[00:01] <hallyn> stgraber: i don't remember whether overlayfs based ephemeral contaienrs are actually working or not
[00:01] <hallyn> with apparmor anyway
[00:02] <hallyn> post looks great :)
[01:00] <hattorihanzo> so i need some advice
[01:00] <hattorihanzo> i have a custom c app server that crashes when its memcache connection to another box drops
[01:01] <hattorihanzo> im thinking of a simple proxy to just hold the connection on the localhost, and forward to the other box
[01:01] <hattorihanzo> and reconnect if it fails
[01:01] <hattorihanzo> is there anything like this before I go an write my own
[01:44] <Canadian1296> I'm setting up a VPN server (L2TP authenticating with IPSec) for my iPod Touch, and I have it basically set up, but it fails. auth.log: http://paste.ubuntu.com/968185/
[01:51] <Canadian1296> I'm setting up a VPN server (L2TP authenticating with IPSec) for my iPod Touch, and I have it basically set up, but it fails. auth.log: http://paste.ubuntu.com/968185/ (Sorry if this is a double-post, the first isn't showing up in my client)
[01:59] <Canadian1296>  /exit
[01:59] <Canadian1296> oops
[03:22] <stgraber> hallyn: just noticed a bug in lxc-ubuntu, my multi-arch trick hardcodes ":amd64" for most of the packages I'm installing instead of using ":${hostarch}" for all of them...
[03:22] <stgraber> hallyn: apparently everyone who tried it were on an amd64 system...
[03:23] <stgraber> hallyn: I'm pushing the fix to quantal now, but this should go as an SRU once the curent one (-3ubuntu54) hits -updates
[07:06] <rcsheets> in a vnc session using gnome (gnome.session, not ubuntu.session), my power menu is empty. is that normal?
[08:33] <intore> hi, am configuring pam_mount on my client ubuntu to mount home directories on the client from the server samba-ldap. I fear to make mistakes. Someone knows this subject and could follow me please?
[08:56] <sarthor> Hi, In ubuntu-server 11.04, I used to write my dns forwarders in /etc/bind/named.conf.options, and that use to work fine for me. Now in the 12.04 where ia m writing entry in /etc/resolv.conf "nameserver 127.0.0.1", So whith the next reboot, computer wash that entry and then my name.conf.option is useless, How to solve this problem, where to put the forwarders and how to tell to /etc/resolv.conf not to delete the manual entries.
[09:12] <remix_tj> sarthor: does the forwarders remain into the bind configuration?
[09:13] <sarthor> remix_tj, yes
[09:13] <remix_tj> so the problem is only resolv.conf that gets overwrited... are you using static ip'
[09:13] <remix_tj> -?
[09:14] <sarthor> yes. here is my network/interfaces file. I written dns later.. before it was not here, when i was asking.. http://paste.ubuntu.com/968661/
[09:15] <sarthor> now this machine is resolving, but i wan to use as route, and that clients can resolve via thish computer.
[09:15] <remix_tj> sarthor: i think the problem is dns-nameserver voice in interfaces overwrites resolv.conf
[09:16] <remix_tj> you can remove the dns-nameservers voice, so the voices in resolv.conf does not gets overwritten
[09:16] <sarthor> How?
[09:16] <sarthor> remix_tj, I am not expert
[09:16] <remix_tj> sarthor: you can disable that voice editing the file and putting a # before each dns-nameserver voice
[09:17] <remix_tj> then you can insert the nameserver you want in the resolv.conf file
[09:17] <remix_tj> then try rebooting, it should work
[09:17] <sarthor> which file to edit and where to put "#" sign?
[09:18] <remix_tj> /etc/network/interfaces ?
[09:18] <sarthor> that interfaces file was like this http://paste.ubuntu.com/968672/ and then the /etc/resolv.conf was empty
[09:19] <remix_tj> yeah that's correct
[09:19] <remix_tj> you can do things:
[09:19] <remix_tj> 1) return with the interfaces file that you posted 3 rows ago
[09:20] <remix_tj> 2) insert into that file the voice dns.nameservers 127.0.0.1
[09:20] <remix_tj> sorry
[09:20] <remix_tj> dns-nameservers 127.0.0.1
[09:20] <remix_tj> so the /etc/resolv.conf file gets populated with the correct nameserver
[09:21] <sarthor> http://paste.ubuntu.com/968679/ remix_tj  In this case my /etc/resolv.conf remain empty nameserver 127.0.0.1 use to del automatically
[09:21] <remix_tj> ok sarthor
[09:21] <remix_tj> so insert
[09:21] <remix_tj> dns-nameservers 127.0.0.1
[09:21] <remix_tj> in that file on the correct place
[09:21] <remix_tj> then you'll get the correct content for /etc/resolv.conf
[09:23] <sarthor> remix_tj, http://paste.ubuntu.com/968684/ is good , this /etc/resolv.conf
[09:24] <remix_tj> no! dns-nameservers is an option for /etc/network/interfaces file!
[09:25] <sarthor> remix_tj, yes. i got now. I use to think sometime. but you guded me very soon
[13:22] <koolhead17> hi all
[13:22] <SpamapS> koolhead17: howdy!
[13:22] <SpamapS> koolhead17: you bound for the US yet?
[13:22] <koolhead17> SpamapS, am good. thanks :)
[13:23] <koolhead17> yes am in HK waiting for my flight
[13:23] <koolhead17> SpamapS, good morning to you sir. :)
[13:24] <SpamapS> koolhead17: interesting place to stop over. :)
[13:24]  * SpamapS reviews the latest updates to the SOLR charm
[13:24] <koolhead17> SpamapS, waoo. SOLR charm. :)
[13:25]  * koolhead17 has owncloud upgrade pending 
[13:29] <SpamapS> yeah solr should be interesting
[13:31] <airtonix> solr is kind of a pain in the rear to setup
[13:32] <koolhead17> airtonix, thats why we will have charm to use :)
[13:33] <SpamapS> airtonix: yeah, in theory, it will only be a pain for users who resist juju. ;)
[13:33] <koolhead17> SpamapS, :P
[13:34] <koolhead17> i see lots of Openstack+juju relative conversation for coming days :)
[13:36] <koolhead17> hola lynxman
[13:37] <airtonix> i don't really understand juju... does it spool up a new ec2 instance just for solr in this particular context of our conversation?
[13:40] <koolhead17> airtonix, juju does much more stuff. check juju.ubuntu.com it has detailed info
[13:45] <SpamapS> airtonix: It does have a tight coupling w/ provisioning right now yes. juju wants an infinite-ish cloud like EC2 to scale out your architecture. :) But it turns out its also pretty awesome for spinning up nodes on a more limited basis w/ MaaS or a private openstack cloud.
[13:46] <airtonix> i already use ec2 for our business
[13:46] <SpamapS> airtonix: one of the reasons it wants to spin up its own instances is that having a clean instance makes writing charms a lot easier
[13:46] <airtonix> i understand
[13:47] <airtonix> i'd like to use the concept, but it requires a restructure of how our code works
[13:47] <SpamapS> airtonix: right, its abstracting away the cloud API to allow cross-cloud operation
[13:48] <blendedbychris> any pacemaker / stonithd users around?
[13:48] <SpamapS> airtonix: you wouldn't be the first person to ask for a way to just use juju w/ some other provisioning system
[13:49] <blendedbychris> I dont have a kvm device for stonith to run power off on but i have an api from my provider… was trying to figure out how to make a script to run that instead
[13:52] <SpamapS> blendedbychris: I believe you'd want to write a stonith plugin
[13:53] <blendedbychris> SpamapS: oh?
[13:53] <blendedbychris> that does make sense heh
[13:57] <blendedbychris> SpamapS: are you aware of documentation to write this?
[13:59] <blendedbychris> ooh found /usr/lib/stonith/plugins/external a bunch of scripts
[13:59] <blendedbychris> :)
[14:25] <koolhead17> SpamapS, see you soon
[14:25]  * koolhead17 leaves for his flight :)
[14:34] <blendedbychris> hey SpamapS quick file organization question if you don't mind … where would you store something like http://sldn.softlayer.com/article/Perl for use in one of those stonith scripts?
[14:34] <blendedbychris> the question is where do you store libraries like that
[14:34] <blendedbychris> on the filesystem normally
[14:41] <SpamapS> blendedbychris: no clue, its been *years* since I played with stonith
[14:41] <SpamapS> blendedbychris: usually something like /usr/lib/programname/libexec/foo.so
[14:42] <SpamapS> blendedbychris: but really, most of those types of systems will have some helper build tools for things like that
[14:43] <blendedbychris> SpamapS: what do you mean?
[14:43] <blendedbychris> helper build tools..
[14:44] <blendedbychris> i'm having to write a stonith script with this http://sldn.softlayer.com/article/Getting-Started
[14:44] <blendedbychris> so i was like well, step one, where to put the librar
[15:38] <hallyn> stgraber: ok, thanks.  I need to sit down with paper and pen sunday night or monday and make a list of the things to queue up in SRU.  bc -54 is going to be 4 more days (i think) before clearing, and dont' want to serialize them all :)
[15:41] <hallyn> stgraber: can you add a 'needssru' tag to that bug?
[15:41] <hallyn> gotta go - ttyl
[16:56] <clerk> I didnt have a storage device available during the ubuntu server 12.04 installation. Can I add a 500gb drive as the /srv data storage device after the install ?
[16:57] <qman__> yes
[16:58] <clerk> Thats good to know thanks
[17:00] <clerk> Is there any documentation that could guide me through that process ?
[17:00] <clerk> I suppose I could add gparted to the server partition?
[17:01] <qman__> make partitions with fdisk or parted, format with mkfs, add to /etc/fstab
[17:01] <qman__> the manuals for each should contain all the info you need
[17:02] <clerk> are man available from the server os ?
[17:02] <qman__> yes
[17:02] <pmp6nl> Hello all, is it safe to have the owner of files be www-data for a server?
[17:02] <qman__> pmp6nl, generally no
[17:03] <pmp6nl> qman__, ok, I have set wordpress files to that otherwise it wont let me upgrade modules via the web interface
[17:04] <qman__> well, wordpress generally isn't safe either
[17:04] <pmp6nl> qman__, oh?
[17:04] <qman__> pmp6nl, http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=wordpress
[17:05] <pmp6nl> qman__, good to know.thnaks
[17:05] <qman__> there are ways to mitigate the risk but it's just not written very securely
[17:05] <qman__> you're taking a chance with it
[17:05] <qman__> plan to get hacked
[17:06] <pmp6nl> qman__, ok, thnaks
[18:18] <pmp6nl> If I create a new user should they automatically have access via sftp or do I need to do something special?
[18:27] <greppy> pmp6nl: by default, they should have access, unless you have put some restrictions in /etc/ssh/sshd_config
[18:28] <pmp6nl> greppy, what would I look for in /etc/ssh/sshd_config that may cause issues?
[18:30] <qman__> the default configuration allows it
[18:30] <greppy> pmp6nl: look in the man page for the AllowUsers, DenyUsers
[18:30] <qman__> you must have specifically changed the settings with some match rules and permissions
[18:30] <qman__> if you can't SFTP with a default config, chances are the user's shell is not a valid shell
[18:31] <qman__> if you want them to be SFTP only, change their shell to /usr/sbin/nologin
[18:31] <qman__>  /bin/false will not work
[18:32] <pmp6nl> greppy, qman__ ok. Thanks
[19:25] <clerk> I have a 500 gb drive that is 2 partitions ,one fat32 one ntfs. Each partition, has files that I would like to save . Essentially I would like to just add the disk as a /srv device. Can I do this?
[19:26] <clerk> Must I format to add a storaGE DEVICE ?
[19:27] <clerk> Must a storage device be formatted before it can be added as a /srv device I guess would be my question...
[19:34] <jkyle> anyone successfully creating 802.3ad bonds on 3.x kernels? e.g. 12.04
[20:40] <chunk_> I've followed the instructions from https://wiki.ubuntu.com/ServerTeam/MAAS/Juju evrythinks working fine into I deploy the mysql server it install fine but won't startup using ubuntu 12.04 server
[20:42] <guntbert> chunk_: no experience with juju here - but what does mysql say when you try to start it?
[20:43] <chunk_> 2012-05-05 21:00:36,318 unit:mysql/2: hook.output ERROR:     except subprocess.CalledProcessError: NameError: name 'subprocess' is not defined
[20:46] <guntbert> chunk_: sorry, thats definitely beyond my depth - you might want to send that (complete) log to a pastebin though for the next one who tries to help
[20:55] <virusuy> gents
[21:09] <guntbert> chunk_: I just had a look at the web site you mentioned: did you try to deploy (for instance) wordpress? (without mysql) - just to see if the deployment process works
[21:11] <RoyK> I just installed sympa from the repo, and it grabbed sendmail on its way - would it be hard to make it use postfix instead?
[21:13] <guntbert> RoyK: you could try to install postfix and then remove sendmail - or you could have a look at the dependencies
[21:13] <RoyK> I'd guess installing postfix will remove sendmail
[21:14] <stgraber> RoyK: sudo apt-get install sympa postfix
[21:14] <stgraber> that works fine here, so it doesn't explicitly depend on sendmail
[21:14] <stgraber> it only depends on default-mta | mail-transport-agent,
[21:14] <stgraber> which is provided by all mtas providing the sendmail command (including postfix)
[21:15] <chunk_> yeah wordpress works
[21:15] <wlan3> Hi, I'd like to know how to have a bittorrent tracker up and running at my server.
[21:15] <RoyK> stgraber: thanks
[21:26] <chunk_> http://paste.ubuntu.com/970119/
[21:28] <RoyK> !ask
[21:29] <Psi-Jack> Man alive!
[21:30] <Psi-Jack> These OpenLDAP AND KerberosLDAP docs on ubuntu's wiki REALLY needs some work.
[21:30] <Psi-Jack> heh
[21:30] <RoyK> yeah
[21:30] <Psi-Jack> It took forever to piecemeal it all together to get it all right.
[22:59] <wlan3> !patience
[23:15] <Psi-Jack> Curious.
[23:15] <Psi-Jack> When you have a few PPA's, is there any safe preparations to do to help insure a dist-upgrade is successful?
[23:19] <Psi-Jack> Like, the only PPA I have on my storage servers (currently running 11.10 with the intention to upgrade to 12.04), is the ZFS PPAs because I use ZFS.
[23:21] <cwillu> Psi-Jack, "don't use dist-upgrade"
[23:21] <cwillu> do-release-upgrade handles quirks that would/could otherwise break a dist-upgrade
[23:21] <Psi-Jack> Right.
[23:21] <Psi-Jack> That's what I was doing.
[23:21] <Psi-Jack> It just disables the PPA's it seems.
[23:23] <Psi-Jack> Meaning, I'll have to manually update those after the system is already upgraded, to manually re-enable them and adjust them as needed before rebooting.
[23:23] <cwillu> I believe it also yes
[23:23] <cwillu> er, just yes
[23:23] <Psi-Jack> Okay, well, here goes. ;)
[23:23] <cwillu> I mean, if you have backups, it's pretty easy to recover from just about any screw up
[23:23] <Psi-Jack> Thankfully, I trust my ZFS stuff. ;)
[23:23] <cwillu> and if you don't have backups, you have no business running a server
[23:23] <cwillu> zfs is not a backup
[23:23] <cwillu> (no, really)
[23:24] <Psi-Jack> And yes. I have backups. heh
[23:24] <cwillu> if you can't take it with you to mexico while the server is still running, it's not a backup :p
[23:25] <Psi-Jack> I actually got two little ReadyNAS boxes with 2TB Raid1's for the very purpose of backups.
[23:38] <Psi-Jack> So far, so good. It's updating the replacement packages now. :)
[23:39] <Psi-Jack> Storage servers basically just has JEOS with some extras added for network file shares.
[23:40] <Psi-Jack> Heh. it's actually my desktop I'm most worried about. LOL
[23:59] <Psi-Jack> Sweet!
[23:59] <Psi-Jack> Flawless upgrade.