/srv/irclogs.ubuntu.com/2012/05/03/#ubuntu-server.txt

=== bigjools-afk is now known as bigjools
Psi-JackSo, it's almost a rarity these days that people even use Kerberos, isn't it?00:09
Resistancei've seen it used on Unix systems, almost never on Ubuntu nowadays00:09
Resistanceand if I have seen it, its usually only on University networks and the occasional Corporate or Enterprise grade system00:10
Psi-JackI've gotten UP to getting krb5 mit working, except it throws me errors trying to create the realm in ldap.00:12
=== Resistance is now known as EvilResistance
=== ZeroCool is now known as Guest35710
rocobrunoHi, I was wondering if it advisable to install the ubuntu-desktop on a ubuntu server to use freenx. My concerns are of conserving as much of memory and cpu resources as possible.01:00
Patrickdkif you install ubuntu-desktop, it becomes ubuntu-desktop, basically no different than using the ubuntu desktop iso01:02
Patrickdkand it will use all the memory that it requires of that01:02
rocobrunois there such a way that you can get the desktop on demand ? Without the machine always booted with gui ?01:04
Patrickdkrocobruno sure? edit /etc/init/lightgm01:07
Patrickdkand tell it to not start on boot01:07
rocobrunoThanks Patrickdk01:12
ruben23hi guys where we can find teh data of mysql on packages install in mysql..?01:17
Patrickdkno clue what you just said01:18
EvilResistanceruben23:  can you clarify what you mean by 'data'01:19
EvilResistanceand 'on package install' (same context)01:19
ruben23becasue i ahve a script with this and dont knwo what commadn should i put coz this is source install but im using package install of mysql ----> `/usr/local/mysql/bin/mysql -uroot .p.password. -e 'show databases' |  fgrep -v  \  "Database" |  fgrep -v "information_schema"`01:20
ruben23and also this ----> index_float=`du -amc  /usr/local/mysql/data/$i/*.MYI | grep total | awk '{print $1}'01:21
Psi-JackBah!01:26
* Psi-Jack throws Kerberos out the window.01:26
ruben23hi guys how do i install perl modules on ubuntu server..?02:28
matt_keysI'm trying to bridge eth1 to virtual guests. i've got the bridge defined and working but the default was still virbr0. I virsh net-destroy default, then edited the default.xml to use the ip and bridge i want, but now when i virsh net-define the default.xml it says error: operation failed: network 'default' already exists with uuid e13c38e7-8679-b8ad-071a-3bd40d135af602:47
twbThe name of the bridge is irrelevant02:48
twbYou could call it "arthur" and it would behave the same way02:48
matt_keysis deleting the default network forbidden or something?02:49
twbIf it helps, this is a virsh dumpxml of a KVM instance, bridged to an existing bridge (set up in interfaces(5)) -- http://paste.debian.net/167078/02:50
greppyruben23: are the modules that you need not included in a repo?  most of the ones that I have needed I have been able to find by searching for the module, like 'apt-cache search XML::Tidy'02:54
matt_keystwb : thanks, i had to restore default.xml like it was and then reinstall virt-manager to fix02:59
matt_keyswouldn't connect to qemu or anything03:00
footvillaI have 2 SSD 128 GIG running on Raid 0 Software Raid (mdadm)03:03
footvillaevery 30 min im getting bad sector errors, and it locks access to everything03:04
footvillahow would i run fsck03:04
footvillaon a raid 0?03:05
footvillasudo fsck =pcfv /dev/sda03:05
footvilla?03:05
twbfootvilla: fsck operates at the filesystem layer.  It doesn't give a shit about the underlying block device.03:05
twbYou would need to fsck /dev/md0 or whatever the RAID0 array is called.03:05
twbAlso, if no one has lectured you on this before: do not use RAID0 if you care about your data!03:06
footvillayea ive noticed03:07
footvillaI went out and spent alot of money today03:07
footvillai picked up 4 WD Ae4 250 gig Harddrives03:08
footvillais it possible to transfer my raid0 and to those 4 harddrives to make it a raid 10 ?03:08
twbDunno why you'd get 250Gs unless they're on special.  The ideal price point at the moment must be around 1.5G range atm03:15
footvillai mean 500GB03:15
twbAnyway, the obvious way to do it would be to create a new array on the new four drives, make LVM and filesystems there, then mount them and the old drives at the same time and copy files across.03:16
twbIf they're your boot drives as well, you'll also need to fiddle-fart around with fstab and grub so that the new disks will boot03:16
footvillaLVM?03:18
footvillatwb do you recommend using this tutorial ? http://www.numango.com/4653_linux-creating-configuring-raid.html03:27
twbfootvilla: have you read the Ubuntu Server Guide?03:27
footvillano03:27
twbDo so03:27
twbfootvilla: you want the section "advanced installation" I think03:31
footvillayea however it only shows how to step by step configure raid 1 on two physical drives03:32
twbRAID10 is just a mirror of striped drives (or a stripe of mirrored drives)03:36
twbmdadm --create -n2 -l0 /dev/md0 /dev/sd[ab]203:37
twbmdadm --create -n2 -l0 /dev/md1 /dev/sd[cd]203:37
twbmdadm --create -n2 -l1 /dev/md3 /dev/md[01]03:37
twbSomething like that, anyway.03:37
twbI do not know whether it is better to do 0+1 or 1+0.03:38
footvillayea reading up on google abou that03:38
footvillatwb03:46
footvillaserver hd just wedged03:46
footvillahttp://paste.ubuntu.com/963838/03:46
twbyeah that looks like the disks are dying03:47
twbAt this point I would be running SMART self-tests03:48
twb(And obviously, making sure your backups are up-to-date)03:48
footvillahow do i run smart self test?03:49
twbinstall smartmontools, then smartctl -l and -t IIRC03:49
twbsmartctl -t short /dev/sda, then watch smartctl -l selftest, watch until the self test finishes03:50
twbGood drives will give you an ETA on the self test; crap ones will not report anything about a test until it is either aborted or completes.03:51
twbYou can also do a long test.03:51
footvillathanks brb need to reboot this server03:52
jeeves_mossjust wondering....  Why after an update do all of my Outlook clients not connect to postfix?  I keep getting a dissconnect after EHLO04:05
footvillatwb, i installed smartmontools04:09
twbfootvilla: 13:50 <twb> smartctl -t short /dev/sda, then watch smartctl -l selftest, watch until the self test finishes04:09
footvillahttp://paste.ubuntu.com/963854/04:11
twbfootvilla: so now wait for it04:12
footvillais the command window going to update?04:12
footvillawith results?04:12
jeeves_mosstwb:  how's it going tonight?  it's been a while04:13
twbNot very well as far as connectivity goes, it would seem...04:23
twbfootvilla: if you ran it in watch, it defaults to updating every 2s, as it says in the top-right04:23
footvillahow do i run it in watch\04:24
twb13:50 <twb> smartctl -t short /dev/sda, then watch smartctl -l selftest, watch until the self test finishes04:27
twb"watch smartctl -l selftest"04:27
footvillaERROR: smartctl requires a device name as the final command-line argument.04:28
twb"watch smartctl -l selftest /dev/sda" then04:30
twbPlease exercise some initiative.04:30
=== jtv1 is now known as jtv
=== Gallomimia_ is now known as Gallomimia
shortdudey123hi, i am running ubuntu 10.04 and i am trying to add JAVA_HOME as a permanent environment variable.  I added it to /etc/environment and also adjusted PATH, however only the adjusted PATH is being picked up.  Any ideas?05:01
twbshortdudey123: why are you doing that05:02
shortdudey123i googled it and quite a few places said thats how you do it... but obviously its wrong or i am doing something wrong05:03
twbWhat is your actual goal05:03
twb15:03 <greybot> http://mywiki.wooledge.org/XyProblem -- "I want to do X, but I'm asking how to do Y..."05:03
shortdudey123i am trying to start several services that require the JAVA_HOME var05:03
twbIf you are using the JRE that ships with Ubuntu, you shouldn't need to do that.05:04
shortdudey123where would the JAVA_HOME var be pulled from then?05:06
twbit's set somewhere in the nest of java wrapper scripts05:07
twbI don't know where exactly.05:08
shortdudey123i am using OpenJDK and not the started sun java05:08
shortdudey123if that makes a difference05:08
twbSo you did apt-get install <java app> ?05:09
twbBecause that should Just Work05:09
shortdudey123 sudo apt-get install openjdk-6-jre05:10
shortdudey123and -jdk05:10
shortdudey123this is the specfic error that i get: http://pastebin.com/D03mkige05:11
Smaughey all.  is there any way to restrict the commands a certain user can execute?05:13
twbSmaug: not really05:13
twbSmaug: if they are connecting via SSH keys, you can use a force command05:13
twbSmaug: but e.g. if you give them vi, they can use vi's internal fork+exec to run arbitrary commands.05:14
twbEr, s/vi/vim/05:14
twbshortdudey123: how did hadoop get onto the server?05:14
shortdudey123i installed it05:14
twbshortdudey123: how05:15
shortdudey123a repository from Clourdera05:15
twbWhat you should probably do, then, is contact the clourdera people and report the problem and get them to fix the package05:15
Smaugtwb: okay, ignoring little workarounds like vi (which I guess I can restrict too), what is the force command you speak of?  what do you mean by SSH keys?  the user will connect by SSH, it is a bot actually, all it needs to do are run scripts with different inputs05:15
Smaugmaybe a couple other things but not much05:16
shortdudey123twb: the repo is "http://archive.cloudera.com/debian lucid-cdh3 contrib"05:16
twbSmaug: first go read up on how key-based SSH auth works.  You need to understand that before you understand forced commands.05:16
Smaugright I thought that might be what you meant.  I am familiar with how key-based SSH auth works, though I only used it once, to learn how it works05:17
twbSmaug: the Ubuntu Server Guide might cover it, I don't know offhand.  Check that first, otherwise try the sshd_config, ssh_config and ssh-keygen manpages, and google05:17
twbSmaug: you should be using key-based auth always05:17
Smaugtwb: why? is using pws insecure?05:17
twbhttps://en.wikipedia.org/wiki/Special:Search/Multi-factor_authentication05:18
twb(That is assuming your keys have passphrases, of course.)05:18
Smaugtwb: ah i see.  cool, reading about it now thanks for the direction heading!05:20
twbHere is a worked example:05:20
twbcommand="nice ionice -c 3 rrsync -ro /",no-agent-forwarding,no-port-forwarding,no-X11-forwarding ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAsOX658HKuBNOy7X5UZPY8ogIKYaM1bQ/Nv04oFxyYj9i579fhn+gZ42fFnjMOXiTbSw6h8ZR+BF0smcDum2T6FANAdlQSanFIBMxbgAaYpNx/6qOsT1yECVzqqwEoOVqfGsb8iJwPJMJDGB40mxcvy++ESGLmgo9ivwhxdMbaS8= cyber-hosted-backup05:20
twbYou may wish to combine this with sftponly techniques in sshd_config for that account05:21
Smaugdo you know offhand if it's possible to  create keys for use in android (when I say bot, specifically it will be an android app)?05:22
twbI do not05:23
twbIf that's your target, it may be better to simply expose the commands over an authenticated HTTPS connection with a simple REST app05:24
twbDepends on the nature of the commands and so on05:24
Smaugtwb: that is not a bad idea, i suppose, is there a size limit on urls?05:26
Smaugsome fields may be a bit large, but maybe that's ok05:26
twbI don't know05:26
Smaugok05:26
twbweb apps are for little girls IMO05:26
Smaugall web apps :)05:27
Smaug?05:27
twbYes05:29
twbarpanet for the arpans05:29
shortdudey123twb: i am installing the sun version of java to see if that fixes the problem05:35
twbSigh05:35
shortdudey123ya i know... but i am out of ideas05:36
shortdudey123the sun java fixed the issue05:41
twbYuk05:44
twbThat'll only be because the app and sun jre are broken in the same way, so the broken halves fit together neatly :-/05:44
shortdudey123lol true05:46
shortdudey123twb, thanks for your help!05:55
* SpamapS wades into the forbidden realm of CentOS administration just to remind himself why Ubuntu Server is a bazillion times better06:22
* twb hands SpamapS the hip flask06:23
SpamapSaye, I'll need a straw too06:23
greppynot an IV?06:24
SpamapSgreppy: thats what got me to this place in the first place ;)06:28
twbgreppy: he's worried I doped the lip of the flash06:28
twb*flask06:28
SpamapSmainlining redhat's leftover crack06:28
twbThat or cooties06:28
twbSpamapS: at least centos isn't using systemd yet06:29
=== imbrandon2 is now known as imbrandon
SpamapStwb: yeah, and at least it will take them 3+ years until RHEL7 which will most likely have systemd :-P06:29
SpamapSor "the only daemon you'll ever need"06:29
* SpamapS is surprised they haven't suggested merging apache into it yet06:30
twbFSVO they = lennart06:30
twbI wish someone would just arrange for him to have an "accident" so things can go back to normal06:30
SpamapStwb: careful. You likely have stalker fanbois who might think your serious. ;)06:31
* SpamapS curses his ' key for failing to fire and making him say 'your'06:32
_ruben_your e key would to blame as well then06:33
=== _ruben_ is now known as _ruben
SpamapShelpless victim06:33
SpamapSit's all ''s fault06:33
SpamapSit's mad because it has no way to posess it06:33
SpamapSugh, decisions decisions..06:34
SpamapSshould I migrate off courier onto the sexier new "dovecot" ..06:34
* SpamapS used to think it was fun to run his own IMAP server. Now wants IMAP to die in a fire.06:35
_rubenhehe06:36
greppySpamapS: for what it's worth, dovecot on debian/ubuntu has been way easier for me to deal with than courier was on the same.06:38
SpamapSgreppy: I'm sticking with courier just because I can rsync the config dirs and move forward.06:38
SpamapSbut I hate that. ;)06:39
SpamapSand I have to build courier-imap and courier-authlib because epel doesn't have it06:39
SpamapSwhy oh why do I run a CentOS IMAP server? (so you don't have to.. thats why)06:39
=== smb` is now known as smb
twbSpamapS: why courier and not dovecot07:02
SpamapStwb: rsync /usr/lib/courier-imap/etc newserver:/usr/lib/courier-imap07:03
SpamapSthats about it07:03
SpamapSlaziness07:03
twbinertia?07:03
SpamapSIt only has to support me.. though I am religious about using SSL for IMAP07:03
SpamapSawesome, upstream's courier-imap packages now *force* systemd if you are on anything except suse07:04
SpamapSstupid stupid stupid :-P07:04
rmkUse dovecot instead07:06
twbwtf07:08
twbI didn't think courier was even maintained07:08
SpamapStwb: it is. barely :)07:12
SpamapSand yeah, at this point, with the systemd madness .. no point in even trying to use courier07:12
SpamapSlike.. awesome.. there are currently.. uh.. 0 RHEL or CentOS users with a /bin/systemctl command, and yet all new courier rpms depend on that.07:13
SpamapSWTG courier... one less user to worry about. :)07:13
tdnI maintain servers for a few customers. One of the regular tasks is to install security updates. A problem I face is that some updates require services to be restarted. This is no problem, if it is done outside of business hours. However, I prefer to do the maintenance work in business hours. So I figure there must be a way to install schedule an apt-get dist-upgrade to be run at night, without having to do it interactively? How to do this? I spe07:14
twbOh I just realized I was thinking of cyrus not courier07:14
twbWhichever one provides the "sasl-bin" package so that stupid coworkers set it up as the sasl provider on postfix/dovecot mail servers07:14
SpamapScyrus07:15
twbtdn: you can use invoke-rc.d to prevent automatic service restarts, but this will probably cause more problems than it solves07:15
twbtdn: IME you just say "suck it up, the service will bounce at 10AM, nobody will even notice anyway so STFU"07:15
twbActually you can't use invokerc.d because stupid ubuntu uses stupid upstart which has no equivalent facility07:16
twbinvoke-rc.d only works for scripts that are still managed under /etc/init.d07:16
SpamapStdn: unattended-upgrades might be helpful07:16
SpamapStwb: not true07:16
twbSpamapS: it was true when I last checked as at 10.0407:17
SpamapStwb: invoke-rc.d works for upstart jobs07:17
SpamapSit worked then too07:17
SpamapSthough there were probably a few bugs07:17
SpamapSbecause all upstart jobs from packages will also have a symlink from /etc/init.d/jobname to /lib/init/upstart-job07:17
twbI guess I ran into a bug, then.  I wrote my normal invoke-rc.d which went something like #!/bin/sh \n exit 101, and upstart appeared to completely ignore it07:17
twbargh, sorry07:17
SpamapStwb: and you mean /sbin/policy-rc.d07:17
twbI meant to say *policy-rc.d*07:17
twbinvoke-rc.d works fine but if the postinst calls "restart foo" because its an upstart job, then policy-rc.d was/appeared to be ignored as at 10.0407:18
twbI had to do something hideous like replace initctl with /bin/true during package installation07:18
SpamapStwb: that postinst is *in error*07:21
SpamapStwb: I have fixed maybe 5 of those since 10.0407:22
SpamapStwb: people need to use dh_installinit.. :-/07:22
SpamapSstop inventing crap07:22
twbI may have some details wrong, but it was definitely causing problems and I was definitely very annoyed by it07:22
Jeeves_Morning07:22
Jeeves_Does anyone know how I let Grub skip iscsi-disks while trying to find operatingsystems?07:23
twbJeeves_: grub or os-prober?07:23
twbJeeves_: in the latter case the easiest way is to simply uninstall it :-)07:23
Jeeves_twb: Well, i upgraded a box to precise last night, and it looked into the iscsi disks as well07:24
Jeeves_I think it was while 'Generating grub.cfg'07:24
twbIt'll either be code in os-prober or in /etc/grub/'s run-parts dir07:25
twbI don't know if you can selectively disable os-prober's scans, because I usually just remove it07:25
Jeeves_Nicely undocumented, btw. os-prober07:25
Jeeves_No manual entry for os-prober07:25
twbIIRC you also have to pin it to prevent kernel updates from reinstalling it07:26
twbI think it's basically there to find the dual-boot Windows partition on ubuntu desktops07:27
Jeeves_So don't install it on -server07:28
twbLooks like os-prober's guts live in /usr/lib, so to selectively disable a scan you would dpkg-divert --rename /usr/lib/os-probes/mounted/10linux or whatever07:29
twbIt doesn't mention iscsi by name, so what is probably happening is it is simply iterating over everything in (say) /dev/disks/by-name/* and that happens to include iscsi on your system07:29
twbI'm speculating quite a bit here, though -- you will need to do some tracing yourself07:30
Jeeves_https://bugs.launchpad.net/ubuntu/+source/os-prober/+bug/79754707:33
uvirtbotLaunchpad bug 797547 in os-prober "os-prober interrupts device connection of kvm machines" [Undecided,New]07:33
Jeeves_Nice ..07:33
SpamapSalright, so dovecot is like a bazillion times easier to configure07:33
* SpamapS is now officially a courier hater07:33
Jeeves_:)07:34
lifelessSpamapS: \o/07:34
lifelessSpamapS: dovecot is awesome07:34
twbSpamapS: I haven't ever actually configured dovecot as such ;-)07:36
twbWell, I have a liiiitle bit07:37
twbI had to jump through a hoop to allow a stupid PHP script to talk to the IMAP server without giving it a full LDAP account07:38
twbI wish it didn't have a hard-coded leading dot for subdirs though, because that annoys prayer07:38
twbSpamapS: you probably want to change protocols = imap imaps to just = imaps, and maybe add ssl = required07:39
twbCan't see anything else much interesting in etckeeper logs07:40
=== mrintegrity is now known as Guest87207
=== tobin is now known as Guest16573
tdntwb, I don't think that I can just restart samba with useres logged in without risking data loss :(08:33
twbCIFS clients don't care08:35
twbI'm pretty sure they recover seamlessly08:35
twbObviously you will want to test this, and not just believe some cowboy on IRC08:35
tdntwb, I am pretty sure I have experienced problems with this before. This is the reason why I really want to avoid it.08:46
twbShrug08:46
tdnAnd I cannot prove a negative by testing.08:46
twbSure sure08:47
=== klaas- is now known as klaas
lynxmanmorning o/09:55
=== Amoz_ is now known as Amoz
Jeeves_I really hate how the boot proces of precise-server makes me wait for 'network configuration'10:18
LazikI feel you10:18
Jeeves_'Waiting up to 60 more seconds'10:18
Jeeves_Looks like the person that thought of that 'feature' is unaware of pxe-install environments :)10:19
=== sarthor22 is now known as sarthor
=== huats_ is now known as huats
sarthorAny one configure shorewall and LSM on Ubuntu-server, I have Ubuntu-server 12.04 installed. but do not know how to configure, Shorewall channel says "there is no .deb pkg, and you can Guess why there is only rpm " Any help please.10:58
jpdssarthor: There's a shorewall package in the archive?11:10
jpdssarthor: sudo apt-get install shorewall11:10
sarthorjpds, shorewall already installed. problem with LSM. Link Status Monitor.11:10
=== al-maisan is now known as almaisan-away
sarthorI want to compile lsm for shorewall on ubnutu-sever 12.04, How to do that, I never compiled anything before.11:36
CirbriI got something weird going on with my Exim4 config.12:00
CirbriI have Exim4 from package management -- where the config is all split, it's generated into a single file each time you run the init script -- I've replaced all this with a single, bare-bones config that doesn't do very much; now the parent Exim runs asDebian-exim instead of root. And it doesn't seem able to deliver mail locally.12:01
Cirbri(presumably because it cannot access mailboxes owned by their specific users)12:01
CirbriAnyone have any idea what is going on?12:01
=== shauno_ is now known as shauno
=== almaisan-away is now known as al-maisan
sarthorI want to compile lsm for shorewall on ubnutu-sever 12.04, How to do that, I never compiled anything before.12:12
hallynstgraber: you've looked at ~frankban/lpsetup/lp-lxc-ip/ ?12:15
hallynstgraber: I can't decide whether to just turn the devicens blueprint into a non-discussion one with just a work item to discuss devicens at plumber's12:16
davmor2_hey guys I am sure this is something I'm doing wrong I've followed the serverguide mail is up and running fine etc, I then went to setup roundcube  that displays a login page correctly but when I add the user and pass it says connection to imap server failed, what am I missing (this worked on 10.04)12:27
larswebdavmor2_, Have you checked your firewall?12:32
davmor2_larsweb: this is the first time running a firewall up and running I relied on my router firewall before, I have setup the firewall and as far as I know have opened the ports thunderbird can connect to it and send and receive mail it's just roundcube12:35
larswebI have an ubuntu server with apache 2.2.14 and drupal. When I test with "ab -c 1" it works fine. but it "halts" with "ab -c 2" or larger. How can I debug this problem?12:36
larswebdavmor2_, are roundcube and imap on the same host?12:37
davmor2_larsweb: yeap12:37
larswebdavmor2_, which OS , mail, and imap?12:38
davmor2_ubuntu server 12.04 64bit, imap is handled by dovecot, mail is postfix12:39
larsweband "iptables -L " says?12:39
larswebis there a guide to optimize apache/mysql/ubuntu for fast deliveries?12:46
=== andol_ is now known as andol
stgraberhallyn: I don't think there's much point discussing this at UDS as we won't have Eric or Daniel there, so making the blueprint non-discussion and adding the actual work items after plumbers is probably best.13:09
stgraberhallyn: looking at the branch now13:09
hallynstgraber: so i wonder which state to use if not discussion.  drafting?13:10
stgraberhallyn: I can probably decline it for uds-q, that should make it go away from the schedule13:11
hallynok13:12
stgraberhallyn: done13:12
hallynthanks :)13:12
stgraberhallyn: that branch is interesting, especially the clone call in python, I didn't realize it was actually possible to do it without any C :)13:13
hallynsay13:13
hallynyeah it's cool :)13:13
hallynstgraber: did you say you had blogged on lxc+apparmor?  I thought you did, but I don't see it.13:13
hallyn(I was going to do a post just to explain that we don't have the stackign profile support and what that means, and reference yours first)13:14
stgraberhallyn: didn't have the chance yet, my next blog post is going to be some kind of general overview of LXC in 12.04. So if you want to blog about apparmor specifically, go ahead.13:14
hallyncool.  if i don't get a chance before the flight to uds i'll do it then, but i'm hoping this week.13:14
stgraberI'm planning on releasing my LXC in 12.04 post after the UDS plenary13:15
stgraberhallyn: I'll add an item to the lxc blueprint whiteboard to discuss liblxc, ideally I'd like to use it for an upstream python-lxc, directly calling the C functions when it's easier and offering some nice python interface for the rest.13:16
hallynand a springboard to a bash-free lxc :)13:17
stgraberhallyn: but for that we need to move quite some code around in the C side of things. I noticed that we have a lot of code that's in the tools but really should be in the library13:17
stgraberhallyn: Implementing lxc_stop in the python module took me 5 minutes, but implemeting lxc_start would likely take me hours and lead to a lot of code duplication13:17
hallynand really I don't like the way templating is done13:18
hallynSunday or monday evenign I think we should get together and break the items int he whiteboard into themes,13:18
hallynand decide which themes are most important during q cycle13:18
stgraberhallyn: also, cleaning up liblxc to be easily usable by external tools will make it much easier to write a libvirt-real-lxc driver using it and stop that libvirt non-sense :)13:18
hallynperhaps restructuring lxc code is the thing we shoudl focus on now13:18
hallynheh.    sssssshhhhh, smoser will find you13:18
hallynand of course, adding hooks can be seen as part of restructuring (or as something to better add after restructuring)13:19
stgraberadding hooks should be easy when we're already moving code around between the tools and library13:20
stgraberhallyn, highvoltage: Added my thoughts on the library work and the python bindings to the blueprint13:26
=== patdk-wk_ is now known as patdk-wk
stgraberhallyn: oh, and having a good library will also make unit testing of the code much easier, which is probably something we should be adding to upstream lxc soon too13:29
hallynthat'd be great13:30
hallynfor higher level testing, i do need to sit down with jamespage about hooking my testsuite up to our jenkins instance (or whatever we can)13:30
highvoltagestgraber: awesome.13:31
hallyni suppose maybe i should just set up my own jenkins instance in ec2 to do that13:31
hallynbut i'll wait to talk to jamespage13:31
hallynstgraber: maybe we should flag ("(*)") items that would neatly fall in after a code rewrite13:32
hallyn(like config file inclusion, etc)13:32
stgraberhallyn: sounds good13:32
jamespagehallyn, my bad - I've still not managed to help you do that....13:39
hallynjamespage: at this point we can perhaps best sit and chat next week13:40
jamespagehallyn, agreed - we should also see how this fits into overall QA plans13:41
jamespagethen have some good stuff in pipeline ATM13:41
hallynif you care to look when you have a moment, it's at lp:~serge-hallyn/+junk/lxc-test13:41
hallynis there a qa session where this should be discussed, or is talking over lunch just as well?13:41
jamespagehallyn, I'll try to find out13:48
=== dendro-afk is now known as dendrobates
=== al-maisan is now known as almaisan-away
=== pehden is now known as Pehden|AWAY
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
=== EvilResistance is now known as Resistance
ttxadam_g: is there any OpenStack charm session scheduled for UDS ?15:30
ttxadam_g: was wondering if we could make it a strong alternative to devstack for all-in-one development environments on ubuntu15:30
zulttx: there isnt one afaik15:36
ttxzul: couldn't find it either15:37
=== dendrobates is now known as dendro-afk
=== matsubara is now known as matsubara-lunch
aldo_hi16:01
aldo_can you help me?16:02
aldo_?16:03
Resistance!details16:04
ubottuPlease give us full details. For example: "I have a problem with ..., I'm running Ubuntu version .... When I try to do ..., I get the following output: ..., but I expected it to do ..."16:04
aldo_okok, so, i have 5 pc16:06
aldo_and i use 1 pc for Ubuntu Server 12.0416:06
aldo_how can I do to connect this pc with ubuntu server?16:06
PiciConnect how?16:08
aldo_this pc are connect with one router to internet16:09
aldo_i wourd like share file in server16:10
aldo_and use phpmyadmin in all pc (excuse me for my english)16:11
aldo_(phpmyadmin of Ubuntu Server)16:11
aldo_do you understand?16:11
Resistancealdo_, so...16:16
Resistancebasically you want to be able to share files between your computers through your server...16:17
Resistanceand want to have phpMyAdmin accessible by your other systems from your Ubuntu Server system?16:17
aldo_true16:17
aldo_Work in Team on Web Project is my purpose, than all pc will see the work and the files and phpmyadmin16:21
aldo_than all pc will also see the web page files in php16:23
aldo_I installed php16:23
aldo_can you help me?16:28
=== koolhead17 is now known as koolhead11|afk
=== dendro-afk is now known as dendrobates
sbalneavHello, I'm having a problem setting up a new 12.04 server.  I've got 4 3TB drives, that I'd like to configure as software RAID10.  However, I can't ever seem to set up any partition as bootable.  In 10.04, I could create partitions as "Physical Raid Volume", and set the bootable flag.  Now, the flag stays "off", with the result that the grub install step fails.16:45
sbalneavHas anyone seen anything like this?16:45
stgraberhallyn: right, so jcastro told me I won't have the plenary slot for LXC at UDS (I guess that's the last time I propose a plenary considering how badly the last few went...). So I'll be blogging about it earlier than expected and will keep the talk for some other conference16:47
stgraberhallyn: do you think there's sufficient interest to register a session for demo, q&a, ... or we'll have enough time for that in the lxc session16:48
hallynstgraber: not sure (i should think so) but you do remind me that at the last sprint, the kernel team asked for a lxc session showing more in-depth how it works, what kernel bits are used, etc16:50
hallynso perhaps even 2 such sessions - one high-level for people who want to use it,16:51
hallynand one low-level for kernel team and such.16:51
hallyn(might also be good to have security team there to ask questions pointing toward the no-doubt-present security holes we haven't yet considered)16:52
stgraberhallyn: I don't think we can really justify 3 hours worth of session for LXC but having one informational session and one development session would work. People should be technical enough at UDS that having some kernel questions during the session shouldn't disturb them too much :)16:52
hallyni'd think monday for the high-level one, and maybe wed or fri for the low-level one16:52
hallynstgraber: ok...  perhaps i'll ask apw if he still wants one and we can make it private16:53
hallynstgraber: oh, you were tinking informational blueprint16:53
hallyni was thinking evening sessions16:53
hallynsounds good, do as you planned :)16:54
stgraberhallyn: right, I was thinking about registering a session and having it put on the main schedule16:54
apwhallyn, i am interested in knowing whats coming at me down the pipe, whatever works for those of you throwing it :)16:54
stgraberk, doing so now16:54
hallynapw: ok, i do give sort of (my view of) a general roadmap to 14.04 wrt to lxc and kernel features in my next blog post.  when i post it...16:55
hallynbut i suspect getting together and starting with an lxc-create+lxc-start at a laptop, you all would think up some good questions16:55
=== dendrobates is now known as dendro-afk
=== Lcawte is now known as Lcawte|Away
stgraberhallyn: https://blueprints.launchpad.net/ubuntu/+spec/foundations-q-containers-demo17:03
=== dendro-afk is now known as dendrobates
stgraberjjohansen: would be great if you could attend for any security question ^17:05
wiherekhi17:20
wihereki have a vps with only SolusVM and ssh access (no cpanel / directadmin)17:20
wiherekI'd like to use google apps for mail. where do I set the MX nameservers?17:21
hallynstgraber: cool, thanks17:22
zulhallyn: so...do you want to merge libvirt?17:30
jcastrojamespage: ping17:31
=== dendrobates is now known as dendro-afk
hallynzul: is that a trick question?17:33
hallynit's on my list...  but happy to take it off my list if you want to do it17:34
jjohansenstgraber: ack, marked myself as essential17:43
stgraberjjohansen: thanks17:44
jamespagejcastro: pong17:44
jcastrojamespage: check your voicemail. :)17:45
jamespagejcastro: just picked it up17:46
=== Nafallo_ is now known as Nafallo
=== lifeless_ is now known as lifeless
=== wiherek_DC is now known as wiherek
adam_gttx: i was hoping to cover the openstack juju charms during the openstack next steps session18:23
adam_gttx: i can propose something dedicated to those charms, but IMHO the session at last UDS didn't really accomplish much other than adding a bunch of wishlist work items that weren't really tied to the ubuntu release.  the essential charm stuff should align with openstack next steps nicely.18:25
adam_gttx: that said, both smoser and i have thought a lot about how to use juju to bootstrap openstack dev envs. but mostly multi-node setups, not all-in-one. i dont see much value in Juju doing that, it would mostly be a charm that just runs devstack?18:26
koolhead17ttx, but devstack uses source pkgs i suppose18:30
adam_gkoolhead17: but hacking on source installed from debian packaging is a drag. we had toyed with the idea of extending the charms to optionally install from upstream repositories18:32
koolhead17adam_g, well i will not think of writing charm 4 something which  whose changes everyday/hour/minute :)18:33
koolhead17*source18:33
koolhead17i see few launchpad bugs/questions asked on mailing list because of temporary commits and devstack failing18:36
=== Resistance is now known as EvilResistance
insulinahello, I am runing a ubuntu server with geoserver, and I realy need a good performance, all docs says that sun-jdk delvery better results than the openjdk, so I am thinking in trying oracle jre 7, does anyone have experience with this that like to share ? thanks18:53
=== steve_h is now known as hughessd
roaksoaxsmoser: http://wiki.flimzy.com/index.php/Install_Debian_on_USB19:01
mgwhi, how can I remove a spurious entry from debconf-get-selections19:10
mgw?19:10
mgwI accidentally added a line that does not correspond to any package19:10
mgwI know it's probably harmless, but it's annoying all the same19:11
JonEdneyIs there a way to install Apache 2.2.22 and PHP 5.3.10 on 11.10?  My host isn't able to accomadate 12.04 on my VPS yet.19:12
=== Lcawte|Away is now known as Lcawte
PiciJonEdney: Is there something that you need that isn't in 2.2.20 or 5.3.6 ?19:22
JonEdneyNo, I don't really run much, just assume they would be more stable.19:23
PiciJonEdney: I personally wouldn't worry about it.  Security patches are applied even if the version number doesn't seem to indicate that.19:24
Califhi, I have a server that won't accept a dhcp address19:28
Califactually let me try just one thing...19:28
JonEdneyPici, that is good to know thanks.19:28
Califbrb19:29
stgraberhallyn: not sure if you noticed but your blog post is appearing as just plain text, none of the URLs in it are actual links19:31
hallynstgraber: hm, thanks - i'll have to look at it (later)19:33
mgwCalif: do you have access to the dhcp server?19:38
stgraberhallyn: just noticed we have a usernamespace session on the schedule for uds-q. Will that work without Eric present?20:06
erichammondstgraber: What is a usernamespace? When I glanced at it, it looked like kernel stuff.20:08
stgrabererichammond: it's kernel stuff :)20:08
hallynstgraber: i would try to get eric on the phone, but i would do the main presentation.  (it's an informational one)20:09
stgrabererichammond: basically the most important missing namespace for containers, that allows the userid range in a container to be different from that of the outside20:09
hallynstgraber: i'm not yet decided as to wehther to cancel it20:09
stgrabererichammond: so uid 0 in a container != uid 0 outside of it20:09
stgraberhallyn: yep, if you can have him on the phone, that'd be fine indeed20:09
stgraberhallyn: I'm doing a cleanup pass through the sessions as I've noticed there was a few duplicates and sessions that really shouldn't be there, so was wondering if user namespace was one of them. Good to hear it's probably going to happen20:10
erichammondstgraber: If it is specific to running VMs with Ubuntu, then I probably have little contribute.  My interests are focused on running Ubuntu servers on Amazon EC2.  I have no interest in running my own hardware any more.20:11
stgrabererichammond: it's specific to LXC containers, so won't affect VMs20:15
* erichammond looks up LXC.20:16
erichammondCool! but I'm still unlikely to have much to contribute, so don't schedule around me.20:16
rocketsIs there any decent documentation for configuring KVM on Ubuntu 12.04 Server? I've found a lot of documentation for KVM but it's all for 10.04 and older, and it doesn't seem to work.20:18
rocketsI found one document for ubuntu 12.04 beta 1, but that didn't work either20:18
terwineHi! I am having some trouble with SAMBA/AD shares since I upgraded from 10.04 to 12.04. Is there anybody familiar with this process who could provide some insight?20:20
hallynstgraber: erichammond: fwiw, there is potential for (mapping-free) user namespaces to be useful for protecting the host from qemu drivers20:25
hallynanyway the user ns session would be informational20:26
Psi-Jackheh20:44
Psi-Jackrockets: KVM is pretty much very easy. You install kvm, you use it. If you want management tools for it, libvirt, virt-manager, and virt-viewer are useful for desktop use tools.20:45
Psi-Jacklibvirt itself is useful also in a pacemaker-managed cluster of kvm-based hypervisor server clusters.20:45
Psi-Jackterwine: I don't totally use 12.04 /yet/, but I do have some 12.04 server VM's I run. What about Samba/AD are you having issues with?20:46
terwinePsi-Jack: I have a SAMBA share that I use to push nightly backups into. The share is hosted on my ubuntu server. The hosts that connect to it authenticate(or at least they used to) with their AD credentials20:48
Psi-JackI see.. And what are you using for AD integration?20:48
terwineAlso, I use a windows to unix user mapping for authentication.20:49
terwinekerberos5, and winbind20:49
Psi-JackI see.. That's a painful combination. ;)20:49
terwineindeed. Took me two days to get it working on 10.04 when I set it up20:50
Psi-JackCentrify, is one method I have heard works very well with AD integration, and doesn't have the same flaws winbind does.20:50
=== nonotza_ is now known as nonotza
terwineI have heard of this. Do you think it is worth a shot?20:50
smosertyhicks, http://paste.ubuntu.com/965549/20:50
smoseryou seen that ?20:50
Psi-Jackterwine: I don't know yet. I've mentioned to my boss I'd be investigating into what is needed to centralize out authentication against their PITA ADS server. ;)   Ended up getting a Windows 2008R2 ISO from them with one of the company VLK keys for it to experiment with in non-production environments. ;)20:51
tyhickssmoser: Yeah. For now, do a `find ~/ -inum 1279352`, verify that it is an empty file and then delete it.20:52
smoser(i usually just delete it)20:52
terwineAh. I liked the fact that kerberos and winbind are free, and once I had it working before it was great for many months.20:52
tyhickssmoser: I'm working on handling the error path better that causes that empty file to be created.20:52
smoserbut its annoying, and often i am made aware of it because something gets input/output errors when writing a file.20:52
smoseri've not lost any data that i know of to it, so i'm not terribly upset.20:53
tyhickssmoser: Is it usually the same file (or the same app) that causes it?20:53
smoserand happy that you are aware and working on it. thats good enough for me.20:53
smoseri dont knwo... recently its been offlineimap that i've been seeing it with i think.20:53
smoserwhich is wrigint maildir style files20:54
tyhicksok20:54
smoserso its probably an order of magnitude the highest file writing thing i do20:54
smoseras in "lots of little files"20:54
rocketsPsi-Jack, the issue is i need to set up bridging. NAT isn't going to do it for me20:58
Psi-Jackrockets: That's easy.20:58
rocketsPsi-Jack, yes, easy when you know how to do it :)20:59
Psi-JackHeh20:59
Psi-Jackrockets: Well, pastebin your /etc/network/interfaces, and I'll transform it for you.20:59
rocketslolol20:59
rocketshmm20:59
rocketsis that all it really takes?20:59
rocketshold on20:59
Psi-JackAnd having the bride-utils installed, yes.20:59
rocketsserver is reinstalling, should be done in like ~5 mins20:59
Psi-Jackbridge-utils even!20:59
pabelangerSo I have a few bugs related to openstack packaging, any suggestion on how I can get them merged faster?  Is it better to try and commit them into bzr (pull request) or debdiff?21:00
pabelangerThe work is done, just not merged21:00
Psi-Jackrockets: Sure I'll still be here. :)21:00
Psi-Jackrockets: Just make sure when you're ready, say my name as normal, letting me know, paying attention to multiple channels. ;)21:01
rocketsthanks Psi-Jack21:01
tyhicksterwine: I recently set up Samba/AD on 12.04 for testing a security update. I took some rough notes I could forward onto you.21:01
terwineThat would be much appreciated. I'm also downloading the free version of centrify, but would love to stick with open source21:01
terwinealso, thatnks psi-jack21:02
tyhicksterwine: pm me your email address21:02
terwinethanks*21:02
Psi-Jacktyhicks: Did you use Centrify?21:03
tyhicksPsi-Jack: No, winbind21:03
* Psi-Jack shivers.21:03
terwineI got stuck configuring PAM the last time, then to bind windows users to the unix user21:05
=== matsubara-lunch is now known as matsubara
smoserroaksoax, search for maas at https://docs.google.com/a/canonical.com/?tab=oo&pli=1#home21:07
rocketsPsi-Jack, bah I gotta go. Thanks for your offer of help. I'm sure I'll either figure it out, or wait until I can find you again :-D21:11
Psi-Jackheh21:14
Patrickdkhheh21:14
=== viezerd- is now known as viezerd
=== dendro-afk is now known as dendrobates
wiherekIf I don't have access to something like directadmin, cpanel or linode panel etc., I can only create a name - ip relation for my vps by assigning the specific hostname to it, right?21:37
wiherek(I dont want to set up my own dns, just use my hosting providers dns)21:39
=== pehden is now known as pehden|away
=== Neal|ZNC is now known as Neal_
adam_groaksoax: if you care to help get this into -proposed, i'd appreciate. :)   theres a debdiff attached to bug and a branch linked. i seem not to have sufficient upload rights to do it myself. https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/99074222:42
adam_gsmoser: ^22:42
uvirtbotLaunchpad bug 990742 in openldap "slapd fails to upgrade: requires libsasl2-2 (>= 2.1.24) installed" [High,Fix released]22:42
roaksoaxadam_g: looking into it22:45
roaksoaxadam_g: forgot to update the maintainer :) http://paste.ubuntu.com/965751/22:46
roaksoaxadam_g: uploaded22:51
adam_groaksoax: dahh thanks22:51
=== Lcawte is now known as Lcawte|Away
=== pehden|away is now known as pehden
=== Arc_ is now known as a5m0
wiherekhow can I check which processes start at system boot?23:47
thomasI'm in a bit of a bind and I'm not even sure if this is were to ask but it's a start. I got a server with over 2k emails accounts (I'm trying to figure out how to find out when users last popped email from me so I can remove ones that are >6months old anyone got any advice? or point me in the right direction?23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!