/srv/irclogs.ubuntu.com/2012/07/30/#ubuntu-server.txt

koolhead17hi all00:25
halvors1I experiencing a issue here. When trying to setup IPv6 dhcp ("iface eth0 inet6 dhcp"). It doesn't work, and my mtu drops to 576.00:29
uvirtbotNew bug: #993249 in activemq (universe) "[SRU] activemq fails to start on Ubuntu 12.04" [High,Fix released] https://launchpad.net/bugs/99324900:32
halvors1Anyone knows why?00:32
halvors1Anyone knows howto setup dhcp client to request IPv6 Prefix Delegation in /etc/network/interfaces?01:19
=== cpg is now known as cpg|away
=== cpg|away is now known as cpg
=== cpg is now known as cpg|away
KatronixHi all, can someone point me in the right direction as to how to do subdomains in bind? I can't seem to locate it03:05
franklinuxhello my friens, i hava a problem!, my iptables dont functions, My browser says "connecting ..." and then get "the connection has been reset"03:12
Katronixfranklinux I don't think anyone is actually here :(03:14
franklinuxI have a squid server, the network has configured the proxy works, but when I create iptables rules to enable direct ips and open ports, the browser says "connecting ..." load and at the end says the connection has been reset03:14
bitfuryhey guys, I just bought a 4 port PCI RS232 card for an ubuntu server but I'm not getting any connectivity using minicom03:15
franklinuxKatronix, you can help me???03:16
nibalizerI'm here03:16
KatronixI might be able to, put your iptables on to pastbin03:17
Katronixnibalizer do you know anything about manually adding a subdomain to bind?03:17
bitfurypastebin: http://pastebin.com/nVH6Mh1Y03:17
franklinuxok03:17
nibalizerKatronix: I can go look at my bind config if you want03:17
bitfuryI have an onboard serial port which works fine (ttyS0)03:17
nibalizerthis should be absurdly well documented online03:17
Katronixnibalizer if you know where that would be fine, I find a ton of stuff about adding a domain, but not subdomains03:18
nibalizerare you trying to delegate to another server?03:18
Katronixnibalizer no same server03:18
nibalizerhttp://www.zytrax.com/books/dns/ch9/subdomain.html03:18
nibalizerdoes that help?03:18
mardraumyes, $ORIGIN is what you need03:19
mardraumalso, probably #bind (and some google-fu as hinted)03:19
franklinuxKatronix, http://pastebin.com/aVqaQW3t03:20
Katronixnibalizer so basically the name of the subdomain followed by IN A and the IP?03:20
franklinuxthere are my iptables03:20
franklinuxKatronix, there are my iptables: http://pastebin.com/aVqaQW3t03:21
Katronixfranklinux is this your result of using iptables -L ?03:21
nibalizerbitfury: is therer linux support for your pci card?03:22
nibalizerdo you have whatever driver you need for it loaded?03:22
franklinuxKatronix, there are the results with iptables -L03:22
franklinuxKatronix,  http://pastebin.com/ACYmGDMG03:22
franklinuxKatronix, For example, I try to open a site that is under https:// and not let me, I say connecting .... load and at the end says "the connection has been reset"03:24
bitfurynibalizer: I guess it's not compatible, bought this card: http://www.geeks.com/details.asp?invtid=1001-0168-000A03:24
bitfury:(03:24
Katronixfranklinux does it have an SSL on it?03:25
bitfuryI blindly bought it..03:25
franklinuxKatronix,03:28
franklinuxKatronix, no, that page is external, but I try to open or under enable iptables and I can not, I get in the browser is "connecting ..." for a while, and finally says "the connection has been reset"03:28
Katronixyou might need to tell it what to do with traffic on the web ports03:29
franklinuxKatronix, How can you to go it?03:32
Katronixfranklinux honestly I don't worry about it much as I'm behind a hardware firewall03:33
Katronixnibalizer do you know of something I can use on the server to tell me how much bandwidth I've used? though I doubt I would ever come close to the 10 tb they give me, would be nice to keep track of it03:34
nibalizerifconfig shows you03:36
nibalizerRX bytes:607371618079 (607.3 GB)  TX bytes:366623558692 (366.6 GB)03:36
Katronixnibalizer would it know when to reset?03:37
nibalizeri'm not sure how smart it is about that kind of stuff03:37
Katronixk03:37
nibalizerif you could reset it, a cron to run it montly would be cool03:37
Katronixyeah03:37
nibalizeror simply a cron to take the numbers and write to a file03:37
nibalizermaybe a little script to do some math03:37
Katronixtrue03:38
nibalizeror maybe this is the wrong tool for the job03:38
Katronixit would depend on if ifconfig is all time, or just since last boot lol03:38
nibalizeriptraf is cool too03:41
=== n0ts_off is now known as n0ts
Katronixwell I seemed to have solved the subdomain issue, now just need to figure out getting apache to work with it.. but for now sleep04:02
Katronixnibalizer thanks for the help04:03
uvirtbotNew bug: #1006447 in spamassassin (main) "backport _SCORE(pad)_ fix (upstream #6651)" [Low,Expired] https://launchpad.net/bugs/100644704:26
esuavehow come when i recompile apache with a newer version of openssl installed it keeps showing the old version is installed? can anyone help me out please?04:58
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== cpg|away is now known as cpg
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== Lcawte|Away is now known as Lcawte
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== mcclurmc is now known as mcclurmc_away
=== zyga is now known as zyga-afk
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== railsraider_ is now known as railsraider
RoyKanyone here that knows if iscsiadm and friends support using an iscsi hba and actually offloading the iscsi parts to it, rather than just using it for transport10:26
RoyK?10:26
Pupeno_WIs there some way to specify what to do on reload in upstart? I want to send HUP to a specific process.10:26
=== bicranial_ is now known as bicranial
atul_ola zul10:42
=== atul_ is now known as koolhead11
=== cpg is now known as cpg|away
=== n0ts is now known as n0ts_off
=== mcclurmc_away is now known as mcclurmc
=== zyga-afk is now known as zyga
=== ninjak_ is now known as ninjak
=== matsubara is now known as matsubara-lunch
koolhead17hola zul12:23
zulhi12:23
koolhead17how is your knee sir ?12:24
zulkoolhead17: fine thanks for asking12:25
koolhead17adam_g, are you awake?12:26
ironmHello. I am not sure if it is a bug in ubuntu-server or just wrong settings on my fresh ubuntu-server 12.04 box. I use encryption for the boot drive and also an additional encrypted volume due to the entries in /etc/crypttab and /etc/fstab (see. http://paste.debian.net/181178/ ). When I open the luks volume manually with "tcryptsetup luksOpen /dev/sdb secret" he passphrase input is "hidden". During the boot the passphrase input for th12:38
ironme additional volume is "echoed" to the display what I don't want.12:38
ironmis it a know bug or do I need to modify the setting? Thank you in advance for any hints.12:39
=== matsubara-lunch is now known as matsubara
uvirtbotNew bug: #1030860 in maas (main) "DNS is not enabled." [Undecided,New] https://launchpad.net/bugs/103086013:25
blizzkidHi all, does anyone have a (link to a) good description of how the mechanism works that mounts a USB-key in /media/[USB-key-ID]? I can't seem to find any *decent* documentation about it.13:37
lordievaderblizzkid: Not entirely sure, but I think udev deals with those kind of things, perhaps that is a start.13:39
blizzkidlordievader: nope, that was my initial thought.13:40
lordievaderblizzkid: It also does not give you a hint to something that udev calls to do it for him?13:41
blizzkidlordievader: nope. AFAIK it used to be that way, but seems things have changed. Nothing in udev points me even slightly in the right direction.13:42
halvorsSeems like opendchub is no longer avaliable in the Ubuntu repositories. Is there an alternative DC Hub i can use?13:53
=== n0ts_off is now known as n0ts
glosoliIs there any easy way of having mail server, some kind of all in one DEB Package from APT ?13:59
ironmglosoli, have you checked postfix?14:03
_rubeninstall "Mail server" using tasksel?14:03
glosoliironm: too complated to configure14:04
glosoli_ruben: hmm will it configure everything ?14:04
glosolimost of the things I meant14:04
_rubenglosoli: define "everything"14:04
glosolilike configure needed parts, and I will be left of only setting domains and then creating addresses and emaisl14:05
_rubenglosoli: i'd expect so, never tried it myself tho14:05
ironmglosoli, the default mail server of ubuntu is postfix14:06
glosoliironm: which requires a lot of configuring by hand14:07
ironmglosoli, most of configuration questions have to be answered during the installation14:07
ironmglosoli, you have to know how to use text editor however .. and understand what you are doing14:08
glosoliironm: what about smth like cyrus ?14:11
ironmmore complicated than postfix ... even it is not real smtp-server14:11
ScottKsudo apt-get install dovecot-postfix amavisd-new-postfix will get you 99% of the way there, however amavisd-new-postfix has a signficant bug, so if you're on 12.04, want the version from precise-proposed.14:11
glosoliScottK:  well I had hard time with dovecot before...14:12
ScottKdovecot-postfix will do a lot of the configuring for you.14:13
ironmglosoli, that is true .. dovecot is a bit hard to configure (due to the understanding what is there going on ... )14:13
ScottKAnd ironm is right, you'll need to understand what's going on.  Those packages are just to get you started with a generally working configuration.14:15
ironmScottK, I guess that amavisd is a antivirus filter software .. right?14:15
ScottKThat pulls in, in addition to itself, clamav and spamassassin and together they do A/V and spam detection.14:16
ironmthank you ScottK14:16
ironmI don't use any (as I use linux everywhere on my desktops)14:17
glosoliok thanks..14:17
glosoliironm: in btw, what's wrong with Cyrus14:20
glosoli ?14:20
ironmglosoli, it is not up to date anymore14:20
ironmin my opinion ...14:21
ironmglosoli, you have two main choices 1. postfix and 2. sendmail. all other stuff is nor really that what I want.14:24
glosoliironm:  Dunno, I had so much time wasting tryting to configure either, documentations are not up to date14:24
glosolitutorials too14:24
ironmand sendmail is more complicated to configure14:25
ironmglosoli, yes .. the documentation is a bottleneck14:25
glosoliironm: Can you point me to any good resources for Postfix… ?14:26
ironmglosoli, http://www.postfix.org/documentation.html14:27
ironmhttp://www.postfix.org/docs.html14:27
ScottKThe Ubuntu Server Guide has good step by step instructions.14:28
glosoliSo basically to setup something like Roundcube for working and etc, I will need Postfix, RoundCube itself, and some web interface would be cool for creating emails14:29
glosoliwhat could you recommend14:29
glosoli ?14:29
ironmglosoli, in my opinion web-interface for email-client is not recommended due to security reasons. I use icedove myself (with dovecot/postfix)14:33
mardraumroundcube is php software, so you'll need postfix, dovecot (or similar), apache (or similar) and some php provider14:33
glosolimardraum:  I have seen it's possible to set up it iwth Cyrus hm14:33
mardraumwhy would you14:34
glosoliThings like dovecot drives me nuts.14:34
mardraumthings like?14:34
ironmglosoli, you are not alone ;) ... <glosoli> Things like dovecot drives me nuts.14:34
glosolimardraum: like being some kidn of package meant for linux hackers to configure, spending days by days for daily user tryed to get it working withou ability to find any proper tutorial or documentation14:35
mardraumyou were probably trying to setup some dumb design with vhosts and mysql and some random library a dude with a blog told you that you totally needed14:36
glosolimardraum:  might be, the official documentations are even more mess14:37
mardraumthe dovecot config file is entirely readable14:37
glosolireadable for Linux hackers as I mentioned above14:37
mardraumlinux hackers?14:37
glosolithe people who are a lot of into console14:38
mardraumif you find dovecot hard, you may be in ther wrong channel, just sayin.14:38
mardraumthe*14:39
glosoliah ok, I forgot that' sorry  if some documentation is too hard to follow, it's likely user who is stupid :)14:40
glosoliAnyway thanks for help :)14:40
ironmglosoli, you have two IRC channels: #dovecot and #postfix14:42
glosoliironm: Tryed out they "awesome" support already14:42
glosoli:)14:42
pmatulisglosoli: i'm not sure what you meant by 'daily user' but setting up a mail infrastructure for the first time will require a fair amount of study and perseverance15:08
=== n0ts is now known as n0ts_off
glosolipmatulis:  yeah, I understand that  : >15:11
uvirtbotNew bug: #1030911 in horizon (main) "traceback after install: No module named glanceclient.common" [High,New] https://launchpad.net/bugs/103091115:16
pmatulisglosoli: it's a strange paradox that the technology that an end-user first latches onto (easy from their pov) is a technology that is actually one of the most challenging from an admin's pov15:19
pmatulis(technology being 'email' in this case)15:19
uvirtbotNew bug: #1030928 in horizon (main) "AttributeError: 'module' object has no attribute 'urls'" [High,New] https://launchpad.net/bugs/103092815:31
Kingsydoes anyone know of a working ppa that has the latest version of xdebug in it ?15:42
Davieysmoser: uho.. am i the new jamespage?15:50
Davieydaviey@smithers:~$ ssh-import-lp-id davewalker15:50
DavieyWARNING: Invalid keys at [https://launchpad.net/~davewalker/+sshkeys]15:50
Daviey(lucid)15:51
jamespageDaviey, lol15:51
smoserDaviey, you'll need to file a bug on windows 8, which i presume is your new OS.15:51
smoseror, lucid sucks. we released a new LTS. you should use it.15:51
Davieysmoser: No, it's the new OSX.15:51
Davieysmoser: I demand te full 5 year support.15:52
Daviey(only updated this box from hardy a few weeks ago :)15:52
Davieysmoser: it's one of the build boxes for mythbuntu... and smithers doesn't look happy.. http://smithers.mythbuntu.org/15:52
smoserDaviey, we can SRU that to lucid if you'd like.15:54
smoserand i will again state, that i found the checking of keys to be stupid and did not write it.15:54
Davieysmoser: but what is my issue?!!??!!?!15:57
tgm4883Daviey, you have invalid keys15:57
tgm4883;)15:57
smoserDaviey, its either the blank lines or the ^M15:58
Davieybah15:58
smoseror the fact that you have a public key whose private key is widely distributed in there.15:58
smoseryeah, i remember ...P4WX3f0bEmkkluw== well.15:59
smoserok, i just wanted to see if i could see you jump. thats not the case (that i know of).15:59
RoyKDaviey: perl -pe 's/\r//g' -i somefile # :-þ15:59
jdstrandadam_g: hi! do have any idea why I might be seeing this in /var/log/keystone/keystone.log (set logging to DEBUG) when using euca-describe-instances:16:02
jdstrand(eventlet.wsgi.server): 2012-07-30 10:59:16,602 DEBUG 127.0.0.1 - - [30/Jul/2012 10:59:16] "POST /v2.0/ec2tokens HTTP/1.1" 404 274 0.00821416:02
zuljamespage: what do i need to do to the MIR to get it on your list?16:02
jamespagezul, if its on this list http://reports.qa.ubuntu.com/reports/ubuntu-server/release-bugs.html16:03
jamespageI have one eye on it16:03
zuljamespage: ok how do i get it on yruo list16:03
jamespagezul, do you want me to pickup the openvswitch MIR?16:04
zuljamespage:  sure if you want16:04
jamespagezul, well I'm not sure I 'want' but I 'can'16:04
jamespage:-)16:04
zuljamespage: sure you can :)16:04
jamespagelol16:04
jamespagezul, it looks like its be assigned to jdstrand anyway - what needs doing to it?16:05
* jamespage looks16:05
zuljamespage: looks like security review16:05
jamespagezul, agreed16:05
jdstrandzul, jamespage: it's in progress. if I can get openstack working on quantal I might be able to get somewhere16:05
jdstrandadam_g: keystone service-list and keystone endpoint-list look ok16:07
jdstrandadam_g: ah! I think I found it. nm16:08
Davieyjdstrand: I really think openvswitch should be considered for MIR outside of openstack.16:08
DavieyIt has real life use cases not directly associated with openstack.16:08
ScottK"Has real life uses" isn't a criteria for main.16:09
jdstrandDaviey: that's fine, but quantum wants it and that is presumably the main use case (at least as described to me)16:09
jdstrand(both openvswitch and quantum are in progress)16:09
DavieyScottK: Please feel free to inspect each of my sentences, and misinterpret them as you see fit.16:13
ScottKThanks.16:13
jdstrandok, I think I finally have my openstack issues worked out16:17
* jdstrand crosses fingers16:17
=== mcclurmc is now known as mcclurmc_away
=== Aaton_off is now known as Aaton
glosolihow can I get the date of package installation17:07
glosoli ?17:07
RoyKglosoli: I don't think that's recorded, but if you haven't done an "apt-get clean", the packages should be in /var/spool/cache/apt/archives, and the file date there should say when the package was downloaded, which may be the same as when it was installed17:14
glosolieh17:15
glosoliit's a pity then17:15
RoyKheh - running apt-get clean regularly?17:15
glosolidunno I don't remember might have run some weeks ago17:16
glosoli:D17:16
glosoliRoyK: ah wrong dir it was /var/cache/apt/archives17:19
=== dendro-afk is now known as dendrobates
RoyKglosoli: ah - sorry17:21
smoserstgraber, around ?17:34
stgrabersmoser: yep17:34
smoseri'm having an issue with reoslvconf wrt overlayroot17:35
smoser/etc/resolv.conf is not getting updated17:35
smoserstgraber, could you take a look at ubuntu@ec2-107-22-60-153.compute-1.amazonaws.com and see if anything sticks out to you as broken ?17:37
smoser(you should be able to get in with stgraber@castiana)17:37
stgrabersmoser: so resolvconf is working properly but nothing has populated resolvconf... (/run/resolvconf/interface/ is empty)17:38
stgraberchecking if I can figure out why17:38
smoserso without the overlayroot, it works fine.17:39
stgrabersmoser: I think I see the problem, you're mounting the overlay after /run was mounted, it should be the other way around17:41
smoserwell that is what i thought was the issue to, but i dont know why that would be.17:41
smoserthe overlay is the root filesystem17:41
smoser(set up by initramfs)17:41
stgraberaccording to /proc/mounts, / was mounted after /run, so if the resolvconf/interface entry was added to /run before / was mounted over it, it'd be hidden, explaining the current behaviour17:42
RoyKsounds like insanity to me...17:43
stgrabersmoser: how likely am I to loose access to the instance if I kill and respawn dhclient?17:44
smoserno. magically not. and you will get the update.17:44
smoser(i tried that)17:44
smoseri think you'r eright aobut /run.17:44
=== shadeslayer is now known as shadeslayer_
=== shadeslayer_ is now known as shadeslayer
smoseri'll have to muck around in the initramfs17:45
stgrabersmoser: what we do in casper is setup /root as overlayfs, then use "mount --move /run/ /root/run" before the pivot_root + init call17:45
smoserwhich is what the initramfs ususally does17:46
smoserstgraber, thanks for pointing me in the right direction. i can likely figure it out.17:47
stgrabersmoser: np. let me know if I was wrong and it needs more investigation on resolvconf's side17:48
zastaphI installed xorg, and ran sudo xstart .. does that mean x server is running?17:52
zastaphbecause an app that depends on it says it isnt17:53
* genii-around ponders why this app which needs X is running on a server17:55
zastaphhttp://cutycapt.sourceforge.net/17:57
zastaph"You cannot use CutyCapt without an X server"17:57
zastaphdoes it even make sense to use x server on ubuntu server ?17:58
genii-aroundzastaph: Not usually, since the idea is it is supposed to be a box dedicated to to doing something like feeding out pages or files or data...so the client is where the gui is. And then you ssh in and administer, or use web-based control like ebox18:03
genii-aroundIn thin-client server scenario different of course18:03
zastaphwill try from desktop then18:04
smoserstgraber, your argument was that /proc/mounts eclared that /run was mounted before /, right?18:14
smoserbut that is "normal"18:15
stgrabersmoser: hmm, indeed, I guess /proc/mounts won't change ordering after the --move call...18:17
smoserright.18:17
smoserso i dont think that that was the issue.18:18
smoserits possible (but hard to tell) that /run is not really a tmpfs, but it is surely writable18:18
stgrabersmoser: can you pastebin /proc/<pid of dhclient>/mountinfo?18:20
stgraberthat should make it possible to figure out the stacking of the various fs and know exactly what /run is supposed to be at that point18:20
smoserhttp://paste.ubuntu.com/1119965/18:21
skritehey all.18:24
stgraberhmm, that looks good18:24
moxie_manI have a dd-wrt router and a linux mint server which has a heavy network load. I want to dynamically throttle back the linux mint server /only/ when other computers on the network experience low throughput.18:24
stgrabersmoser: can you get me access to that instance again?18:24
smoserwell, that one is dead :)18:25
smoserbut to another, sure.18:25
moxie_manI am wondering if there is a direction you could point me in18:25
skriteis it possible, with one sql-server, to run cluster tables (ndb) and another type of database engine (innodb or myisam) in the same sql server? i only need to cluster often-used tables18:25
smoserstgraber, ubuntu@ec2-50-16-102-212.compute-1.amazonaws.com18:26
stgrabersmoser: missing my ssh key apparently?18:29
smosertry again18:30
moxie_manthe keyword I was looking for was "prioritize"18:31
stgrabersmoser: ok, worked now18:31
stgrabersmoser: hmm, what happened to /var/log/upstart in there? :)18:32
smoserwhat do you mean?18:32
smoserits a new instance.18:32
stgraberyeah, I guess I'm too used to systems producing some kind of job output, so finding a system with missing or empty /var/log/upstart just looks weird18:33
jdstrandaha!18:33
jdstrandDaviey, adam_g: so, if I do 'keystone ec2-credentials-create' and then 'keystone ec2-credentials-list', I can see my new credential. if I reboot then do 'keystone ec2-credentials-list', then it is gone18:34
smoserstgraber, what is it that actually /etc/resolv.conf . is it /etc/resolvconf/update.d/libc ?18:37
* jdstrand files a bug18:37
Davieyjdstrand: we don't do any reboot testing really :/18:38
zulbut we do test :)18:38
stgrabersmoser: yeah, in theory you dhclient should trigger /etc/dhcp/dhclient-enter-hooks.d/resolvconf that creates a file in /run/resolvconf/interface and triggers resolvconf which will then call /etc/resolvconf/update.d/libc to generate /run/resolvconf/resolv.conf18:39
jdstrandwell, at least I know what the problem is18:40
stgrabersmoser: in a regular instance, do you usually get dhclient to log to syslog? (just noticed it didn't in the overlay one)18:40
jdstrandnow I can work around it be creating them each time18:40
adam_gjdstrand: that may not be a bug, ec2-credentials may be meant to be epehemeral18:41
adam_gim not sure, tbh18:41
jdstrandadam_g: they persisted on precise18:41
* jdstrand just verified that18:41
smoserstgraber, checking18:42
jdstrandbut, I'll see if I can find a config option18:42
smoserstgraber, http://paste.ubuntu.com/1120012/18:43
smoserthats a fresh pure instance18:44
smoser/var/log/syslog18:44
stgraberok, so dhclient always fails to log to syslog in the cloud instances, not specific to overlay18:44
jdstrandthis kinda implies they are persistent as well: "Migration of users, projects (aka tenants), roles and EC2 credentials is supported for the Essex release of Nova. To migrate your auth data from Nova, use the following steps:..."18:44
=== cpg|away is now known as cpg
adam_gjdstrand: what is your ec2 driver set to in keystone.conf?18:46
jdstrandkeystone.contrib.ec2.backends.kvs.Ec218:46
jdstrand(whatever the default is)18:46
adam_gjdstrand: set that to ...sql.Ec218:46
jdstrand(this is not an upgrade-- I abandoned that idea and this is a fresh nistall with just 12.10 packages)18:46
adam_gjdstrand: kvs = in-memory key value store, totally lost on restart, not sure why it exists18:47
jdstrandadam_g: oh wow-- or that it is the default! :)18:47
adam_gjdstrand: yup18:48
jdstrandadam_g: that was it exactly. on reboot, they are still there18:48
adam_gjdstrand: i believe we carried a patch on precise to set all backends to sql by default. we'll do the same this time around, im sure18:49
Davieyadam_g: that was the only option until you added persistence, no?18:49
adam_gDaviey: for the service catalog, yea. well, the other option for persistence is a flat config file18:49
jdstrandadam_g: fyi, bug 1031012. I updated with your find18:49
uvirtbotLaunchpad bug 1031012 in keystone "ec2-credentials are not persistent across reboots" [High,Triaged] https://launchpad.net/bugs/103101218:49
adam_gjdstrand: thanks18:50
jdstrandadam_g: thank you! :)18:50
stgrabersmoser: can you do a test boot with the file I put in /etc/dhcp/dhclient-enter-hooks.d/run? I used /tmp for the debug data but I'm not sure it's going to be writable whenever dhclient will get spawned but at the same time I don't quite trust /run at that point either ;)18:50
uvirtbotNew bug: #1031012 in keystone (main) "ec2-credentials are not persistent across reboots" [High,In progress] https://launchpad.net/bugs/103101218:51
smoserstgraber, you can do whatever you want there.18:52
smoserif you want something to stick across boot, edit it in /media/root-ro, use 'sudo overlayroot-chroot vi /etc/dhcp/dhclient-enter-hooks.d/run'18:53
jdstrandadam_g: not sure what you think about this, but I set:18:53
jdstrand[logger_root]18:53
jdstrandlevel=DEBUG18:53
jdstrandin logging.conf18:53
smoser(i can do it if you'd like, but feel free to own that instance. i'm debugging on another)18:53
jdstrandadam_g: I found it hard to debug keystone with WARNING18:53
jdstrandadam_g: 2 cents18:53
adam_gjdstrand: agreed18:53
stgrabersmoser: ok, will do that then18:53
stgrabersmoser: abusing the kernel log buffer as a way of getting reliable storage ;)18:56
smoserstgraber, well, hmm..18:57
smosermaybe this is not unrelated.18:57
smoserbut in the initramfs ii'm wiring to /dev/.initramfs/overlayroot.txt18:57
smoseror something18:57
smoserie, using the devtmpfs mount for that.18:57
stgrabersmoser: based on my debug, it looks like dhclient is ran in initramfs before anything is really mounted?18:58
stgrabersmoser: http://paste.ubuntu.com/1120037/18:58
smoserlsinitramfs /boot/initrd.img-3.5.0-6-generic | grep dh18:58
smoserseems to imply otherwise18:58
smoserstgraber, ^19:04
stgraberyeah, not sure what's going on, but the /proc/mounts is definitely completely wrong at that point in the boot sequence19:06
stgraberadding some more debug in there, that kernel log is starting to get quite long ;)19:08
smoserstgraber, resolvconf.conf (from upstart) is expected to run before anything else, right?19:12
smoseri logged command and parameters for the files shown http://paste.ubuntu.com/1120065/19:12
smoserand thats the order they're getting called in.19:13
stgrabersmoser: in most cases it'll be run before anything else, but it shouldn't be a requirement or that'd cause a race19:13
stgraberthough it indeed looks like that's the reason of the failure...19:14
stgraberresolvconf: Error: /run/resolvconf/interface either does not exist or is not a directory19:15
stgrabersmoser: ^19:15
uvirtbotNew bug: #1031021 in nova (main) "nova x509-create-cert times out" [Undecided,New] https://launchpad.net/bugs/103102119:16
smoserstgraber, so 'start on mounted MOUNTPOINT=/run' (/etc/init/resolvconf.conf) must not block19:18
stgrabersmoser: yeah, that's it... adding "mkdir -p /run/resolvconf/interface" to /etc/dhcp/dhclient-enter-hooks.d/resolvconf fixes it. Not sure it's the right fix though19:19
smoserso that job doesn't block19:19
smoserand /etc/init/networking.conf is then running19:19
smoserbefore /etc/init/resolvconf.conf ever ran19:20
r3dLunchb0xhow can I setup out put of someones home directory when they login or make it part of their prompt?19:20
stgrabersmoser: only the start on *ing (starting, stopping, ...) are blocking and they're only blocking for something that depend on them, which isn't the case of networking.conf or network-interface.conf19:21
smoserum..19:21
smoserman mounted19:21
smoserthat should block19:21
smoserso maybe mountall is confused by the overlayfs mounts.19:22
stgraberthat or it's not networking.conf bringing the interface up19:23
stgraber"block" in upstart term means blocking the emission of the started event, so it's only blocking stuff that depends on it19:23
stgrabernetwork-interface.conf only depends on the kernel19:23
=== LordOfTime is now known as Guest41633
stgraberhmm, that's a bit wrong actually, network-interface.conf can only be triggered once upstart-udev-bridge is started19:26
stgraberand upstart-udev-bridge is "start on starting udev" and udev is "start on virtual-filesystems"19:26
smoserstgraber, well, networking.conf is start on local-filesystems19:27
smoserwhich, per man page, cannot occur until after virtual filesystems19:27
smoserwhich shouldn't occur until after MOUNTED=/run19:27
smoser(or i thought that is what was guaranteeing this)19:27
off_omhi19:28
* stgraber tests to know which of network-interface.conf or networking.conf is configuring eth0 (or if it makes any difference)19:28
off_omanyone  configured successfully with ddcliente joker.com? ubuntuserver 12.0419:29
off_om*19:29
smoserstgraber, i think you're right. its probably network-interface.conf that is bringing it up.19:34
stgrabersmoser: apparently. I disabled /etc/init/networking.conf and I'm still getting the same behaviour19:35
smoser/sbin/resolvconf is just assuming that IFACE_DIR="${RUN_DIR}/interface" exists.19:36
smoserand the only thing thats going to make that is /etc/init/resolvconf.conf19:36
stgrabersmoser: can you diff "mountall -v" between an overlay and standard instance?19:38
esuaveso how can i create an image of a running ubuntu server VM? i wanna create a USB restore install19:39
smoseryou mean just run ?19:39
smoserstgraber, you just want hte output of those ?19:39
esuavebasically just wanna have a custom build of ubuntu to deploy to any server19:39
smoseror you want output of mountall --debug19:39
stgrabersmoser: comparing the output of "mountall -v" should let you know what's considered local, virtual, ... by mountall19:40
=== smw_ is now known as smw_work
smoserstgraber, normal: http://paste.ubuntu.com/1120127/  overlayroot: http://paste.ubuntu.com/1120128/19:47
uvirtbotNew bug: #1031043 in lxc (universe) "-t ubuntu -- -h still creates container" [Undecided,New] https://launchpad.net/bugs/103104319:56
smoserstgraber, i'm pretty sure its just a race condition.20:08
smoserhere is mountall --debug output from overlay: http://paste.ubuntu.com/1120170/ , normal: /tmp/mountall-debug-normal.txt20:09
smoserthe idfference is that in the overlayroot case, / is mounted readwrite (i wasn't the overlayfs mount read-only).20:09
smoserand that is causing a different path through different events, exposing the resolvconf race condition.20:10
stgraberhallyn: pushed a simple bugfix to ubuntu:lxc (wrong echo call in lxc-start-ephemeral). Won't upload for something that trivial though.20:17
=== cpg is now known as cpg|away
=== cpg|away is now known as cpg
=== cpg is now known as cpg|away
uvirtbotNew bug: #1031063 in nova (main) "libvirt_type=qemu is not honored" [Undecided,New] https://launchpad.net/bugs/103106320:21
stgrabersmoser: sounds like a bug that we should be discussing with slangasek at least. One idea would be to change network-interface.conf to include "and mounted MOUNTPOINT=/run" and then change resolvconf to include "or starting network-interface"20:22
smoserbug 103106520:22
uvirtbotLaunchpad bug 1031065 in resolvconf "/sbin/resolvconf -a depends on /run/resolvconf/interface but it may not exist" [Undecided,New] https://launchpad.net/bugs/103106520:22
stgraberwhich should ensure that resolvconf is always started before an interface is brought up and should also make sure we won't start resolvconf before /run is mounted20:22
Davieyjdstrand: 1031063.. what CPU do you have?20:25
jdstrandkvm_intel20:25
jdstrandI am trying with nested=0 now20:25
Davieyjdstrand: Well, we nest by default.. and that is what it is trying20:26
jdstrandyes, but I tried to override that20:27
jdstrandlibvirt_type=qemu is what I thought that would do20:27
Davieyjdstrand: i /think/ qemu==kvm20:28
Davieyif you don't have kvm kernel support, then it should fallback to qemu.20:29
jdstrandwell, I couldn't load kvm_intel in the guest at all, even if the host has nested=1. this might end up being a won't fix or a kernel bug20:29
jdstrand'vmx' would show up in the virsh capabilities of my openstack guest20:30
jdstrandso it was probably fooled20:30
jdstrandeven though I couldn't load kvm_intel in there20:30
Davieyjdstrand: what is the host CPU model?20:30
jdstrandi720:30
Davieyjdstrand: ahhhh.. i bet you don't have the kernel extras?20:30
jdstrandkernel extras?20:31
Davieyjdstrand:  in the instance, are you runnig -virtual or -generic?20:31
Davieyprecise or quantal? ;)20:31
jdstrandoh, probably generic20:32
jdstrandyes20:32
jdstrand-generic20:32
Davieygah, dammit.. the virtual kernel didn't include the kvm kernel support, and needed the -virtual-extra's package20:32
jdstrandprecise host (-generic), quantal openstack guest (-generic) trying to start an instance20:33
jdstrandDaviey: should my openstack server being running -virtual?20:34
jdstrand(ie, it is a guest)20:34
Davieyno20:35
Davieywell, if it is.. you need the extras package to modprobe kv,20:36
Davieykvm*20:36
jdstrandDaviey: I'm confused-- my host is precise. it is running an openstack quantal server20:45
jdstrandDaviey: I installed in the openstack quantal server linux-virtual and linux-image-extra-virtual, but it doesn't seem to do anything20:46
jdstrandie, I only have /lib/modules/3.5.0-6-generic, nothing else20:47
jdstrandif I try to remove -generic, it tries to remove everything20:47
Davieyjdstrand: no.. sorry, perhaps i wasn't clear20:47
jdstrandI cannot load the kvm_intel module in the openstack quantal server, even though my host used nested=120:47
Daviey-virtual is a minimal kernel with less support.20:47
Daviey-generic is ideal20:47
jdstrandok20:48
Davieyjdstrand: So, your host machine is precise, and you are running quantal in kvm, outside of openstack.20:48
jdstrandso reloading with nested=0 and then booting the openstack quantal server resulted in it not working either20:48
DavieyIn that VM, you are running nova?20:48
albert23with generic you need -extra too? (linux-image-extra-3.5.0-6-generic: /lib/modules/3.5.0-6-generic/kernel/arch/x86/kvm/kvm-intel.ko)20:49
jdstrandDaviey: yes. virtualized openstack, as per https://wiki.ubuntu.com/SecurityTeam/TestingOpenStack20:49
jdstrandalbert23: I have that file, I can't load it20:49
jdstrandFATAL: Error inserting kvm_intel (/lib/modules/3.5.0-6-generic/kernel/arch/x86/kvm/kvm-intel.ko): Input/output error20:50
Davieyno, -extra is JUST for virtual to give you a fuller kernel20:50
jdstrandI see20:50
jdstrandlet me double chek my virtualized precise openstack could launch an instance20:51
Davieyjdstrand: in precise, $ grep -i ^KVM_NESTED /etc/default/qemu-kvm20:52
DavieyKVM_NESTED=" nested=1"20:52
Davieyright?20:52
jdstrandyes, my precise openstack launches it fine20:53
* jdstrand checks20:53
jdstrandDaviey: yes (this is a default install)20:54
Davieyhmm20:54
jdstrandI think it might be a kernel issue20:54
DavieySo to clarify, precise host.. launching precise openstack, it works as expected... launching quantal openstack, it fails?20:54
jdstrandthe precise openstack can load the kvm_intel module fine20:54
jdstrandDaviey: yes. <myhost> -> <precise openstack> -> instance = instance runs20:55
jdstrandDaviey: yes. <myhost> -> <quantal openstack> -> instance = instance fails20:55
jdstrands/yes.//20:55
jdstrand<precise openstack> has kvm_intel loaded20:56
jdstrand<quantal openstack> does not20:56
Davieyjdstrand: suck.  This isn't something that is currently tested...20:56
jdstrand(and I can't)20:56
jdstrandthis sounds like maybe hallyn's area-- I know he tests qemu quite a bit and thought it was with nested virtualization20:56
DavieySo this isn't really an openstack issue as such.. (although, ungracefully failing is).. but a direct kvm/kernel issue?20:56
jdstrandDaviey: that is what I am thinking now20:57
jdstrandI thought 'qemu' meant, you know qemu20:57
jdstrand:)20:57
jdstrandDaviey: but there is likely another bug there where openstack doesn't fallback to qemu when the cpu doesn't support it, but I understand that is not a priority20:58
Davieyjdstrand: Well, you can blame me for exposing it by default.. https://launchpad.net/ubuntu/+source/qemu-kvm/1.0+noroms-0ubuntu7 ;)20:58
jdstrandDaviey: it works beautifully on precise :)20:59
Davieyjdstrand: well, so.. lets look at this another way.. If i start a quantal kvm instance on precise, i should be able to modprobe kvm.. but currently failing?20:59
aarcaneI'm trying to decide between ssmtp and nullmailer for my LAMP server, and I remember the primary difference is that one works in offline mode by storing messages to send later, and the other works only when the target SMTP server is readily available, but I don't remember which is which.  Does anyone know?21:00
jdstrandDaviey: kvm*_intel*. kvm loaded fine21:00
Davieyjdstrand: right21:01
Davieyjdstrand: amd64 all the way, right?21:03
jdstrandthe host and guest are both amd64 installs, yes21:04
Davieyhuh21:05
Davieyubuntu@server-378:~$ sudo apt-get install qemu-kvm ; sudo modprobe kvm-intel21:05
DavieyFATAL: Module kvm_intel not found.21:05
Davieyconfirmed.21:05
jdstrandDaviey: that is a different error than I get21:06
jdstrandhere it finds the module21:06
jdstrandbut can't load it21:06
Davieyjdstrand: Ah, IS pulled the rug out from under me..21:06
Davieythis is an AMD server.21:07
jdstrandDaviey: fyi, bug #103109021:07
uvirtbotLaunchpad bug 1031090 in linux "kvm_intel not loadable in a quantal guest" [Undecided,New] https://launchpad.net/bugs/103109021:07
Davieyjdstrand: apt-get install linux-image , in guest.. doesn't give anything?21:08
jdstrandDaviey: I didn't have linux-image installed. I just installed it and it worked fine21:09
jdstrand(ie package install, not kvm_intel loading, which still fails)21:10
jdstranddmesg is silent on the issue21:10
r3dLunchb0xtrying to setup quotas for user home directories on 12.04, but not working.21:15
Davieyjdstrand: confimed, it's an intel only issue21:15
jdstrandDaviey: I guess it is good that it is confirmed, unfortunately for me, the combination of the openstack and the kernel bug means I can't launch instances :\21:18
jdstrandDaviey: how important is nested virtualization to you guys?21:18
* jdstrand is trying to figure out if he is on his own here...21:19
Davieyjdstrand: well, it really makes life good.21:19
Davieybut not vital21:19
Davieyjdstrand: I've been using AMD as of late, so not noticed it.21:19
* jdstrand nods21:19
Davieycanonistack region 2 seems to be AMD, region 1 Intel21:19
jdstrandDaviey: yeah, reloading kvm_intel nested=0 and booting my quantal openstack vm, I see no kvm module loaded, but <domain type="kvm">21:25
=== rockets is now known as zastern
Davieyjdstrand: okay, well.. i'm not sure if it's an openstack bug, or a libvirt bug then.21:29
Davieyhmm21:29
jdstrandI agree (I don't know either)21:29
Davieywith nested on the host OFF.. it should fall back from kvm to qemu under the scenes.. does it not?21:29
Davieyie, it should start an unaccelerated guest.21:30
jdstrandthat is what I am testing and didn't think it did-- but I might have messed something up. hold on21:30
Davieys/guest/instance21:30
jdstrandok <domain type="kvm"> is confirmed21:31
jdstrandbut no guest. let me see why21:31
jdstrand2012-07-30 16:31:13 TRACE nova.compute.manager [instance: f90f97cc-3d75-48d0-9eab-b2aa2aae8ee2] libvirtError: internal error no supported architecture for os type 'hvm'21:32
jdstrandDaviey: it is not falling back21:32
Daviey*sigh*, the kernel team don't have a git bisect script.. :/21:32
Davieyjdstrand: Well, the libvirt xml generation was re-written for quantal.. seems this *could* be a regression.21:33
Davieyor.. still, a libvirt one.21:33
Davieyor even a qemu one21:33
DavieyOr i have NFI.21:33
Daviey:)21:34
jdstrandshoot, it could be qemu-kvm too-- depending on how it was invoked21:34
jdstrandheh21:34
jdstrandgood times21:34
Davieytraditionally, we stopped the lbvirt xml generation not include the line.. allowing libvirt to fill it in, depending on what it felt best suited.21:35
jdstrandlibvirtd.log is not super helpful. it clearly wants pm-utils21:36
jdstrandoh, wait21:36
jdstrandnm21:37
jdstrand<type>hvm</type> is all it has21:39
jdstrandlet's see if I can force it21:39
=== cpg|away is now known as cpg
jdstrandDaviey: I think it might be a libvirt thing21:53
jdstrandDaviey: if I copy/paste the cml from nova-compute.log I can shove it into precise's libvirt no problem21:54
jdstrandDaviey: xml21:54
jdstrandDaviey: however, if I take the same xml, I get an error on quantal's libvirt21:55
jdstrandDaviey: if I change this line:21:55
jdstrand<type>hvm</type>21:55
jdstrandto be:21:55
jdstrand<type arch='x86_64'>hvm</type>21:55
jdstrandDaviey: then it works on quantal21:55
=== Lcawte is now known as Lcawte|Away
uvirtbotNew bug: #1031065 in cloud-init (main) "/sbin/resolvconf -a depends on /run/resolvconf/interface but it may not exist" [Undecided,New] https://launchpad.net/bugs/103106522:18
Davieyjdstrand: good find!22:19
=== dendrobates is now known as dendro-afk
JonEdneyAnyone familiar with a way to uninstall sendmail?  I installed dovecot and postfix, and sendmail is causing a problem, but apt-get remove isn't working, says no sendmail package.23:18
lamontpostfix delivers a binary called "sendmail", as required by policy.  It also forces the removal of sendmail (via Conflicts: sendmail)23:23
JonEdneyI see, I kinda figured it was something attached somewhere; I had to stop the service 'sendmail' to continue troubleshooting.23:24
ScottKJonEdney: sudo apt-get remove postfix will actually remove it.23:26
JonEdneyScottK - I think I need postfix; I'm learning working on my VPS.23:29
ScottKSo if you think you don't need sendmail, you're probably not looking at the problem correctly.23:30
ScottKI'd suggest "sendmail causing problems" was a symptom, not a cause.23:30
JonEdneyThats what Im trying to get to the bottom of the problem; I installed ISPConfig on my VPS the other day, and the mail server is giving me access errors when trying to send mail, someone said sendmail needed to be removed after I showed my logs, and thats where I'm at.23:31
ScottKNo, your problems started at "I installed ISPConfig".23:33
JonEdneyI'm hearing that also tbh - of course it was after the fact.23:33
PatrickDKyou should ask the ispconfig people how to fix your issues23:33
PatrickDKas help in here, while *will fix* the issues, will probably break ispconfig23:34
ScottKThese huge mega-control systems don't work well and AFAIK, most any of them that have been packaged for Debian/Ubuntu have been removed as irredeemably buggy.23:34
JonEdneyYeah thats what I'm doing also PatrickDK - this is a learning curve for me, I'm considering getting rid and starting fresh.23:34
ScottKZentayl (or something similar) is AFAIK, the only exception.23:34
PatrickDKthe biggest issue is, if something goes wrong, you have no place to go23:35
ScottKJonEdney: You'll learn a lot more and have a more secure/stable system if you do it without such a package.23:35
PatrickDKyou need to learn it all anyways23:35
JonEdneyYeah, and thats my goal is to learn and continue to do so.  ISPConfig just seemed like a neat installer.23:36
JonEdneyThanks for the tid-bits guys.23:36
PatrickDKthere is the joined dovecot-postfix package23:36
=== dendro-afk is now known as dendrobates

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!