[00:07] I have an issue with ubuntucloudInfrastructure. Following the guide... after running juju bootstrap... I am stuck in a loop of remote server refused the client connect. Connecting to the remote end directly I can see in /var/log/auth.log that it's trying to connect to localhost on 2181.. [00:07] I don't think localhost is correct.. I think it's supposed to connect back to the initial maas box [00:11] any ideas greatly appreciated [00:34] Good evening fellow Ubuntu-Server enthusiasts. I have a bit of a problem, and I am not exactly clear on how to fix it, my assistant made a bit of a hiccup [00:37] While using tor-proxy he saw in the log that the patch to the unix control socket didn't have proper permissions of the user. He then changed the ownership of the /var/run folder to chown -R hisusername:root /var/run, in hopes of solving the problem in a rather crude way. I was curious what the default permissions were on the /var/run directory so I could change them back via chmod to recursively correct this [00:38] CyclicFlux, http://paste.ubuntu.com/1149845/ [00:38] I was thinking a chmod 757 [00:38] thats lucid [00:39] ChmEarl, thanks! I appreciate it [00:39] the folder /var/run itself is root:root 755 [00:39] about half are 644 [00:39] ChmEarl, thanks! I am going to go check it out, and let you know how it goes [00:40] seijirou_, gave you an important tip [00:41] seijirou, thanks as well!!!! The irc-client is on transparent and I am having trouble seeing the blues with my background, lol!!! [00:41] I'll be right back === dendro-afk is now known as dendrobates === tgm4883` is now known as tgm4883 [01:24] Lol so far cloud infrastructure 12.04 walk-through and pre-built image has been a catastrophe [02:08] seijirou_, no "cloud infrastructure" in 12.04, that's a < 11.10 thing. post 12.04 we're using MaaS and Juju. [02:08] but I agree. [02:09] have you checked out openQRM? [02:16] ok I have installed open-iscsi on a computer the services is running but from another computer what clientside software do I need to access iscsi based things ? Or is it built in to the os so a share will show up in any browser ... [02:16] confused on where the iscsi client side package is [02:19] Is it different from an NFS setup where you have a client and a server side program [02:20] client program being the mounting command and the server side being the service [02:22] Or maybe this open-iscsi is just the client side daemon that detects when a san enable devices is on the network and mounts it. Though the san device has to have the builting software on its side [02:22] disown, the server is called a target [02:22] and people tned to use tgt for the target side [02:22] the client is called the initiator [02:23] and i think open-iscsi (iscsadm and stuff) is the client part [02:23] so then whats the server part [02:23] tgt [02:24] what is that stand for [02:24] and what is tned [02:24] hmmm. How should i know ? :) [02:24] i never heard of tned [02:24] " and people tned to use tgt for the target side" [02:25] ahh, i think tgtd means TarGeT Daemon or something [02:25] ahh :) that was me mispelling "tend". I meant to say people use tgt for the server side. [02:25] ok but what package is that server stuff part of [02:25] tgt [02:26] Linux SCSI target user-space tools [02:27] any ideas on how to preseed an install? I'm stumped. Thanks. [02:28] so you don't have to look through the scollback, I'm looking for a good syslinux.cfg mine is loading vmlinuz and initrd.gz, but I won't load my preseed.cfg [02:28] ok so then tgt is the equivalent to NFS client side package nfs-common [02:29] sorry meant nfs-kernel-server [02:30] disown, yep , i think one can say that [02:30] meant serverside package when I said client [02:30] this is all I have in my syslinux.cfg http://paste.scsys.co.uk/205590 [02:30] three18ti, i use it with cobbler, but as it s cobbler i did not generated the syslunx.cfg file myself [02:31] heh, I'm trying to preseed the cobbler server ;) maybe I'll install cobbler on another machine then use that to provision this machine... it seriously shouldn't be this hard to automate an install. [02:32] unfortunately the docs are just missing that one piece. [02:32] Ok then it would seem to me iscsi is more fundamental or lower level then NFS since not only can it act as hosting shares but can do more general things like issue scsi over tcp/ip commands [02:32] maybe I'll try zipping a custom initrd [02:33] disown, iscsi is about block devices, nfs is about filesystems [02:34] so iscsi is not for accessing files or filesystems it can only issue scsi command to like tell a cd/dvd player to burn a cd/dvd ,...etc [02:34] scsi is part of a HDD ATAPI is scsi based [02:35] so it should beable to retrevie any sector on a HDD [02:35] confused [02:35] three18ti, http://pastebin.com/EHveL9aS [02:36] seems to me iscsi would be more general then nfs since iscsi could in theory have a layer on top add to do the same thing as nfs [02:36] its a _block device_ server [02:37] it does not do the same thing than nfs. [02:37] sonofab*** I just rebooted my dns server... lol [02:37] any harddrive is a block devices [02:37] yep, but nfs is not a drive, it s a filesystem. [02:38] and as such cann't you uses iscsi to retreive any sector of a HDD with a scsi / atapi command then once you can do that one could eventually add a file system to the top or better yet run any filesystem on top , [02:38] three18ti, in my example the preseed file is http://192.168.122.2/cblr/svc/op/ks/profile/precise-x86_64-auto [02:39] disown, exactly, this is the idea. [02:39] thats cool sort of like a VFS set up [02:40] melmoth, thanks, the problem is that I'm trying to use a "local" preseed. [02:40] as in it's on the FDD. [02:41] so one can uses iscsi in theory to test out newly developed DFS [02:41] in this case, it happen to be local too. I do not know why the cobbler guyes made it pass threw http [02:42] may be because it s easier :) [02:42] :) [02:42] unfortunately, these instructions seem just incomplete enough, https://help.ubuntu.com/12.04/installation-guide/amd64/preseed-using.html [02:43] if that is true that opens up whole new worlds in my ability to design a DFS without having to write the server/client socket programs to interperate those commands [02:47] three18ti, I tried MaaS and Juju. It's incredibly broken. Problems at every step. [02:50] seijirou_, have you checked out openQRM? What is broken about MaaS and Juju? When was the last time you tried them? [02:51] "incredibly broken" is not true at all [02:51] I've tried getting MaaS and Juju working for the last 2 days. The 1st problem is related to system clock mismatch causing nodes not to boot correctly. [02:51] The errors are not discriptive, so it took a while to figure out what that was. The fix was standing up NTP on the MaaS box, and modifying the tftp image with instructions for the remote boxes to pull ntp. [02:52] If you don't do that the nodes are stuck at comissioning [02:53] After that they do comission, and shut off. if you turn them back on prrior to attempting to juju bootstrap, the SSH keys get hosed [02:53] what ssh keys? [02:54] https://bugs.launchpad.net/maas/+bug/978127 [02:54] Launchpad bug 978127 in maas "incorrect time on node causes failed oauth" [High,Triaged] [02:54] that would be problem #1 [02:54] what ssh keys are "hosed" ? [02:55] The MaaS server seeds the nodes with it's public ssh key with the cloud-init script ( I think) [02:55] without that working, you cannot authenticate to the node [02:55] if you are using juju you don't need to care about maas's ssh keys [02:56] and I still don't know what you mean by hosed [02:56] Actually I do, because when i juju -v status and is ee a screen full of invalid ssh key errors [02:56] i know why juju bootstrap never works [02:56] no, you don't. juju passes keys [02:57] status fails because it's not finished installing and hence no keys are set [02:57] What I found to be repeatable, is if you turn the nodes back on after comissioning [02:57] prior to juju bootstrap [02:57] ubuntu is installed [02:57] but there's an issue with the ssh keys [02:57] why are you turning them on? [02:57] so that when you then try to juju bootstrap [02:57] it's not designed to work like that [02:57] there's a probelm with the keys, and it won't work [02:58] I did because they shut off unexpectedly. [02:58] I since learned, okay, don't turn them back on [02:58] that's not unexpected at all, it's designed to work like that [02:58] juju bootstrap... then go turn them on [02:58] juju bootstrap will turn them on again [02:58] I didn't design it [02:58] no, I did [02:58] It's not well documented [02:58] Tehrefore I diddn't expect it [02:58] I am happy to help [02:58] My clue to the cause, was another bug that i'd have to go find [02:58] where the last post someone mentioned they did the same thign [02:59] I'm not the only one [02:59] Anyhow, after realizing that mistake i started over [02:59] which docs are you looking at, we can fix it [02:59] get past issue #1, don't turn them on after comissioning, issue juju bootstrap [02:59] it still fails [02:59] this time I can ssh to the node [02:59] when i look in /var/log/auth.log [02:59] it's repeatedly trying to connect to localhost on 2181 [03:00] every time juju -v status loops it's connection attempt [03:00] what do you mean by "it still fails", what are the external symptoms? [03:00] bootstrap takes a long time, FWIW [03:00] well juju -v status shows me that the remote server rejected the connection [03:00] i can now ssh to the remote server though [03:01] because it's not finished bootstrapping [03:01] i let that run for 16 hours [03:01] ok that's not good :) [03:01] i left it last night before bed [03:01] checked it this afternoon after i got home from work lol [03:01] ok so you can ssh in? [03:01] I was able to yes... the environment is not up currently [03:02] can you paste the output from these logs: [03:02] /var/log/cloud-init-output.log [03:02] /var/log/cloud-init.log [03:03] also what is your DEFAULT_MAAS_URL in the /etc/maas/maas_local_settings.py file? [03:03] If you can stand by about 10 minutes I can re-create it. [03:03] sure [03:04] also please tell me which docs you were following so I can fix them [03:04] and I'm sorry if my description about it was offensive.. i'm slightly frustrated but i appreciate your willing to help. [03:04] np, it's a frustrating experience when it goes wrong [03:04] we're about to release quite a re-write in 10.10 [03:04] 12.10 even [03:06] wait cann't iscsi be used for distributive based raid [03:06] I was following along here, using method2 https://help.ubuntu.com/community/UbuntuCloudInfrastructure [03:06] ok [03:08] wait is clustering a form of distributive based raid I see DBRD is used to do clustering but is clustering distributive based raid ? [03:12] ok I fixed the wiki to say it shuts down after commissioning [03:14] heading out to eat, back later, just leave the logs and I'll check when back [03:14] Thanks [03:15] Ok [03:17] DEFAULT_MAAS_URL = "http://192.168.10.10/" [03:17] iscsi melmoth if your still out there is more general then even issuing scsi commands over tcp/ip for a HDD it can be used if I am correct for any device that excepts or understands scsi commands this allows you a distributive way to control anything. 1) create a scsi device that does what you want 2) uses iscsi as a means to issue the commands over the network. I can see it used for remote controling thing....hell this opens up [03:17] many worlds for me [03:19] one could basically but any computer or electronic based device online with this or make it remote controllable [03:21] so cool so cool now I know how I would do home surveillances or automation [03:36] Here is the bug were the last post describes the situation I was in. [03:36] https://bugs.launchpad.net/ubuntu/+source/juju/+bug/1015207 [03:36] Launchpad bug 1015207 in juju "juju setup fails, ERROR Invalid SSH key - 12.04 LTS" [Undecided,Confirmed] === n0ts_off is now known as n0ts === cpg is now known as cpg|away === cpg|away is now known as cpg === dendrobates is now known as dendro-afk [05:09] Okay so 1st issue after juju bootstrap and ubuntu is installed on remote node. Box1 tries to connect to it by hostname, but it will not resolve. [05:09] Therefore errors liek this will repeat idefinitely [05:10] http://pastebin.com/GwYC1Q4E [05:10] To move past this, I must manually reboot the node [05:11] It will pull DHCP again, and then the name will resolve. [05:11] I am then prompted if i want to connect with ssh to which i say yes. [05:11] The errors in that pastebin will still continue indefinitely [05:12] It never changes. [05:13] Hey guys, I was wondering if anyone could tell me why the following outputs in chunks every now and then instead of the intended 'tail -F'-esque live output (one liner)? tail -F /var/log/squid3/access.log | perl -pe 's/^\d+\.\d+/localtime($&)/e;' | ccze -C [05:14] This time I'm not sure what went wrong, but I also can't manually "ssh ubuntu@Galaxy2" successfully... so the keys are broken again [05:14] passing tail's output to either ccze or the perl script works fine, but having both the script and ccze in there seems to cause the issue [05:26] So i'm going to try creating ssh keys again, and running maas-import-isos again because perhaps that updates the ssh key seeding thing, i'm not sure [05:26] then i'll pxe boot the node again [05:28] seijirou_: maas-import-isos doesn't touch keys [05:29] seijirou_: I need your cloud-init logs [05:29] I can't see any DNS problems in that log [05:33] the error is also nothing to do with ssh as far as I can see, it's zookeeper [05:43] at the end, the name resolves to some internet IP [05:44] if you try to nslookup any bogus name, you get 63.251.179.13 and 8.15.7.117 [05:45] The pastebin shows attempts to connect to Galaxy2, the hostname of the node... [05:45] and then a ping of Galaxy2 comes back with the 63.251.179.13 IP. not the correct 192.168.10.7 [05:46] Is anyone familiar with tomcat6 and apache2? [05:46] Previously I could ssh to the node manually but currently I cannot [05:47] I believe when the node PXE boots it should receive the MaaS' public ssh key. THat doesn't seem to work consistently [05:47] Which is getting in the way of me retrieving those logs. [05:48] is your dhcp server telling the nodes to use the right dns? [05:48] The maas box is the dhcp server [05:48] it claims itself for DNS [05:49] let me repeat my previous answers and questions: [05:49] 1. using juju doe *not* depend on maas ssh keys [05:49] 2. please paste your cloud init logs [05:49] how can i retrieve them? [05:50] put this in the preseed: [05:50] d-i passwd/user-password-crypted password $6$.1eHH0iY$ArGzKX2YeQ3G6U.mlOO3A.NaL22Ewgz8Fi4qqz.Ns7EMKjEJRIW2Pm/TikDptZpuu7I92frytmk5YeL.9fRY4 [05:50] it'll set the password of the ubuntu user to "ubuntu" [05:50] then you can ssh in [05:51] or log in on the console [05:51] is this done through the same emthod the " [05:51] method the ntpdate -8 was done [05:51] mount and chroot [05:51] when I say "is your dhcp server telling the nodes to use the right dns?" I mean, does the dhcp server have a configured domain? [05:52] no [05:52] No domain [05:52] just edit the preseed [05:52] Okay, I don't know where the preseed is [05:53] have you got cobbler-web installed? [05:53] I'm not sure, does the guide I'm following install cobbler-web ? [05:53] that would be the easiest way [05:53] no [05:53] Ok. apt-get install cobbler-web suffice? [05:54] hang on a sec [05:54] Ok. [05:56] ok just edit /var/lib/cobbler/snippets/maas_preseed [05:56] and stick that line in there [05:56] thankfully this cobbler stuff will not be around for much longer [05:57] donald@Galaxy1:/etc/cobbler$ cat /var/lib/cobbler/snippets/maas_preseed #import base64 #set $maas_preseed_data = base64.b64decode($getVar("MAAS_PRESEED","")) $maas_preseed_data cloud-init cloud-init/local-cloud-config string manage_etc_hosts: localhost d-i passwd/user-password-crypted password $6$.1eHH0iY$ArGzKX2YeQ3G6U.mlOO3A.NaL22Ewgz8Fi4qqz.Ns7EMKjEJRIW2Pm/TikDptZpuu7I92frytmk5YeL.9fRY4 === exocaesa1 is now known as exocaesar [05:58] formatting got lost, but otherwise look ok? [05:58] yes [06:01] So when it pxe boots... it doesn't go through a re-install [06:01] it drops in to console pretty rapidly [06:01] and the login doesn't work, but i imagine nothing changed. should i expect another OS install? [06:02] yeah you probably need to reinstall [06:03] helllo [06:03] sorry [06:03] I have log entries like this in syslog : dovecot: imap(paijo): Error: user paijo: Couldn't drop privileges: User is missing UID (see mail_uid setting) [06:03] I try to setup dovecot to use LDAP backend [06:03] paijo was user entry on ldap database... [06:04] how we resolve this ?? [06:04] anyone could help me ? [06:09] I had a bit of a follow-up question from a few hours ago. I unfortunately had to roll away from the desk, and then had one thing to do after the other. But my issue had to do with my assistant's crude tactics to essentially resolve an issue he saw in the tor-proxy log, to give tor's unix control domain socket the proper permissions, he applied chown -R username:root(he didn't realize that it was occuring due to him [06:09] running it w/sudo as opposed to his user) to the /var/run directory in a crude attempt to resolve it. for the past 30 min.'s or so I was [06:10] getting carried away with learning more about the access-controls in sockets/etc... so I can confidently fix it next. Could someone give me the output on their '/var/run' & then '/var/run/' sockets so I can account for any variance in application-specific differences in permissions. [06:11] Its this command stat -c '%A %a %n' /var/run [06:12] That will do the /var/run directory. Then cd into /var/run do 'stat -c '%A %a %n' *' (this will get the sockets) [06:12] looks like maybe that encrypted passwords ends with a . ? [06:13] seijirou, hey bud! You remember me? I apologize for almost missing you earlier, but your insight proved to be the most beneficial! [06:14] lol hey, cool glad it helped [06:15] Do you mind running the stat commands above for me, and letting me know the octal outputs, the short-hand %'s allow for more customized formatting, and then octal output(accounts for all the bits whereas the ls -al doesn't) [06:15] Yessssireeee, it def. did! [06:16] lrwxrwxrwx 777 /var/run [06:17] http://pastebin.com/zC05Xej3 [06:17] seijirou_, Thanks!!!! [06:17] No problem o7 [06:18] seijirou_, I had a question, are you familiar with those 4-length octal permissions? Those are what I was just reading about [06:19] like the 1777 ? [06:20] seijirou_, yessssir [06:20] I don't use them... I got stuck on one once and I think it turned out to be some sort of access lsit [06:20] maybe it's an app-armor thing or something of that nature? [06:21] seijirou_, yeah they are like stick bits, but because most don't compile their own software anymore, its no biggie, but when messing around with the daemons, proxies, and other more advanced stuff I have ran into issues with users+group+UID&GID sticky/non-sticky bits. So I was going over it, and playing around with it some. [06:21] ahh [06:22] Yeah i can't be much help there :) === ivoks_ is now known as ivoks [06:22] seijirou_, you were a huge help! I wouldn't be much of a help either, lol!!! [06:23] lol every squirrel gets a nut eventually! glad it helped :) [06:24] seijirou_, but the article is here if you ever get into trouble(it took me a while to find it, but it is legit, and goes through it in a way that you'll understand), I got eclipse to securely run and access server document root/etc.... w/o privilege, which I am not sure if your familiar is quite a feat, lol! [06:24] bigjools, in true murphy's law fashion i can log in to the node, but something is now broke with the juju box. [06:24] http://www.unixpeople.com/HOWTO/advanced.permissions.and.ACLs.html [06:24] That's Cyclic [06:24] Thanks even [06:25] INFO Bootstrapping environment 'maas' (origin: distro type: maas)... Unexpected Error interacting with provider: 409 CONFLICT 2012-08-16 02:25:13,347 ERROR Unexpected Error interacting with provider: 409 CONFLICT [06:25] seijirou_, no doubt!!! I owe you one, and you were right they all fall under the ACLs [06:26] donald@Galaxy1:~$ juju status 2012-08-16 02:26:03,461 INFO Connecting to environment... juju environment not found: is the environment bootstrapped? 2012-08-16 02:26:03,497 ERROR juju environment not found: is the environment bootstrapped? [06:26] So 409 conflict i believe is when there's no available nodes [06:26] i did a juju destroy-environment [06:27] but I think the node is still considered deployed [06:28] And i can't delete the allocated node in the web ui [06:29] at this point i need to call it a night i will try to try again later. [07:16] hi [07:17] anyone alive in here? [07:18] Starting web server apache2 apache2: Syntax error on line 214 of /etc/apache2/apache2.conf: Syntax error on line 3 of /etc/apache2/httpd.conf: Syntax error on line 1 of /home/calthropstu/webpolicy/web_agents/apache_agent/Agent_001/config/dsame.conf: Cannot load /home/calthropstu/webpolicy/web_agents/apache_agent/lib/libamapc2.so into [07:18] server: /home/calthropstu/webpolicy/web_agents/apache_agent/lib/libamapc2.so: undefined symbol: ap_run_http_method [07:18] Action 'start' failed. [07:18] The Apache error log may have more information. [07:18] [fail] [07:19] :( === smb` is now known as smb [07:29] Calthropstu, do you put an apache module in your home directory ? [07:29] if you choose to have your home directory encrypted, apache will never be allowed to read its content [07:33] Morning all [07:33] Is it possible to get a list of installed packages and what categories they belong to ? [07:33] *Grouped by category === dduffey_afk is now known as dduffey [08:10] New bug: #1023066 in quantum "python-quantum fails to install due to python syntax errors" [Undecided,Fix released] https://launchpad.net/bugs/1023066 [08:16] New bug: #1037400 in maas "python-lockfile missing from list of required dependencies" [Critical,Fix released] https://launchpad.net/bugs/1037400 === cpg is now known as cpg|away === cpg|away is now known as cpg [09:04] I have problems on my ubuntu 10.04. When git pushing to it though ssh, it gets stuck while writing files. There seems to be some sshd problem that causes this. Is anyone familiar with this? === dendro-afk is now known as dendrobates [09:27] Hi. I have successfully installed Ubuntu OpenStack following this procedure (http://uksysadmin.wordpress.com/2012/03/28/screencast-video-of-an-install-of-openstack-essex-on-ubuntu-12-04-under-virtualbox/#comment-649). Unfortuanetely, when I tried to create a new instance, I get this Nova message (Error: Unable to launch instance: Can not find requested image (HTTP 400)). Where can I found nova error log as I use the Ubuntu Dashboard [09:27] amcsi_work: if that's not just a slow upload, it could be an MTU problem [09:29] http://pastebin.com/px5FuxG7 <- here is when I try to scp a large file onto this bad server [09:31] with scp -vvv [09:31] New bug: #978281 in php5 (main) "apache2 crashed with SIGABRT in raise()" [Medium,Incomplete] https://launchpad.net/bugs/978281 === Lcawte|Away is now known as Lcawte [09:39] hi, i'm having really poor write performance on a 7 disk raid-5 set, even after some tuning I can get around 60MB/s max sequential. The disks I have tested individually before putting them in the raid did around 110-90MB/s (depending where on the disk you write, beginning of the disk is faster than the end oc) [09:39] now I did notice when I was at the noc last time that on 2 of the disks the activity led burns permanently, on the other 5 it just blinks a bit [09:40] smart doesn't show any unusual things tho', some reallocated sectors and CRC errors but that's it === dendrobates is now known as dendro-afk [09:46] <_ruben> freakynl: does iostat show any uneven distribution of activity? [09:49] _ruben: no, but since I have buffers it should be trying to complete entire stripe writes before moving to the next [09:50] so I wouldn't quite expect that either. That said, since they do show the same cmds/s one would expect all activity leds to burn more or less the same instead of 2 constantly and the others blinking [09:54] what is horrible tho' is that one of the disks (the spare) has pending sectors so running badblocks on it (badblocks doesn't find anything, yet the sectors remain pending... weird too). That disk does 100MB/s and the entire md4 is stuck at around 8MB/s now. Not checksumming either, cpu is hardly loaded (~95% idle) [09:54] it's random now tho', but even then considering it's 7 disks it's horrible [09:55] running smartctl -t offline on the disk with the pending sectors doesn't help either. If anyone has some ideas on that, would be welcome too. Receiving e-mails from smartd every day now. At some point one stops looking at them and that's bad ;) [09:56] silly question maybe, but how can i tell if my version of ubuntu is server or non-server, from the CLI? [09:58] AdvoWork: not sure, is it not in /etc/issue? [09:59] If you cat /etc/lsb-release there isn't anything that dustinguishes server from desktop. [10:01] Is there really any difference aside from x and some desktop software? === dendro-afk is now known as dendrobates [10:11] bhosmer, i suppose actually, when i boot up, i only get CLI, so that would indicate server === cpg is now known as cpg|away [10:14] AdvoWork: or x was disabled. If you type starts does anything happen? [10:14] Sorry, startx [10:14] to bne fair, ive just looked at the iso i downloaded "server" springs to mind lol [10:14] doh! [10:14] This autocorrect is driving me nuts! [10:14] afaik there isn't much difference expect the default kernel and package selection [10:15] Does the default desktop install include sshd? [10:16] I dunno don't run desktop ;) [10:16] Me either! [10:16] but ssh is very common, even on desktops [10:16] New bug: #938804 in php5 (main) "apache2 crashed with SIGSEGV in prefill_from_oparray()" [Low,Incomplete] https://launchpad.net/bugs/938804 [10:17] I was trying to think of a package included in the server but not the desktop. [10:22] New bug: #983782 in apache2 (main) "apache2 crashed with SIGSEGV in zm_globals_ctor_mongo()" [Undecided,New] https://launchpad.net/bugs/983782 === n0ts is now known as n0ts_off === lamont` is now known as lamont [11:41] New bug: #1034701 in horizon (main) "ImportError: Could not import settings 'openstack_dashboard.settings': missing dependency on python-glanceclient" [High,Triaged] https://launchpad.net/bugs/1034701 [12:26] New bug: #975468 in maas (main) "consider implementing a 'security group' functionality" [High,New] https://launchpad.net/bugs/975468 [12:45] how to purge packages installed with tasksel? [12:51] _ruben: extended stats (iostat -x 2) show await, r_await and w_await values 4-20* larger than the other disks in the set consistently [13:09] <_ruben> freakynl: all disks on same controller? [13:09] <_ruben> I'd say either dying disks or crappy controller for those disks [13:11] _ruben: lsi sas controller. All disks (in this set) are on the same controller [13:12] <_ruben> freakynl: then if the IO/s are similar, but the waits higher, I'd be blaming the disks [13:36] Is vmbuilder the current recommended way of setting up fresh installs on libvirt? Or should I be using something else? [13:52] Hallo, in raid1 when I reconnect one of the disks, teorically them will be automatically synced, but this not happens, syncing is starting only when manually add the device to mdadm. Can you tell me wich is the package responsible of this fail so I can open a bug report. Thanks in advance [13:52] njin: mdadm if you use software raid [13:53] njin: this is not a bug, but a known feature [13:53] njin: because if two drives have modifications, at resync you can get silent data loss [13:53] xnox, thanks, so i will update the testcase [13:54] njin: e.g. unplug one drive: modify a document; unplug the first drive, plug the second one in: modify a document; plug both in & try to sync [13:54] you will loose data =/ [13:54] it's not git it doesn't know about conflicts well enough =) [13:55] ok, thanks for the clarify === Mez__ is now known as mez === mez is now known as Mez === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [14:23] hallyn: we couldn't SRU a feature change to start using distro-info - that's why I filed a separate bug just to backport the quantal support using the same mechanism being used currently. [14:28] anyone has a fix for apt-mirror and the i18n bug? [14:42] zul, Ok, so chinstrap/~smb/4review would be fixing my little annoyance ;) [14:42] smb: cool ill get to it today [14:42] zul, Ok, thanks [14:56] rbasak: we couldn't? [14:56] ok. patches for both bugs welcome :) [14:56] New bug: #1037607 in vm-builder (universe) "vmbuilder completely fails on Quantal due to kernel pae detection failure" [Undecided,New] https://launchpad.net/bugs/1037607 [14:56] hallyn: I'll dig into it if I get time. But bug 1037607 is a bit more serious :-/ [14:56] Launchpad bug 1037607 in vm-builder "vmbuilder completely fails on Quantal due to kernel pae detection failure" [Undecided,New] https://launchpad.net/bugs/1037607 [14:57] rbasak: i believe it was at oneiric that we decided to phase out vmbuilder [14:57] maybe it was natty [14:58] hallyn: what should I be using instead? [14:58] anyway first i'll be focusing on bugs 1035320, 997978 and 1037331 [14:58] Launchpad bug 1035320 in libvirt "free(): invalid pointer" [High,Confirmed] https://launchpad.net/bugs/1035320 [14:58] Launchpad bug 997978 in qemu-kvm "KVM images lose connectivity with bridged network" [High,Confirmed] https://launchpad.net/bugs/997978 [14:58] Launchpad bug 1037331 in lxc "lxc-create should clear the cache when interrupted" [Medium,Triaged] https://launchpad.net/bugs/1037331 [14:58] rbasak: cloud images? [15:21] New bug: #1037626 in lxc (universe) "lxc-create wastes disk space by keeping installation debs" [Undecided,New] https://launchpad.net/bugs/1037626 [15:22] _ruben: thx :) [15:25] i just figured out a fundamental security issue with terminal-only ubuntu machines: if i run malicious software with a restricted account, the terminal typically allows full control of everything which is displayed on screen. the software therefore could fake the whole shell and when i type "logout" it could display its own fake login screen to grab passwords for other accounts. if it cannot "su" to the user account which i entered the data for, it [15:25] could just display "wrong password" and drop to the real login screen. it could repeat this until it has acquired root. [15:26] i am wondering whether there is a standard fix to this vulnerability? IMHO the easiest would be a reserved key on the keyboard which forces logout, which cannot be re-directed by any software, and which cannot be even monitored by non-root software. is there a software which allows this? [15:27] friend of mine harvested a slew of passwords that way in 1994 [15:27] another solution would be to make /etc/issue only readable by root and make it display a special private "reverse" password, that is a password which the system login screen displays to authenticate itself to the user. however i think it is questionable whether all system software treats /etc/issue as private? [15:27] hallyn: ewww. [15:28] i think this issue is so severe that i cannot understand why there seems to be nothing against it in ubuntu or debian standard setup. [15:28] but the key already exists - google sysrq [15:29] hallyn: i know about sysqr but AFAIK it is more of a debug settings than a standard key, isnt it? [15:29] p0s: no. alt-syrq-k [15:29] see http://www.mjmwired.net/kernel/Documentation/sysrq.txt [15:30] hallyn: ooh, just found that: http://en.wikipedia.org/wiki/Secure_Access_Key [15:32] hallyn: your document says that it is not really a secure access key. line 138 [15:33] p0s: i don't remember why that's there. read the c2 reqs. I suspect it does what you want, but not enough for government compliance purposes. [15:33] (or go ask on #ubuntu-hardened, they probably remember) [15:33] thank you [15:36] "alt+print+k" seems to work on my ubuntu 12.04 server === sauce_ is now known as sauce === JoeVLcek is now known as JoeVLcek_Lunch === HariSeldon is now known as Haruspex [16:49] adam_g: looks like we have another weird ass ftbfs for nova http://pastebin.ubuntu.com/1151019/ === JoeVLcek_Lunch is now known as JoeVLcek [17:13] any idea how long it should take for linux md/ubuntu to give up on a drive? I think one of my drives failed, some 15 minutes ago, and the system is still blocking i/o. shouldn't md get rid of this drive soon? [17:35] stgraber: I"m going to look at fixing bugs 1031043, 1037331, 1037626, 918327, and 1019398 in q. Anything to add, or any objections? [17:35] Launchpad bug 1031043 in lxc "-t ubuntu -- -h still creates container" [Medium,Triaged] https://launchpad.net/bugs/1031043 [17:35] Launchpad bug 1037331 in lxc "lxc-create should clear the cache when interrupted" [Medium,Triaged] https://launchpad.net/bugs/1037331 [17:35] Launchpad bug 1037626 in lxc "lxc-create wastes disk space by keeping installation debs" [Medium,Triaged] https://launchpad.net/bugs/1037626 [17:35] Launchpad bug 918327 in lxc "lxc-start exits success on failure when non-root" [Low,Confirmed] https://launchpad.net/bugs/918327 [17:37] hallyn: looks good, can't think of something to add [17:37] thx, ttyl === ejat- is now known as ejat === cpg|away is now known as cpg === cpg is now known as cpg|away [18:06] New bug: #1036043 in mysql-5.5 (main) "package mysql-server-5.5 5.5.24-0ubuntu0.12.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit code 1" [Undecided,Invalid] https://launchpad.net/bugs/1036043 [18:09] stgraber: gah. ubuntu:lxc tree is out of date [18:09] also, arm builds are out of date (?) [18:09] i guess i'll import-dsc into ubuntu:lxc [18:10] hm, dep wait [18:13] d'oh. i need to make it only depend on seccomp on x86 [18:13] * hallyn files a bug for himself against himself [18:26] New bug: #1037701 in lxc (universe) "lxc must only depend on seccomp for i386 and amd64" [Critical,In progress] https://launchpad.net/bugs/1037701 [19:01] New bug: #1037723 in walinuxagent (main) "move init functionality to cloud-init" [Undecided,New] https://launchpad.net/bugs/1037723 [19:11] New bug: #1037727 in cloud-init (main) "support adding region/availability to mirror selection" [High,Triaged] https://launchpad.net/bugs/1037727 [19:31] New bug: #1037738 in openssh (main) "race condition in init script" [Undecided,New] https://launchpad.net/bugs/1037738 === pdtpatrick_ is now known as pdtpatrick [20:10] has anyone here setup a custom apt archive using reprepro? [20:20] adam_g: hey [20:20] Are you currently working on the lessc issue with horizon? === mrmist is now known as groupcat [20:22] Daviey: i was looking at it yesterday [20:23] Daviey: https://answers.launchpad.net/horizon/ [20:23] Daviey: er, https://answers.launchpad.net/horizon/+question/20592 [20:23] Daviey: gabriel's suggestion seems... not feasible [20:23] if i want to config static IP, it is "sudo dpkg-reconfigure ??" [20:24] sauce: sudo vim /etc/network/interfaces [20:24] i want the text UI [20:24] sauce: That is a text UI. [20:24]