between juju nodes" [Undecided,New] https://launchpad.net/bugs/96660521:06
raubvogelediting rsyslog config: rsyslog.conf, rsyslog.d/50-default.conf, or create a file in rsyslog.d/ ?21:11
=== wiherekDC is now known as wiherek
uvirtbotNew bug: #966611 in juju (universe) "add man pages for juju commands" [Undecided,Triaged] https://launchpad.net/bugs/96661121:16
uvirtbotNew bug: #966617 in juju (universe) "supply high level design documents" [Undecided,Triaged] https://launchpad.net/bugs/96661721:16
=== JanC_ is now known as JanC
kirklandhmm, seems that dkim-filter no longer exists in Ubuntu 12.0421:52
kirklandI was using that happily on Ubuntu 10.0421:52
kirklandanyone know if there's a replacement?21:52
=== bladernr_ is now known as bladernr_afk
bemuAnyone seen apt-get failures on EC2 akin to: https://gist.github.com/0f8b5d1be792990d1bc622:24
bemuIt's strange because it looks like the files are being pulled from the same place with --fix-missing: https://gist.github.com/2703c9b26d594d36f6a522:24
=== kapilt is now known as hazmat
dorkhi all, i've got a few ubuntu servers connected to an ip based kvm. i've got communication with the serial port during post, grub, and if therer isn't a failure between runlevel 1 and 2 i can see that and everything going forward, if there is an issue during boot up like prompting for raid degraidation boot override or if a software array cant assemble, or any failure for that matter that results to a busybox prompt, i lose my communication with the box22:43
mgwis it possible (reasonably easily) to run sshd on separate ports, with different sshd config settings for each port?23:42
raydog45000I just recently set lamp up on my ubuntu desktop and am trying to convert it to pure server, I can access it via ssh on mylocal host, does anyone know a good guide to make it accessible from the net or know how?23:45
ChmEarlraydog45000, iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT23:54
raydog45000what does that do?23:55
ChmEarlraydog45000, if you have a router (hw firewall) then open port 22 there23:55
raydog45000ok23:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!