/srv/irclogs.ubuntu.com/2012/04/11/#ubuntu-server.txt

uvirtbotNew bug: #978458 in samba (main) "CVE-2012-1182: "root" credential remote code execution" [Undecided,New] https://launchpad.net/bugs/97845800:06
loymwhich irc webchat is most featurefull and can be stable under heavy load?00:44
Ursinhaloym, you mean irc server?00:45
loymya. i need a webchat facility00:45
loymfor the ircd00:45
twbI don't know what that means.00:47
twbIf you just want a browser-based IRC client, I can't help you.00:47
Ursinhatwb, I guess he wants to run a webchat service for his irc server00:47
loymwell. there can be a webchat facility like for example http://en.irc2go.com/webchat/?net=QuakeNet .00:47
loymright?00:47
loymwhich irc webchat application is most featurefull and can be stable under heavy load?00:48
twbWhy not just use that client, then?00:48
Ursinhalike this http://webchat.freenode.net/00:48
loym2 reasons.00:48
loymi dont own freenode.00:48
loymand second i need a website facility00:48
jcastrothere are 2 you could use00:48
jcastroalice IRC, and subway IRC00:48
loymits for my own network00:48
twbWhy would the client care what server it's connecting to?00:49
jcastroalice is more mature, but subway has a real nice UI00:49
Ursinhathat's interesting jcastro00:49
jcastroUrsinha: I also have charms for both!00:49
Ursinhacool!00:49
Ursinhatwb, because he wants to have his own :)00:50
UrsinhaI don't see a problem with that :P00:50
twbWhy?00:50
loymok00:50
twbSo he can have corporate branding on it or something?00:50
loymtwb jcastro  i use inspircd  as an ircd00:52
loymwhats an easy way to log a channels chat. even if you logout as a user01:20
twbDeploy a log bot01:21
=== jtv1 is now known as jtv
smoserloym, well, lots of people run an irc bouncer or proxy  on  a mostly-all-the-time-up host01:32
smoseri use bip01:32
qman__in my case, my desktop _is_ a mostly-all-the-time-up host01:32
qman__but I use screen to a shell server for my mobile01:33
loymqman__,  what do you mean by this but I use screen to a shell server for my mobile01:51
twbloym: cellphones change IP all the time, so he can't easily run long-running connections on them.  So instead, he runs them on a "real" machine, and uses SSH and GNU Screen to connect to them01:52
loymscreen to a shell server for my mobile?01:52
loymoh01:52
qman__s/to/on01:52
loyms/to/on/01:52
qman__wrong preposition, I use irssi connectbot on the phone, to the shell server, which runs irssi in a screen01:52
loym?01:53
loymi hope irssi make folders of different irc.servers   and put the channel files in those folders01:53
loymchannel log files**01:54
qman__I actually don't log with my irssi, you have to configure it01:54
loymqman__,  twb  making irc chats open to general public and search engines will be a nice idea ?01:54
qman__but I'm sure it'll configure the way you want, irssi is hugely popular01:54
loymhm01:54
twbloym: at that point why don't you jsut make a channel on an existing public network01:55
twbloym: e.g. /join ##wanktasm -- ta da, you now have your own channel01:55
qman__running xchat on the desktop, I set this up in 2006, and, well, inertia01:56
loymya but if i have many good channels like #irssi #google #linux01:56
loymqman__,  twb  making irc chats open to general public and search engines will be a nice idea ?01:57
twbloym: plonk.01:58
smoserSpamapS, around ?02:37
uvirtbotNew bug: #978507 in tgt (main) "tgt default config should use config.d" [Medium,In progress] https://launchpad.net/bugs/97850702:41
qman__so I'm looking for recommendations on software for local backup to USB drive, I would just rsync but I'd like to keep deleted files for a while02:48
qman__and get deduplication02:48
Patrickdkheh, dedup is hard02:49
qman__I use backupPC at work for remote backups, which I guess could work for local02:50
qman__but I was wondering if there's a better choice02:50
twbqman__: rsnapshot02:50
Patrickdkya, I use backuppc currently02:50
twbOr just rsync --link-dest + manual expunge02:50
Patrickdkbut think I need to change to something else02:50
qman__bup looks promising but it's a ways off from production use02:51
qman__rsnapshot pretty much looks like what I want02:52
qman__thanks02:52
qman__I now need to make sure I have less than 3TB of stuff on my source directory02:52
twbFWIW my $boss maintains it and we're looking to replace it with something slightly less funky02:53
twbSpecifically the two key issues I want to address are 1) literal tabs in the config file; and 2) name backups by their timestamp, not daily.N02:54
qman__well, this is just my home stuff, going from no backup to a couple 3TB USB3 drives02:54
twbqman__: another good trick is to configure udev to run rsnapshot as soon as you plug the drive into the server02:55
twbqman__: so all you need to do is rotate the drives and it'll kick off on its own02:55
qman__was thinking about dd'ing the filesystem on them so they have the same uuid02:55
qman__then automount, scheduled backup02:56
twbOr just tune2fs, dude02:56
qman__good idea02:56
* Patrickdk sticks to, zfs send -> tape03:08
qman__next time I rebuild it I'll go with zfs or btrfs, but that's a ways off03:15
qman__did a raid 6 with hot spare after it failed, and now I'm adding a real backup03:15
patdk-lapheh, it took a large push to get me to use zfs03:15
patdk-lapit just seemed way too good to be true, some of it is though03:16
qman__I've already had three of the new drives go bad03:16
qman__first one RMA'd, second one's mid-RMA03:16
patdk-lapalways fun03:16
qman__third when that one shows up03:16
qman__fortunately they didn't all die at the same time this time03:17
qman__lost everything before03:17
patdk-lapI had a raid50 (6 disk) go bad, with 4 bad disks03:18
patdk-lapit lasted months though03:18
patdk-lapjust off the raid cards cache ram03:19
patdk-lapand os buffers03:19
qman__ha03:19
patdk-lapthe only thing that killed it, was a reboot03:19
qman__my previous raid 5, lost three drives in one day03:19
qman__when I built it, I figured the odds were low that they'd die at the same time, and I was horribly mistaken03:20
patdk-laphow did they fail?03:20
qman__they were ticking03:21
patdk-lapbeen a very long time, since I had one of them03:21
qman__they were about two years old when they quit03:21
qman__the other five still work03:21
patdk-lapfor the past 6 years or so, just have bad sectors, or bearing issues03:21
qman__not using them in that server, just for miscellaneous use03:22
qman__the new ones, the first two had bad sectors, the third just up and died, no longer detects, clicking03:23
qman__they sure don't make them like they used to03:24
patdk-lapmy 2tb drive was unpacked with a bad sector :(03:24
patdk-lapthe drive refused to remap it03:24
qman__said server has a 4GB quantum fireball as /, with many years of service03:24
patdk-lapended up locating that sector, calculating it's lvm offset, luks offset, ext2 offset, and telling ext2 to not use that sector03:24
qman__and it'll probably outlast this second set of raid drives03:25
qman__as it did the first, and a couple computers before that03:25
patdk-lapya, I have two 8gb disks that are good :)03:25
patdk-lapdon't own any ide stuff anymore though03:25
patdk-laphave 50+ 250gig wd ide drives03:26
qman__I originally built it on a tight budget, that's why I used it03:27
qman__but it just keeps working03:27
qman__no reason to replace it03:27
twbqman__: you could arrange an "accident"03:27
patdk-lapI couldn't believe the new hitachi 1tb disks I got03:27
patdk-lapthey where like 1/4th the weight of a normal harddrive03:28
twbpatdk-lap: wait til you see SSDs03:28
twbspinning metal?  fing o der parst03:28
patdk-laptwb, what ones? I have 603:28
patdk-lap10 that is I mean03:28
twbpatdk-lap: well they're lighter again, is all03:28
patdk-lapna, these hitachi drives are almost the same :)03:28
patdk-lapmy current server builds involve 22 disks, and 4 ssd's03:30
qman__it's not big or fast, but it doesn't need to be, it just needs to work, the raid 6 is still the performance bottleneck03:30
twbThat's because raid6 is a shitty algorithm03:30
qman__mine's got 11 in the raid, 1 spare, and the IDE /03:30
twbNecessarily so, of course, but I'll stick to raid1 unless I actually need to extra capacity03:30
patdk-lapthis are raid10 systems03:30
qman__next time I put real money into it I'm getting one of those 20+ hot swap 4Us and doing it up right03:31
qman__it's in a mid tower right now03:31
=== virusuy is now known as sudo
patdk-lapnorco rpc422003:32
patdk-lap20 disks, and I shove 6 ssd's in the top area03:32
twbpatdk-lap: how does that 4u hook up to the computer?03:33
qman__I started with a microATX emachine and some creative drilling and erector set03:33
patdk-laptwb, normal cables?03:33
twbSo what, a shitload of esata?03:34
qman__this case actually fits all the drives, but it's crammed with cables03:34
patdk-lapwhat? who uses esata?03:34
patdk-lapsff808703:34
twbpatdk-lap: you were talking about having a 4u unit to house all the disks, so I don't see how that would connect to a (presumably separate) rackmount server03:34
* twb looks up that string03:35
patdk-lapeasy, install motherboard in case :)03:35
patdk-lapplug in sas cable03:35
patdk-lapwell 5x sas cables03:35
twb5 SAS cables for 20 drives?03:35
patdk-lapone sas cable does 4 disks03:35
patdk-lapso 5x4 = 20 :)03:35
twbGood to know03:35
twbMy exposure to SAS is mostly "fuck that, SATA is good enough"03:36
twbUnless $boss is in "gouge the taxpayers" mode03:36
qman__first iteration: http://qman.strangled.net:8080/pics/fileserver/0119080025.jpg    current: http://qman.strangled.net:8080/pics/ryan/fileserver13drives/2011-06-25%2022.42.58.jpg03:36
patdk-lapnow if you wanted external storage: SC847E16-RJBOD103:36
patdk-lapconnect with 2 sff8088 cables (external sas cable)03:36
twb"They'll never believe we can run this off a pair of mdadm RAID1'd 2TB SATAs, so we will be using hw RAID5 of four SATA plus another hw RAID1 SATA for the actual real data"03:37
twbSigh03:37
patdk-laphmm, I just run sata over sas cables03:38
qman__yeah, that's what I have with my new card03:38
patdk-lapkeeps the cable clutter down03:38
qman__but it actually doesn't keep my clutter down, because they're like 3 feet long03:38
qman__and my case needs like 6" cables03:39
patdk-lapI have a bunch of 12", 18" and 24" ones03:39
qman__that power supply popped the other night, replacing it is going to be a real pain03:40
patdk-lapheh, it's not good to run sata over 3' cables03:40
patdk-lapoh, 3' is the sata limit03:41
twb3' eh03:41
patdk-lapso sas is good for 6' (if using real sas drives)03:41
twbOh for the cable, nm :-)03:41
=== bemu_ is now known as bemu
=== Lcawte is now known as Lcawte|Away
ruben23hi guys any help how do i setup on my ubuntu server apache web with commercial ssl certificates..? any guide04:26
linociscohi04:29
twbruben23: define "commercial"04:30
linociscocan ubuntu server make unmanaged switch to managed switch like adding VLAN feature?04:31
linocisco can ubuntu server make unmanaged switch to managed switch like adding VLAN feature?04:51
kaspirI can't seem to get ubuntu to share a folder over a network. Do I need to have a server computer to do this?06:34
RoyKkaspir: there's no such thing as a 'server computer' ;)06:35
kaspirRoyK: A computer running the server edition of Ubuntu if you will06:36
RoyKkaspir: ubuntu server is mostly about stripping away unwanted stuff like X, gnome etc06:36
RoyKand using a *slightly* different kernel06:36
fluvvellYou want samba server package running on your computer kaspir06:37
kaspirfluvvell: I sudo apt get'd samba and it didn't seem to change anything at all06:37
koolhead17jcastro, around06:38
fluvvellkaspir, you need to know which folders you want shared on your local network06:38
kaspirRoyK: Thx for the explanation06:38
kaspirfluvvell: I do. I just want to share one folder over a network. Like a free dropbox just on my network06:39
twbIIRC recent nautilus has a context menu "share this folder" which internally uses samba06:39
linocisco can ubuntu server make unmanaged switch to managed switch like adding VLAN feature?06:40
twbBut questions about that should be directed to #ubuntu unless you specifically have a problem with the samba part06:40
twblinocisco: no.06:40
fluvvellkaspir, to know is to understand. Much of peoples ideas about server technology is wrongly attained from windows.06:40
twblinocisco: unless you can somehow install ubuntu on the unmanaged switch06:40
fluvvellkaspir, if you're using ubuntu desktop, you can right click on a folder to access sharing options06:40
kaspirfluvvell: unfortunately i have absolutely no knowledge of server06:40
twblinocisco: linux *can* perform 802.1Q tagging, but this will not help you unless the other computer(s) can also untag.06:41
fluvvellkaspir, join #ubuntu06:41
kaspirfluvvell: i did the right click, and it just gave me ghosted options06:41
linociscotwb, if all computer network card support vlan tagging, is it ok?06:41
twblinocisco: it's an OS issue, not a hardware issue06:41
fluvvellkaspir, as twb is suggesting, this is the more dedicated ubuntu-server channel. but pm me06:41
kaspirok sorry guys06:42
linociscotwb, i dont understand06:42
twblinocisco: and all the OSs would have to be told like "act as if you are on vlan 3"06:42
kaspirfluvvell: the list of user online isn't showing up on the right can you pm me plz?06:42
twbSo if you want a managed switch for security, i.e. to lock some machines into a separate virtual switch segment, this will not help you, because anyone who controls those computers can simply configure them to be on a different virtual segment06:42
linociscotwb, if we use cisco managed switches, OS of clients can vary. connected devices are divided according to different  VLANs just through the config on switch06:43
twblinocisco: yes, this is the difference between managed and unmanaged switches06:43
twblinocisco: if you have an UNmanaged switch, you cannot do much -- only what I described above06:44
linociscotwb, this is what  i was thinking to make sure06:44
RoyK[  185.040107] bonding: bond0: link status definitely up for interface eth1.07:00
RoyK"definetely", "no doubt about that", "sure"07:01
=== smb` is now known as smb
lynxmanmorning o/08:55
uvirtbotNew bug: #978698 in postfix (main) "sqlite maps are broken in postfix 2.9.1-2" [Undecided,New] https://launchpad.net/bugs/97869809:43
uvirtbotNew bug: #978708 in puppet (main) "[Precise] puppet is vulnerable to CVE-2012-1906 and CVE-2012-1986 through CVE-2012-1989" [Medium,Confirmed] https://launchpad.net/bugs/97870809:43
jamespagesmb, Daviey poked me about something you needed sponsoring?09:58
smbjamespage, that likely is the iscsitarget thing... a sec09:58
smbhttps://bugs.launchpad.net/ubuntu/+source/iscsitarget/+bug/88254009:59
uvirtbotLaunchpad bug 882540 in iscsitarget "kernel crash whenever it is accessed" [Medium,In progress]09:59
smbjamespage, I got a debdiff attached to the bug report that adds a patch backported from the upstream repo09:59
Davieysmb: turns out i suck.10:00
smbDaviey, Or being overworked :)10:01
Davieysmb: something like that i guess :)10:01
jamespagesmb, OK - looking now10:02
jamespagesmb: I'm assuming that you have tested this?10:12
smbjamespage, not personally as it did not happen in my testing. but comment #7 say it worked for someone affected10:13
smbjamespage, For me it still worked (with or without the change)10:13
jamespagesmb, right-oh - uploading now.10:13
jamespagesmb, done10:16
jamespagepending approval from release team....10:16
never2farwhen i'm trying to do cobbler list i get: httpd does not appear to be running and proxying cobbler10:17
never2far i'm following this tutorial: http://cloud.ubuntu.com/2011/09/oneiric-server-deploy-server-fleets-p2/10:17
smbjamespage, thanks. of course. by now10:17
ikonianever2far: silly question, but is httpd actually running ?10:18
never2faryup10:18
never2farroot@ubuntu-lan:~# service apache2 status10:18
never2farApache2 is running (pid 2471).10:18
ikoniaI'm assuming it's using mod_proxy for the proxying ?10:18
linociscook10:19
never2fari haven't changed anything ...just apt-get install ubuntu-orchestra-server10:20
ikoniaworth looking what it thinks should be doing the proxying10:21
never2farikonia, thank you i'll try to find more info about mod_proxy10:21
ikonianever2far: (I'm only guessing it's mod_proxy - but it seems a logical assumption)10:21
never2farikonia, i fixed my problem using dpkg-reconfigure cobbler10:29
never2farthx for advices10:30
ikoniano problem10:31
ikonianever2far: out of interest did anything change in the config ?10:33
never2farikonia, yes the internal ip was a wrong one10:52
ikoniaahh10:53
ikoniasimple enough error10:53
pawdrohello, is it possible to install postgresql (v. 8.4) in Pangolin? I suppose I have to do it by manually downloading packages from oneric ?10:57
pangolin!crossposting | pawdro10:59
ubottupawdro: Please don't ask the same question in multiple Ubuntu channels at the same time. Many helpers are in more than one channel and it's not fair to them or the other people seeking support.10:59
pangolinpawdro,  you were told that 12.04 is only supported in #ubuntu+110:59
Riddellec2 question: is it possible to change the security group on a machine after it has been launched?11:40
lynxmanRiddell: unfortunately it's not possible, you'll have to snapshot it into an AMI or an EBS image and launch a new one12:29
Riddelllynxman: hmm those sound like useful things to learn about12:32
lynxmanRiddell: if your instance is not EBS rooted this is a pretty good tutorial http://alestic.com/2009/06/ec2-ami-bundle12:33
lynxmanRiddell: have in mind that creating your own AMI will consume space on S312:33
Riddelllynxman: why are some instances EBS and some not? (or is that a question with a complex answer?)12:34
lynxmanRiddell: it really depends on what you want from your instance, having an EBS root based instance gives you persistent storage, that's good for some kind of machines that are not design to be rebuilt quickly, let's say a database or some kind of complicated app server (as examples)12:35
lynxmanRiddell: whereas memory based instances don't have persistent storage, so you can spawn a lot of them very quickly and template them up using some solution like juju or puppet or chef, then a regular not ebs rooted based instance is the right thing for you, since if the instance dies and all the data from that instance goes away you don't mind12:36
Riddellgosh lots to learn with this cloud stuff12:37
lynxmanRiddell: lots of little concepts, once you get the gist of all of them it's pretty sweet actually :)12:37
zulgood morning12:38
lynxmanzul: morning sir12:38
DebruUbuntu server is just comandline?12:52
swDebru: unless you install a GUI12:53
Debrusw: what is suggested for speed, to install ubuntu desktop or server with gui..?12:56
swDebru: it's quite simple. do you need a desktop computer, or a server computer?12:57
swDebru: if you want something minimal, then there's a !minimal version of Ubuntu that might suit you ...12:58
sw!minimal | Debru12:58
ubottuDebru: The Minimal CD image is very small in size, and it downloads most packages from the Internet during installation, allowing you to select only those you want (the installer is like the one on the !Alternate CD). See https://help.ubuntu.com/community/Installation/MinimalCD12:58
Debrusw want somethin what uses less resources and what can be customized to my needs12:59
swDebru: use !minimal then, and install only what you need12:59
Debrusw one more question what is difference if i install 10.04 or 11.04? after update to 12.04 both will be supported LTS?13:03
swDebru: 12.04 will be LTS for 5 years (desktop + server)13:06
ogra_you can not update directly from 11.04 to 12.0413:06
ogra_(needs an update to 11.10 first)13:06
Debruyes, but if i update 11.10 to 12.04 will it be LTS?13:07
ogra_it will be 12.04 ... which will be LTS, yes13:07
Debruogra_, so i dont see any difference wich version i take now.. :P13:07
swDebru: well one is old, and one is new - quite simple13:07
Debrubut all can be updated to 12.04 and all get LTS..13:08
ogra_one might have different ways to configure stuff than the other13:08
swDebru: 11.10 and upgrade to 12.04 when it's released13:09
Debruogra_, yes, from that side..13:09
Debruok thanks for your help..13:10
=== Lcawte|Away is now known as Lcawte
aciculaipv6 addresses are assigned automatically for my server, but overtime i accumulated 6/7 ipv6 addresses though all with the same shared prefix. anyone who can point me to a doc on ipv6 that explains this behaviour?13:40
melteranyone know why on precise server beta 2, when i run "apt-get remove g++", it fails with the error "g++ is already the newest version"?13:42
swmelter: #ubuntu+113:45
robo_hello: I'm seeing something strange. cat /proc/swaps shows nothing yet I have a swap partition defined in /etc/fstab. Any ideas on things to check?13:49
robo_i guess i can just run swapon, but i'm trying to figure out why it's not showing up, or why it disappeared13:50
robo_actually, swapon failed, heh13:50
jamespagelamont, is the sqlite fixup for postfix in 2.9.1-3 going to make it for precise final freeze?13:51
iclebyteis there a method to disable IPv6 on a specific interface in a machine with multiple nics?13:52
lamontjamespage: yes13:52
jamespagelamont, \o/ thanks13:52
lamontI'll upload it today and ScottK tells me he'll smack it through the process13:52
lamontjamespage: if you wanna help me even more, bug 970921 just needs someone  to clone the reporter's main.cf (and fix whitespace cut-n-waste issues), and demonstrate the failure in a chroot, followed by maybe actually figuring out wtf it's doing that13:54
uvirtbotLaunchpad bug 970921 in postfix "Postfix 2.9.1 Crashing with Signal 6 - Postfix 2.8.5-2 works perfectly" [Undecided,Incomplete] https://launchpad.net/bugs/97092113:54
jamespagelamont, lemme take a look13:54
lamontI want to have that in there, even if it winds up being in -4 tomorrow or some such13:54
shaunoiclebyte: you're probably looking for /proc/sys/net/ipv6/conf/$IFACE/disable_ipv613:54
lamontjamespage: I'm just a bit timepressed today wrt working on distro stuff13:55
jamespagelamont, I'll look at it now while I wait for php5 to build13:55
lamonta13:56
lamontta13:56
robo_hmm, this is weird. swapon: cannot find the device for UUID=fe038e8e-382e-4828-869e-8de7d86eacf5 and blkid doesn't show the swap partition either. I'm perplexed.13:56
ikoniarobo_: does fdisk show a swap partition ?13:59
robo_ikonia, good call. No it doesn't. I get an error Disk /dev/sdb doesn't contain a valid partition table13:59
robo_well, that's why. I wonder what the heck happened13:59
robo_ty for that breadcrumb ikonia14:00
ikonianot at all, sometimes the obvious stuff is easy to miss14:00
raubvogeliptables question: I am trying to check the rule in my forward chain.14:03
raubvogelSo I do iptables -L FORWARD and my rule shows as "ACCEPT     all  --  anywhere             anywhere"14:03
raubvogelNow, I know I have defined I want it to use eth1 and the input and eth0 as output. How can I see that?14:04
hallynstgraber: d'oh.  lxc-init is linked against libapparmor1.  It doesn't need to be.  Fixing that would require splitting out the functions it uses into their own source files I assume.14:04
raubvogelNVM -v did the trick14:05
raubvogelWell, I see the rule now: ACCEPT     all  --  eth1   eth0    anywhere             anywhere, but it does not work14:06
gary_posterhallyn, re lxc-ip: we are tempted to write the script in Python rather than bash.  We expect to call out to host via subprocess (e.g., in Python we will parse the output of "host NAME DNSSERVER").  We can of course do it in bash instead.  Would writing it in Python make it less likely that it could be included in the lxc package?  If so, we'll go with bash.14:13
ealexmphola buenos dias a todos14:14
ealexmpalguien me podria ayudar14:14
ealexmpno puedo hacer que ubuntu levante con raid1 por hardware14:15
ealexmpalguien tiene algun manual paso a paso de como instalar ubuntu server haciendo raid1 por hardware14:15
Jeeves_English would help :)14:16
ealexmpmi controladora raid es perch700 de dell, tengo un servidor intel xeon de 2.4 el dell es r51014:16
ealexmpspok spanish or engleash14:17
ealexmphelp14:17
=== dendro-afk is now known as dendrobates
jpds!es | ealexmp14:23
ubottuealexmp: En la mayoría de los canales de Ubuntu, se habla sólo en inglés. Si busca ayuda en español entre al canal #ubuntu-es; escriba "/join #ubuntu-es" (sin comillas) y presione intro.14:23
hallyngary_poster: no objections to python :)  or go for that matter14:23
gary_posterhallyn, :-) cool14:23
hallyngary_poster: i'd frankly like to rewrite a bunch of it in python or go14:24
gary_postersounds great to me14:24
ealexmpubottu: no sabes de algun manual con raid por hardware para ubuntu14:25
ubottuealexmp: I am only a bot, please don't think I'm intelligent :)14:25
sw!sp | ealexmp14:27
sw!spanish | ealexmp14:27
ubottuealexmp: En la mayoría de los canales de Ubuntu, se habla sólo en inglés. Si busca ayuda en español entre al canal #ubuntu-es; escriba "/join #ubuntu-es" (sin comillas) y presione intro.14:27
ealexmpwhat14:27
ealexmpsomeone manual in english14:28
ealexmpnow yes14:28
uvirtbotNew bug: #978961 in keystone (universe) "add release note that OpenStack should be used on a protected network (dup-of: 978963)" [High,Triaged] https://launchpad.net/bugs/97896114:31
uvirtbotNew bug: #978963 in keystone "add release note that OpenStack should be used on a protected network" [High,Triaged] https://launchpad.net/bugs/97896314:31
xranbyealexmp: https://help.ubuntu.com/11.10/serverguide/C/advanced-installation.html14:32
Guest91689I have forgotten my password and my user name for my samba folder, how to recover?14:33
tgardneris there a reason why cobbler precise-x86_64-auto formats root as ext3 ? why not ext4 ?14:56
smbtgardner, I suspect that depends on the seeds...15:08
tgardnersmb, well, yes. but _why_ is it ext3 ?15:09
smbtgardner, I think not in mine...15:09
smbtgardner, which kickstart template is used on your system?15:10
smbHm, I see there is a server seed using ext3 and the orchestra seed is using ext415:11
tgardnersmb, it says this in the web page: /cblr/svc/op/ks/profile/precise-x86_64-auto . Where does that exist on the server? All I can find are /var/lib/cobbler/kickstarts15:11
smbtgardner, I usually look at the web interface on the profiles15:12
smbtgardner, Doh and -auto would use the ext3 as well... I just use the non-auto version and my own seed... :/15:13
tgardnersmb, so it ultimately resolves to /etc/cobbler/ubuntu-server.preseed which has ext3 as the root fs format.15:14
smbyes15:14
tgardnerthat default seems bogus to me15:14
smbtgardner, I wonder whether that is some sort of neglected bastard child config...15:15
tgardnersmb, the other thing that preseed is missing is $SNIPPET('orchestra_proxy')15:17
tgardneror kickstart, rather15:17
smbtgardner, It looks quite old actually...15:17
smbsome late greetings from kirkland... ;)15:18
lynxmanSpamapS: whenever you're around, found the issue15:33
SpamapSlynxman: what was it?15:33
=== Guest91689 is now known as jolaren
SpamapSlynxman: I am at the largest annual gathering of mysql professionals in the world.. so if you need help, I can find it. :)15:35
lynxmanSpamapS: it was due to a couple of phased out configuration parameters from 5.1 to 5.5, when running mysqld standalone it complains about these config parameter then exits non-zero, upstart doesn't have that in mind and the error was cryptic15:35
lynxmanSpamapS: oooh have fun :D15:35
lynxmanSpamapS: maybe it would be convenient to add that to the upstart script somehow? A small config sanity checker of sorts15:36
zulSpamapS:  can you go beat oracle for security stuff please :)15:40
SpamapSzul: I plan to15:40
* SpamapS goes to keynotes15:40
zulSpamapS:  goody15:40
lynxmanzul: beating people for security stuff is always the first choice amongst packagers ;)15:41
=== bladernr_ is now known as bladernr_afk
=== dendrobates is now known as dendro-afk
adam_gjamespage: ping16:33
jamespageadam_g, pong squid3?16:34
adam_gjamespage: yea, given it any more thought? was gonna take a crack at that today with some other packaging things16:34
jamespageadam_g, I did quite a bit of thinking but I've not come up with any miracle solutions I'm afraid16:37
jamespagewhichever way we cut its its not going to work for someone.16:37
adam_gjamespage: my original idea was to find the version of squid we're upgrading from, compare on-disk config hash with the hash that was shipped for that version (they arent conffiles so dpkg can't be queried for that, hence that list i showed you last week), and warn users of potential conflicts/problems and to investigate16:37
adam_gjamespage: perhaps give them the option of migrating the config to the new location?16:38
jamespageadam_g, I think that is the best approach we have - there will still be edge cases where people have not taken -updates....16:38
jamespageadam_g, I think we should preserve the old config file if it has been changed - but I don't think we should drop it into the squid3.conf location16:39
jamespageI think informing the user that they need to review and update to squid3 is the right way to go in that scenario16:39
jamespagegood release notes :-) and NEWS.16:40
adam_gjamespage: AFAICS, the default config file has is the same for all versions of a distro release and doensn't change per-build16:40
adam_gDaviey: thoughts?16:40
adam_g^16:40
jamespageadam_g, well that makes things easier16:40
adam_gthose are the hashes going back to lucid. i can get earlier ones if we need http://paste.ubuntu.com/925109/16:40
jamespageadam_g, although I think the opportunity to display information during a release upgrade is somewhat limited.16:41
Davieyadam_g: yeah.. a note and release notes is perfect for that IMO16:42
jamespageadam_g, Daviey: so I think this is what we are proposing16:42
Davieysuperb16:42
jamespageif hashes match on old file - i.e. default config - all is good in the world - no further action required16:42
jamespageif the config has been changed - preserve it but don't overwrite the default config shipped with squid316:43
jamespagedoes that sounds about right16:43
jamespageoh - and write a good release note :-)16:43
adam_gjamespage: so forget about popping up a dialague?   i seem to remember thats bad form unless theres actually some choice for the user, eg not a warning16:44
Daviey+116:44
jamespageyep16:44
adam_gok16:44
jamespageadam_g, put something in NEWS about upgrading from squid216:44
jamespageprobably the same text as the release note.16:44
Davieyhttp://www.debian.org/doc/debian-policy/ch-binary.html#s-maintscriptprompt16:45
jamespagelamont, I've been scratching at the postfix bug on-and-off all afternoon but I've not been able to reproduce16:46
=== tgardner is now known as tgardner-otp
micahgcould I get a puppet "expert" to look at https://bugs.launchpad.net/lucid-backports/+bug/978571/comments/2, I just want to know if the comment at the end is something we need to worry about16:59
uvirtbotLaunchpad bug 978571 in natty-backports "Please backport puppet 2.7.1-1ubuntu3.6 (main) from oneiric-security" [Undecided,New]16:59
lamontjamespage: well, that's maybe a good thing... dunno17:00
=== matsubara is now known as matsubara-lunch
jamespagelamont, hmm - not sure - quite a few people reporting the same issue.17:04
lamontjamespage: that was what I did not want to hear17:06
lamontI'll spin up a text instance tonight then17:06
jamespagelamont, quite a few = 3 people on that bug report....17:06
lamont"sufficent" == ">1"17:10
hallynjjohansen: have you had a chance to test the apparmor+upstart changes for containers?17:23
jjohansenhallyn: I am going through testing a set of changes including those, so far things look good17:24
hallynjjohansen: ok, thanks17:24
jjohansenhallyn: and thanks for doing the patch, I ended up have car issues last night and not getting back until late, so it really saved me :)17:25
hallyni guess thank your car for having the issues now and not in 10 days :)17:25
sbeattiehallyn: I've tested a tweaked version of the apparmor init script outside of a container to make sure things didn't break, and incorporated it into what's going to go into the next apparmor upload (today) at https://code.launchpad.net/~sbeattie/apparmor/apparmor-precise17:25
sbeattie(I adjusted the reported strings and made the if-level only one deep)17:26
hallynsbeattie: cool, thanks.  suppose we need to beg someone else to dput upstart17:26
hallyncool17:26
sbeattieyes, should run it by slangasek, I think.17:26
hallynsomehow tests in dash and bash always treat me wrong, so i'm very conservative :)17:26
sbeattieah, heh, that's not a bad thing.17:27
kaspircould somebody please help me with a reinstall issue. I installed samba through the terminal and was configuring. I messed up configuration, didn't know how to fix it so I uninstalled, and reinstalled. It still had the messed up configuration so I uninstalled and manually deleted from /etc. Now upon install no folders or files installed in /etc17:38
rbasakkaspir: sounds like you need to purge the package rather than just remove it. The former removes configuration files; the latter does not.17:46
kaspirrbasak: no i did that17:46
kaspirrbasak: sudo apt-get --purge remove samba # command i used17:47
=== tgardner-otp is now known as tgardner-lunch
=== matsubara-lunch is now known as matsubara
someone34242hello18:11
someone34242could someone help me with this tutorial18:11
someone34242http://ubuntuforums.org/showthread.php?t=23609318:11
someone34242i wanna set bind for my domain, but i don't know how18:12
someone34242i already buy domain and i have settings for two ip's18:12
someone34242how to set those two IP's on my server18:12
someone34242?18:12
jjohansenstgraber: heads up, the deny mounts fix will not make freeze, there are some last minute semantic tweaks happening around 'in' and having multiple option= statements on the same line, that necessitate changes in the deny mounts patch as well.18:17
* jjohansen is really sorry but doesn't see a better option atm18:17
smoserutlemming,18:24
smoserprecise-server builds are failing18:24
smoserneeds fixing18:24
smoseri believe ev is responsible for whoopsie, which is what is causing issues18:25
utlemmingsmoser: looking now...18:25
smosercan you chase that for me?18:25
utlemmingsmoser: it was on my todo list today anyway18:26
utlemmingsmoser: working on it18:26
uvirtbotNew bug: #856067 in txaws "s3/client.py should not depend on epsilon library" [Low,Fix released] https://launchpad.net/bugs/85606718:27
uvirtbotNew bug: #862595 in txaws "terminate_instances raises NoneType not iterable on machine shutdown with Openstack" [High,Fix released] https://launchpad.net/bugs/86259518:27
uvirtbotNew bug: #912607 in txaws "zope.datetime should be dropped in favor of dateutil" [Low,Fix released] https://launchpad.net/bugs/91260718:27
smoserutlemming, background is that ev recently added whoopsie to the server seed.18:27
smoserwhere recently == after last successful build18:27
utlemmingah, okay, I was wondering where that came from18:28
jkyleI can't find the equivalent of a netinstall image or a business card image for ubuntu server, are these minimal images provided?18:31
xr1rris there a terminal command for finding out what type of server a website is running18:34
lynxmanxr1rr: could you be more specific? Type in OS, CPU, memory...?18:35
xr1rrlynxman: Yes OS18:36
=== tgardner-lunch is now known as tgardner
xr1rri.e. Ubuntu.. Apache18:36
lynxmanxr1rr: if it's a linux or unix kind /etc/issue should have the version running18:36
rocketsWhat's the proper way to set the FQDN of an ubuntu server host? (i cant do it via dhcp in this case)18:38
rocketsi know i can set the hostname in /etc/hostname but what about the rest of the fqdn18:39
xr1rrlynxman: can you get this info from a domain name18:40
jkylexr1rr: nmap18:41
jkylexr1rr: or do you mean from the local shell?18:41
xr1rrjkyle: for example if I wanted to find out the server OS of somewebsite.com18:42
patdk-wkask it's webbrowser :)18:43
rocketsIT IS WEB BROWSER18:43
lynxmanxr1rr: hostname --fqdn18:44
xr1rrpatdk-wk: can you explain ;)18:44
patdk-wkyou can only find out, what they tell you18:45
patdk-wkyou can attempt to infer all you want though18:45
xr1rrok18:47
rbasakjkyle: http://archive.ubuntu.com/ubuntu/dists/precise/main/installer-amd64/current/images/netboot/ or s/precise/oneiric/ or lucid as needed.18:48
jkylexr1rr: nmap18:48
xr1rrjkyle: ok i'll try18:48
jkylerbasak: those are netinstalls for pxeboots18:48
jkylexr1rr: http://nmap.org/book/osdetect.html18:49
jkylewait, mini.iso looks promising18:49
rbasakjkyle: I'm not sure mini.iso is. I think you can install from that without pxe18:49
jkylestreaming those nigh 1gb images over wan for remote installs is overkill18:50
uvirtbotNew bug: #979223 in etckeeper (main) "etckeeper tries/fails to autocommit on clean trees with shelved changes" [Undecided,New] https://launchpad.net/bugs/97922318:51
=== viezerd- is now known as viezerd
gary_posterhallyn, I have reason to suspect that sem_open is broken in lxc (ENOSYS).  I need to write a simple C program to verify, but does this wring a bell at all?20:15
gary_posterheh, or ring20:16
hallynno, neither20:16
hallynENOSYS...  is this i386 on amd64?20:17
=== bladernr_afk is now known as bladernr_
hallyngary_poster: maybe you need access to /dev/shm?20:19
gary_posterhallyn, it is a 4 bit machine; uname -a saus i68620:19
hallyngary_poster: mount | grep shm ?  should have a tmpfs on /dev/shm20:19
hallynawesome20:20
gary_posterheh 64 bit machine20:20
hallynhost is i686, or only the lxc container?20:20
gary_postermount | grep shm shows nothing hallyn20:20
gary_posterhost and container are 64 bit20:20
hallyngary_poster: guessing that is the problem20:21
gary_posterthis is happening locally on my machine and on a ec2 instance20:21
hallyngary_poster: can you add an entry to /var/lib/lxc/<container>/fstab20:21
hallynnone /dev/shm tmpfs defaults 0 0 or something20:21
gary_posterack20:22
hallynif that works we'll need to do it in the templates20:22
gary_posterhallyn, no initial slash so "none dev/shm tmpfs defaults 0 0" yeah?  trying20:23
hallyngood point :)20:24
gary_posterhallyn, that fixed it20:25
gary_posterhallyn, want me to file a bug just to help out with bookkeeping, or not bother?20:25
hallyngary_poster: thanks, I'll get that fixed in the templates20:25
gary_postercool thank you20:26
hallyngary_poster: sure, that'll look less fishy :)  thanks20:26
hallyn(keep the release team from thinking i'm trying to trick them)20:26
RoyKWARNING: 27.37˚C > 25˚C <-- Datacentre is getting cozy...20:26
gary_posterlol20:27
* RoyK just got to work and is in a foul mood20:28
gary_posterhallyn, bug 97458420:31
uvirtbotLaunchpad bug 974584 in lxc "Semaphores cannot be created in lxc container" [Undecided,New] https://launchpad.net/bugs/97458420:31
hallyngary_poster: thanks20:36
gary_posterwelcome20:39
uvirtbotNew bug: #974584 in lxc "Semaphores cannot be created in lxc container" [Undecided,New] https://launchpad.net/bugs/97458420:42
hggdhis there a channel for MAAS?21:01
hallyngary_poster: well fooi.  it's not so simple21:03
hallynstgraber: containers have a problem with /dev/shm.21:03
stgraberhallyn: /dev/shm pointing to /run/shm which doesn't exist?21:04
gary_posterhallyn, darn21:04
hallynok21:04
stgraber(I saw that case a couple of times but didn't have time to track it down and didn't seem like it was always happening for me)21:05
=== dendro-afk is now known as dendrobates
hallynstgraber: not quite.  /run/shm is fine.  but /dev/shm exists as a file, so the initscript doesn't create it as a symlink to /run/shm21:09
stgraberhallyn: oh, that's the source of the issue! what's creating it as a file?21:10
hallyndunno21:10
hallyn(sorry, network keeps stalling here)21:10
stgraberI can't see any case where it'd make sense for it to be a file, a directory makes sense, a symlink does too, but a file ... besides using it as a target for a bind mount, I don't see what that'd do21:11
hallynstgraber: sorry a regular dir21:11
hallynit's waht debootstrap creates...21:11
stgraberhmm, ok, so just remove it and replace with a symlink then?21:12
hallynstgraber: do that where?  in our template?  or in mounted-dev.conf?21:13
hallyncurse /run21:15
stgraberhallyn: actually the problem is likely initscrips postinst21:18
hallynwhich should convert it?21:18
stgraberhallyn: from what I read in /var/lib/dpkg/info/initscripts.postinst21:18
stgraberhallyn: it's a bit unclear really, but there's code in there to ln -sf it as well as code to make it a directory, so I'm a bit confused :)21:20
thesheff17do people that maintain the ec2 ami for ubuntu hang out here or is that another room?21:20
hallynstgraber: oh i get it21:20
hallynstgraber: in non-chroot, mount -bind /run/shm to /dev/shm, and /dev will be re-created (so shm go away) on reboot21:21
hallynstgraber: in chroot, don't bother  with the bind mount (bc it wn't go away cleanly) just ln s-sf21:21
hallynquestion is, why aren't we being treated as a chroot?21:21
hallynso if we got a clean /dev on reboot of container, we'd be fine21:21
hallyn(maybe, iiuc :)21:22
hallynoh yeah, and since dev isn't a separate fs from /, it does the mkdir on line 29021:22
hallyn39021:22
hallynthesheff17: you want utlemming or smoser i think21:23
utlemmingthesheff17: what's up?21:23
thesheff17sun-java6-jdk isn't found even though I add partner mirror.21:24
thesheff17us-east-1e ami ami-0baf766221:24
hallynstgraber: oh wait!  mounted-dev never even runs bc we don't mount /dev21:25
smoserthesheff17, nothing to do with the mirror unfortunately.21:26
smoserbut more to do with the partner21:26
smoseri think you'll need to call Mr. Ellison.21:26
gary_posterheh21:26
=== leo-nel is now known as leonel
thesheff17this worked on previous ami :)21:26
smoserthesheff17, no. it worked at a previous point in time.21:27
smoserhttps://lists.ubuntu.com/archives/ubuntu-security-announce/2011-December/001528.html21:27
thesheff17ah ok thanks21:27
thesheff17didn't see thise21:27
smoserit sucks.21:27
utlemmingsmoser: thanks, you beat me to that link21:27
smoserthere are ways around it.21:27
smoserbut i will leave yo to google that.21:28
thesheff17hehe ok thanks21:28
hallynstgraber: it seems like the code starting on line 390 in the psotinst is legacy21:32
hallynthe /dev/shm dir/symlink will always exist by then21:33
hallynunless i'm missing some conditional somehwere21:33
=== bladernr_ is now known as bladernr_afk
hackeronhey, I have Lucid installed, I want to upgrade to the next releast, I have Prompt=normal in /etc/update-manager/release-upgrades, I did apt-get update, but do-release-upgrade -d shows No new release found :/ - what am I doing wrong?21:53
=== matsubara is now known as matsubara-afk
=== caveat-_ is now known as caveat-
=== bladernr_afk is now known as bladernr_
uvirtbotNew bug: #979414 in juju (universe) "juju bootstrap failed - 12.04 beta" [Undecided,New] https://launchpad.net/bugs/97941422:46
tnachenhi all, I wonder if someone can help me figure out a problem with libvirt and virsh22:55
tnachencurrently I'm just trying to run virsh but any virsh command will just hang forever unless ctrl+c22:55
tnachenI'm on precise 12.0422:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!