[01:31] <marshall> hey ubuntu-server
[01:31] <marshall> i would like to ssh into my server without having to type my password, but I've added my id_rsa.pub to my account's authorized keys on the server and I still have to type my password. why would this happen?
[01:59] <ironm> marshall, you shold modify the sshd config on your server (as far as I can remember)
[02:01] <shantorn> evening, i am very new to server work and am trying to get my feet wet, i have been all over the web today trying to find a good recomended partitoning layout for a file server and have yet found anything i can sink my teeth into, could one of you point me to a tutorial or guide on recomended directory sizes for a standard server please
[02:07] <linocisco> hi
[02:36] <pmatulis> shantorn: use a simple layout like /, /home, and swap
[02:37] <shantorn> thanks for th response but wouldnt it be better to do sep /usr /var as well?
[02:37] <shantorn> i just dont know
[02:37] <pmatulis> shantorn: no
[02:38] <pmatulis> shantorn: sometimes /var if you have something special going on there that might fill up / otherwise.  like a database
[02:38] <shantorn> i see
[02:39] <shantorn> what do you think would be safe for / size? 15 gb?
[02:39] <shantorn> size doesnt really matter but i want to get a hang of this
[02:40] <pmatulis> shantorn: unless you want to save your diskspace for something special just use /, /home, and swap.  you should figure out what you need for /home and swap and give the rest to /
[02:41] <shantorn> thank you for the advice
[02:42] <pmatulis> shantorn: it's hard to give better if i don't know what you intend to do with the server
[02:43] <shantorn> its going to be a basic file and media server for starters, and then grow from there, i also want to share files across my network for my lin laptop and sons nix laptop and print server
[02:44] <pmatulis> shantorn: how much disk space do you have in total?
[02:45] <shantorn> for the install? 160 gb
[02:45] <shantorn> i also have a seperate drive for shared stuff
[02:45] <shantorn> ntfs on one and ext 4 on the other so 3 drives total
[02:46] <pmatulis> shantorn: so 160 for the system itself and the other drives contain the served files?
[02:46] <shantorn> yes
[02:46] <pmatulis> shantorn: will there be other users on this system?
[02:46] <shantorn> yes 4-5
[02:47] <pmatulis> shantorn: how much memory?
[02:47] <shantorn> 4 gb witha tri core amd
[02:48] <pmatulis> shantorn: i recommend forgetting about separate /home (5 users is not a lot) and go with: swap of 3 GB and the rest on /
[02:49] <shantorn> interesting
[02:49] <shantorn> ok
[02:49] <pmatulis> shantorn: do you trust these users?
[02:50] <shantorn> they are my wife and kids so its sketchy
[02:50] <shantorn> lol
[02:50] <shantorn> they cna follow directions and will do as i suggest
[02:50] <pmatulis> shantorn: i was actually thinking of that answer before you said it
[02:51] <pmatulis> shantorn: you should be good then
[02:52] <shantorn> thank you for your time
[02:53] <pmatulis> shantorn: you're welcome.  btw, a 160 GB drive sounds kinda old.  make sure you don't use too old a drive.  they tend to fail
[02:54] <shantorn> its a test machine and its about 2 years old
[02:54] <shantorn> the drives
[02:54] <shantorn> maybe 3 now lol
[02:55] <pmatulis> not too bad
[02:55] <qman__> actually that's pretty ripe for failure
[02:56] <qman__> in my experience, drives made in the last five years or so give up the ghost at about 2-3 years power on time
[02:56] <qman__> just make sure you have backups
[02:57] <qman__> of all the drives I've bought in that time, that's the mark for 50% failure rate
[02:58] <shantorn> thats high i would think, but you have a valid point
[02:58] <qman__> I know the sample is a bit small, but I've got at least three different brands, lots of models, and over 50 drives
[02:59] <qman__> and no trends in the failure rates between brands
[03:00] <ScottK> The only drives I've had fail in less than 5 years without some obvious external cause were all Western Digital.
[03:00] <shantorn> wow
[03:00] <qman__> then you haven't bought enough of them
[03:00] <ScottK> I had a Seagate die recently that was 6 years old, but hadn't been used much, so I hadn't replaced it.
[03:00] <ScottK> Not sure how to score that.
[03:01] <qman__> I've lost...12? seagates
[03:01] <qman__> and I've RMA'd three of my 13 samsungs, and two more are showing signs
[03:01] <ScottK> They did have a bad run a few years ago, I didn't buy any then.
[03:01] <qman__> I've lost 7200.10s, 7200.11s, and 7200.12s
[03:02] <qman__> if it's a bad run, it's a three year bad run
[03:02] <ScottK> I also don't count a laptop hard drive that died a week after I had a major car crash and it was in the car.
[03:02] <ScottK> No, I don't think so.
[03:02] <ScottK> I wonder how much difference power supplies make?
[03:03] <ScottK> I could imagine better power helps reliability, but I've got no data to say.
[03:03] <qman__> I always buy oversized power supplies and run UPS on almost everything
[03:03] <qman__> so, in my case, no help there
[03:03] <qman__> the point is, though, you can't trust a hard drive
[03:03] <ScottK> Sure.
[03:03] <qman__> so keep good backups
[03:04] <qman__> unless it's a quantum fireball
[03:04] <ScottK> No argument there.
[03:04] <qman__> because if it's still working after the last 12 years, it'll probably keep going a lot longer
[03:05] <qman__> mine's actually closer to 15
[03:07] <ScottK> I have a Dual PIII 450 system I built in 1999 that's still running as a file server, but I've replaced the hard drives (premptively) and it's about time to do it again.
[03:08] <qman__> this one survived windows 95, and went on to outlive no less than 11 other drives in the same server
[03:08] <qman__> and it's still going
[03:08] <qman__> it doesn't have SMART so I don't know exactly, but it's in the realm of 10 years power on time
[03:10] <qman__> and I honestly wouldn't be surprised if it lasts ten more
[03:11] <qman__> if I can even get an IDE controller in a server 10 years from now
[04:24] <blackshirt> hello, is it possible to limit samba just allowed some type of files ?
[04:30] <blackshirt> is it possible to limit samba just allowed some type of files ?
[05:24] <ironhide> how to setup web server?
[05:29] <hallyn> jamespage: (ignore my previous ping;  switching to stable ppa fixed it for me)
[05:41] <koolhead17> hi all
[06:37] <d3f4c3d> hello
[06:37] <d3f4c3d> error while loading shared libraries: libcrypto.so.4
[06:37] <d3f4c3d> what is this guys ?
[06:51] <SpamapS> d3f4c3d: exactly as it sounds... problem with libraries.
[06:51] <d3f4c3d> any clue to fix it somehow ?
[06:52] <SpamapS> d3f4c3d: not without knowing the progrm that is failing, and where it came from
[06:52] <d3f4c3d> its cisco IOS program basically
[06:52] <d3f4c3d> when im trying to start routers i get ../wrapper-linux: error while loading shared libraries: libcrypto.so.4: cannot open shared object file: No such file or directory
[06:52] <SpamapS> ugh
[06:52] <SpamapS> closed source binaries are the worst
[06:53] <d3f4c3d> i have no clue what you said sir but okay :D
[06:53] <SpamapS> d3f4c3d: most likely it was built for an older version of the lib that is not on your system
[06:54]  * SpamapS passes out
[06:57] <Eagleman> Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully:  Waiting for network configuration...   network file: http://pastebin.com/DdsLLHBz
[06:57] <Eagleman> I have disabled the waiting by commentin sleep in failsafe.conf
[07:03] <d3f4c3d> oddly i have /usr/lib/libcrypto.so.4
[07:03] <d3f4c3d> /lib/libcrypto.so.4
[07:55] <Daviey> jamespage: hey, can you clarify what unit https://jenkins.qa.ubuntu.com/view/Quantal/view/ISO%20Testing%20Dashboard/job/quantal-server-amd64_minimal-virtual/123/testReport/test/MinimalVirtualTest/testInstallSize/ is?
[07:56] <jamespage> Daviey, 1k blocks
[07:56] <jamespage> # 1k blocks that is - it looks at the output from df
[07:58] <jamespage> threshold for amd64 is ~684MB
[07:59] <Daviey> jamespage: so, what do you think about the current test?
[08:00] <Daviey> is it a failure?  or should we bump the max?
[08:00] <jamespage> bump it
[08:00] <Eagleman> Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully:  Waiting for network configuration...   network file: http://pastebin.com/DdsLLHBz
[08:01] <Daviey> jamespage: so, that is currently ~710MB?
[08:01] <jamespage> yeah
[08:02] <jamespage> I would say target 725MB
[08:02] <jamespage> as the max
[08:03] <jamespage> odd that amd64 is more than 50MB bigger than the i386 max threshold
[08:06] <Daviey> jamespage: i assume you saw, bug 725972 latest comment?
[08:06] <Daviey> jamespage: amd64 is probably bigger because of multi-arch?
[08:07] <Daviey> err, bug 1017978 .. bad paste
[08:08] <jamespage> Daviey: flip - that was only 17 minutes ago
[08:08] <jamespage> fixing now
[08:08] <jamespage> \o/
[08:08] <jamespage> although its OK to put radosgw into main; you can't actually use it ATM without a package from multiverse
[08:15] <jamespage> Daviey, the test does add some extra for amd64 to accomodate multiarch - 30MB
[08:15] <jamespage> so its 20MB bigger than that!
[08:17]  * jamespage melts his laptop for a bit building ceph
[08:18] <Daviey> jamespage: let the cloud be with you.
[08:18] <jamespage> still quicker using 4 cores + SSD
[08:18] <jamespage> I have to open the window tho :-)
[08:18] <Daviey> jamespage: Think of the trees!
[08:42] <balboah> I'm trying to get xen-tools on debian to debootstrap precise for me. Anyone happen to have an idea why the ubuntu guest freezes on boot like this? https://dl.dropbox.com/u/2468164/Screen%20shot%202012-09-12%20at%2010.41.11.png
[08:46] <karihre> Hi, I'm trying to find out which process is listening to the nfs port without much success, netstat gives me that the port is open and something is "LISTENING" but lsof -i doesn't reveal what process this is, what am I missing here? (see http://pastebin.com/eRuzwLtT)  Thanks.
[08:46] <balboah> I managed to get another image booting, but had problems with xen barrier killing the disk. So I upgraded the debian xen hypervisor to the latest stable to get that issue fixed. Not sure if that upgrade relates to now killing my xen-tools instead
[08:47] <balboah> I'll just try dd the other working image and reconfigure it for now
[08:53] <_ruben> karihre: use netstat -lp
[08:55] <karihre> _ruben: yep, I was sort of already there: http://pastebin.com/CApkN10Y , what does the - mean?
[08:56] <karihre> I'm using nfs4, just find it strange that in order for it to work, you only need port 2049 open (in firewall), yet I can't see what process is listening to this port..?
[08:56] <Daviey> jamespage: hey.. did you try a build without dh_makeshlibs -n?
[08:57] <jamespage> Daviey, yeah - just finishing now - there is a reason for the manual maintainer scripts but I think I have a neater way of doing it
[08:57] <Daviey> i really wonder what part of the dh generated postinst it complains about
[08:57] <Daviey> jamespage: using override?
[08:58] <jamespage> Daviey, the ceph package has some .so's; I think I can use a -X to exclude those from being detected
[09:00] <Daviey> ah cool
[09:00] <jamespage> which means we can drop the maintainer scripts
[09:00] <jamespage> testing that theory now
[09:00] <jamespage> problem is that ceph takes ~30 mins to build
[09:02] <karihre> Okay I am getting this a bit strange output from netstat: http://pastebin.com/CApkN10Y , what does the - mean, indicating that no process is listening, yet something is listening to the port, I'm confused here..?
[09:11] <decci> Do we have any Ubuntu Hardware Certified Suite / tool ?
[09:11] <Eagleman> Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully:  Waiting for network configuration...   network file: http://pastebin.com/DdsLLHBz
[09:20] <balboah> Eagleman: maybe the dhcp doesn't respond?
[09:23] <Eagleman> balboah any idea where to see that?
[09:23] <Eagleman> because i will get a respond in a few seconds with dhclient
[09:47] <koolhead17> packages.ubuntu.com can anyone open it
[09:49] <tsimpson> koolhead17: it's down for everyone, server issues on the Canonical side
[09:49] <koolhead17> oohok
[10:19] <dax_roc> stgraber: When I add the rotate option to tail or head it's not picked up, Do any services need to be reloaded ?
[10:20] <dax_roc> *option rotate or timeout:1 aren't picked up as the failover to the second entry is very slow 5+seconds
[10:30] <Eagleman> Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully:  Waiting for network configuration...   network file: http://pastebin.com/DdsLLHBz
[10:37] <fidel> Eagleman: in general ' bootchart' is a nice package to see your booting-process in detail as image
[10:37] <fidel> in this particular case: if noone onhere reacts on the problem, - consider searching your favorite search for the error-string - its a well known issue and the message should end in tons of forum hits
[10:39] <Eagleman> it will
[10:39] <Eagleman> but i ended up using a workaround
[10:39] <Eagleman> not fixing the issue
[10:41] <jamespage> Eagleman, that would normally indicate that your network is not starting correctly during bootup; which version of Ubuntu do you see this on?
[10:41] <Eagleman> 12.04 server
[10:41] <Eagleman> everything works
[10:41] <Eagleman> thats the problem
[10:42] <Eagleman> even if i disable sleep in failsafe.conf ( the file which lets me wait )
[10:43] <jamespage> Eagleman, if you check in /var/log/upstart you might see some additional log information related to the network interfaces starting up
[10:43] <fidel> Eagleman: yep - my workaround wasnt a solution either - but a hack ....had the issue as well some month ago (but i dont remember the details)
[10:45] <Eagleman> A lot of information in /var/log/upstart
[10:46] <Eagleman> and why are they archived?
[10:46] <tsimpson> logrotate
[10:47] <tsimpson> and because you may need previous logs, for comparison, or so you can see what happened last time etc
[10:48] <Eagleman> Still everything works as it should
[10:48] <Eagleman> i doubt i will find anything
[10:48] <decci> Hi, Do Ubuntu provides any hardware certification Test suite which can be performed locally and report logs to ubuntu?
[10:54] <dax_roc> I've added option rotate to /etc/resolvconf/resolv.conf.d/base and rebooted, When I dig for a dns entry I always get the same nameserver. Should they not rotate round robin? Does anyone know if the resolution of the timeout option can be decimal?
[11:04] <_ruben> karihre: ah, i think i know what's going on: you're most likely using the nfs server that resides in kernelland and not userland, so it doesn't show up as a (userland) process
[11:19] <karihre> _ruben: ah, that seems reasonable
[11:23] <dax_roc> stgraber: /etc/resolv.conf wasn't a symlink, quick dpkg-reconfigure and it's all working now.
[11:25] <karihre> _ruben: thanks
[11:57] <zul> adam_g/Daviey: ill upload quantum and horizon rc1 today
[11:58] <zul> Daviey:  the MIR should be ready for quantum with the work we put into it
[12:00] <Daviey> \o/
[12:27] <grefter> I keep getting this msg
[12:27] <grefter> CPU0: Package power limit notification (total events = 1)
[12:27] <grefter> never seen it before until ubuntu, is this an issue?
[12:38] <Troloulol> hello how do you scan a lan network on ubuntu ?
[12:43] <karihre> Troloulol: nmap?
[12:46] <Troloulol> thx do you know full comand ?
[13:32] <smoser> best snippet ever:
[13:32] <smoser>  [ "$(dpkg --print-architecture)" = "amd64" ] && farch="$(dpkg --print-foreign-architectures)" && [ "${farch#*i386}" != "${farch}" ] && sudo dpkg --remove-architecture i386 && echo "ridded you of that needless i386"
[13:59] <zul> hallyn: ping
[14:01] <hallyn> zul: here, but walking out - back in a few
[14:01] <zul> hallyn: k
[14:16] <hallyn> zul: 'sup?
[14:16] <zul> hallyn: i totally forgot now :(
[14:16] <hallyn> zul: yay it worked!
[14:17] <zul> hallyn: ill remember it eventually
[14:17] <hallyn> ok
[14:20] <zul> hallyn: oh yes now i remember what happens if the block device is in both devices.allow and devices.deny
[14:20] <grefter> i keep getting this debug msg
[14:20] <grefter> 08:26 < grefter> CPU0: Package power limit notification (total events = 1)
[14:20] <grefter> anyone happen to know if that's an issue?
[14:21] <grefter> or just generic output?
[14:21] <hallyn> zul: depends which you add it to last
[14:21] <hallyn> zul: last one wins
[14:21] <hallyn> it's a stupid, simple whitelist
[14:22] <zul> so if i detach the detach the device i could put it in devices.allow and then remove the block from the container?
[14:22] <zul> er...devices.deny
[14:23] <zul> smoser: ^^^
[14:24] <zul> hallyn:  im just trying to figure out a sane way to do the detach block device from a container
[14:25] <hallyn> zul: yup, should work
[14:25] <TheLordOfTime> anyone know where in the php5 package their documentation / release notes are?
[14:25] <TheLordOfTime> (Quantal)
[14:26] <smoser> and then what happens when you have to add it again? hallyn ?
[14:26] <TheLordOfTime> sorry to ask in here, but, you know, you *are* the server package people :P
[14:26] <zul> TheLordOfTime: /usr/share/doc/php5
[14:26] <smoser> ie, say he needs to add that same major minor?
[14:26] <smoser> you add it again to devices.allow?
[14:26] <smoser> it seems like the interface works, but its strange.
[14:26] <zul> smoser: assuming yes
[14:27] <zul> since devices.allow and devices.deny is a simple blacklist thingy
[14:27] <zul> (i love my technical terms
[14:28] <smoser> hallyn, ?
[14:28] <smoser> is that right?
[14:28] <smoser> so: while(1) { add_to_devices_allow() ; add_to_devices_deny(); }
[14:29] <hallyn> smoser: yes.  it's a simple whitelist
[14:29] <hallyn> add to devices.allow, it's added
[14:29] <hallyn> add to devices.deny, it's removed (if it's there)
[14:30] <hallyn> note, upcoming kernels this will change just a tinge.  but for now, and since 2008, that's how it works
[14:30] <zul> change as in how?
[14:30] <zul> just curious
[14:30] <hallyn> well, from a simple whitelist, to a 'default behavior' (allow or deny) plus exceptions (whitelist or blacklist)
[14:30] <zul> ah ok
[14:31] <zul> smoser/hallyn: so the thing i have in my mind is this
[14:32] <zul> put the device in the devices.deny, rm the block device
[14:33] <zul> smoser: sounds good?
[14:35] <smoser> what happens if the device is in use ?
[14:35] <smoser> (mounted or otherwise, a filehandle open)
[14:36] <hallyn> smoser: you can keep using those
[14:37] <hallyn> just as you can keep using mounted / even though it's on sda1 and that's not in your whitelist
[14:37] <hallyn> only actions on the actual /dev node will fail
[14:37] <smoser> zul, so you will have to take care to deal with that.
[14:37] <smoser> i'm not sure how
[14:38] <zul> smoser:  agreed
[14:38] <smoser> i'm asusming the subsequent iscsi detach will fail?
[14:38] <smoser> hallyn, ?
[14:38] <smoser> ie, the host will be adding and removing the block device to the lxc container would un-attach the iscsi device that is backing it
[14:38] <hallyn> smoser: im not sure what an iscsi detach entails
[14:38] <smoser> but that will surely fail if it is still in use
[14:39] <smoser> i'm not sure either
[14:39] <zul> smoser: lemme play with it and ill get back to you
[15:13] <smoser> stgraber, around?
[15:13] <stgraber> smoser: yep
[15:13] <smoser> i havent verified this in testing
[15:13] <smoser> but it seems to me that your merge of open-iscsi broke iscsi-network-interface.conf
[15:14] <stgraber> it's not completely impossible that it did :)
[15:14] <smoser> as i dont think the initramfs is writing /dev/.initramfs/open-iscsi.interface anymore, but iscsi-network-interface.conf is still trying to consume it
[15:14] <stgraber> it was more of a sync + re-apply relevant delta than a merge
[15:15] <smoser> (well, /run/initramfs/open-iscsi.interface)
[15:15] <stgraber> hmm, ok, weird that it didn't break my system during testing... but should at least be pretty easy to fix
[15:16] <stgraber> actually, shouldn't it be looking for /run/net-* instead of checking yet-another-custom-file?
[15:30] <zul> hallyn:  is there a way to determine if something is mounted in the container from the host?
[15:31] <hallyn> zul: does cat /proc/pid/root/proc/1/mounts and ../mountinfo work?
[15:31] <hallyn> should
[15:33] <zul> hallyn: ill check
[15:34] <zul> hallyn: just thinking ahead
[15:35] <hallyn> zul: ok.  pretty sure it's how i usually debug startups (i don't think about it much, just do it) so should work
[15:35] <zul> thanks
[16:01] <hallyn> rm -rf cd qemu-kvm-1.2.0+noroms    <- jinkeys that's not good
[16:09] <unsecur3d> damn
[16:09] <unsecur3d> mad bugs :x
[16:11] <unsecur3d> can u join 12.04 with an ad ds on win2k8 ?
[16:24] <hallyn> zul: smoser: i won't resort to this unless it fixes a bunch of subtle bugs, but i'm testing qemu-kvm 1.2 package right now.  built locally and runs fine so far (starting heavy testing now), but about to push it to ppa:ubuntu-virt/virt-daily-upstream
[16:27] <rynop> I'm looking for a way to ask the ppa maintainer for precise php5, if he/she would update the php5 version due to a  bug that impacts production ubuntu-servers (its fixed in newer ver of php 5.3).  Anyone know the right/formal way to do this?
[16:27] <rynop> I cant find the maintainers on https://launchpad.net/php/main or the precise link from w/in there.
[16:29] <patdk-wk> you file a bug report
[16:30] <ikonia> rynop: look in the registry-drivers team, lots of names
[16:30] <patdk-wk> https://bugs.launchpad.net/ubuntu/precise/+source/php5
[16:30] <ikonia> 56 active members, I'm sure starting a conversation iwth one of them
[16:30] <ikonia> would get things moving a bit
[16:30] <rynop> ok thanks much
[16:31] <rynop> ikonia: looks like the bug has already been reported :)
[16:31] <rynop> https://bugs.launchpad.net/ubuntu/precise/+source/php5/+bug/1014044
[16:32] <rynop> ikonia, is it typically pretty 'fast' from the time its in 'fix-committed' to 'fix-released' state? like weeks/months? i know its prob dependent on the time the maintainer has
[16:33] <zul> hallyn: cool...would be good for quantal+1
[16:35] <hallyn> zul: well, that's up for debate.  this version is strict upstream, not debian
[16:35] <hallyn> zul: if we're going to go with debian pkgs (which would be nice), i need to change the package layout to completely match debian's - qemu, qemu-kvm, and all
[16:35] <hallyn> (might require changes to qemu-linaro)
[16:36] <zul> erp :)
[16:36] <hallyn> and i'm getting a little worried about the debian qemu community (not qemu-kvm, but qemu-kvm is going away anyway)
[16:36] <hallyn> so yeah, i need to think about it and we ned to talk about it
[16:37] <hallyn> if we don't follow debian, then we need to try and work with upstream to have -stable trees we can collaborate on
[16:37] <hallyn> eh, well, i'd rather follow debian.  i'm going to spend a day or two in october trying to hash that out
[16:43] <black_13> if you modify the preseed file on the ubuntu iso will this modified file be used during the install process?
[16:46] <hallyn> jamespage: do yo uknow of a way/place to get full stdout/stderr log output from utah?
[16:53] <adam_g> smoser: Daviey ping
[17:07] <hallyn> jdstrand: when doing 'uvt new -r -v -t desktop oneiric amd64 test', when it fails with 'ssh command failed' (but the vm is up), what is usually the proper fix?
[17:08] <hallyn> i've got 'nameserver 192.168.122.1' in resolv.conf...
[17:09] <hallyn> oh feh, is it bc it's not running under ssh-agent?
[17:46] <hallyn> ah yeah that worked
[17:48] <marshall> im having a problem where my server doesnt seem to be recognizing my authorized keys. I've added id_rsa.pub and i'm still being asked for a password.
[17:58] <melmoth> marshall, most probably too laxist permission on the private key
[18:06] <pmatulis> marshall: are you confusing 'password' with 'ssh private key passphrase'?
[18:48] <zul> adam_g: quantum is building with the testsuite im going to upload it
[18:52] <adam_g> zul: where is it building?
[18:52] <zul> adam_g:  locally in the chroot
[18:52] <adam_g> zul: can you push the changes that enable it to the -proposed branch and build it via jenkins first?
[18:52] <zul> adam_g: sure
[19:03] <zul> adam_g: builds fine
[19:04] <adam_g> zul: woot
[19:04] <zul> adam_g: uploading
[19:04] <adam_g> zul: beware there will be binary-new with that upload.
[19:05] <zul> adam_g: ack
[19:21] <smoser> adam_g, here now
[19:27] <adam_g> smoser: openstack components started to specify cliff>=1.2. we currently have python-cliff 1.1.2 in archive. thoughts on a FFE to bring python-cliff up to date (its only one release off)?
[19:28] <smoser> fun.
[19:37] <zul> jdstrand: hey quantum should be fine now
[19:42] <smoser> sbeattie, if i install a file into apparmour dir (#include <dhcpd.>) should my postinst run sudo apparmor_parser -r ?
[19:42] <smoser> er... drop sudo. but you get the idea
[19:42] <smoser> do i need to do that or does some other magic handle that
[19:54] <roaksoax> hallyn: howdy!! I was wondering if virsh needs to be shipped with libvirt-bin, or can it be shipped outsite it?
[19:57] <hallyn> roaksoax: uh.  i suppose it could be shipped in a separate package depending on libvirt-bin.  but why?
[19:57] <hallyn> roaksoax: oh well i guess i can guess.
[19:57] <hallyn> (suppose it should be able to just depend on libvirt0)
[19:58] <roaksoax> hallyn: cause for example, maas uses virsh for power contorl... but it make sno sense to install libvirt-bin and related dependencies just to be able to use it
[20:00] <hallyn> roaksoax: should be doable i think
[20:00] <roaksoax> hallyn: cool thanks!
[20:03] <hallyn> roaksoax: note it brings is out of step with debian (no biggie, we're nto following them) and would require ffe for q
[20:03] <hallyn> zul: ^ you'd be interested
[20:04] <zul> hallyn/roaksoax: yeah sure
[20:17] <roaksoax> matsubara: ping
[20:17] <matsubara> roaksoax, hi Andres
[20:18] <roaksoax> matsubara: howdy.. if you have the chance... do you think you can check any other package that uses dbconfig-common to see if you pass --yes does not prompt any questions?
[20:18] <roaksoax> matsubara: i have been trying to not get that showed.. but couldn't figure out a way to do it
[20:19] <smoser> sbeattie, around?
[20:19] <smoser> i need some apparmor help
[20:21] <matsubara> roaksoax, ok. I'll take a look, don't know much about dbconfig-common
[20:33]  * slyboots face melts into a pile of goo "Anyone familure with setting up NFS shares?"
[20:33] <slyboots> I can see/mount them, but permissions and UID/GID's are all screwed up
[20:44] <chris|> slyboots, do you have statd running?
[20:44] <slyboots> I dont know whath that is, so .. odds are "no"
[20:45] <slyboots> My Ubuntu-server is actually only the client however
[20:46] <chris|> try changing statd=yes in /etc/default/nfs-common and the run `service statd start`
[20:47] <slyboots> For the client..?
[20:47] <chris|> yes
[20:47] <slyboots> Okay..
[20:49] <slyboots> Im not sure what that was supposed to do :P
[21:27] <zul> adam_g: ill get swift out tonight as well
[21:28] <adam_g> zul: cool
[23:34] <ruben23>  hi guys i installed phpmyadmin on my ubuntu-server but the problme it wont open or load after installed any idea..?
[23:35] <ruben23> anyone can help
[23:35] <ruben23> pelase
[23:37] <zul> Daviey: ping there is some new binaries for quantum in the last upload, can you use your magic powers please?
[23:38] <smoser> jdstrand, sbeattie mdeslaur anyone able to help me with some apparmor trouble?
[23:38] <Daviey> zul: Are they kosher ?
[23:38] <zul> Daviey:  yah
[23:38] <zul> Daviey:  its just some new plugins
[23:39] <jdstrand> smoser: I am in a meeting atm. sbeattie could probably help more, but I'll ask-- what's up?
[23:39] <Daviey> zul: no Breaks/Replaces required?
[23:39] <smoser> http://paste.ubuntu.com/1201554/
[23:39] <zul> Daviey: nope
[23:39] <nov503> Hi, I 've bought some old machines installed windows. Now I want to install ubuntu maas on them. I did the following things: 1. get a 12.04 iso, burn it into usb. 2. use this usb on machine A to install a maas server. 3. use this usb on machine B to "install from a maas server" 4. Machine be shutdown immediately, but I can see the node enlisted on http://machineA/MAAS. 5. I clicked accept & commission for that node. But it
[23:39] <sbeattie> smoser: jjohansen should be able to help (i have to vanish again shortly; stupid fairy godmother)
[23:39] <zul> Daviey:  adam_g ^^^
[23:40] <smoser> jdstrand. i run that, (creating a apparmor.d/dhcpd/maas file) and then trying to use the relaxed permissions
[23:40] <smoser> but i'm getting
[23:40] <ruben23> this is my error log
[23:40] <ruben23> http://pastebin.com/grAX8CXg
[23:40] <smoser> [466072.226852] type=1400 audit(1347493086.507:31): apparmor="DENIED" operation="capable" parent=20318 profile="/usr/sbin/dhcpd" pid=20339 comm="dhcpd" pid=20339 comm="dhcpd" capability=1  capname="dac_override"
[23:40] <ruben23> hi guys i installed phpmyadmin on my ubuntu-server but the problme it wont open or load after installed any idea..?
[23:40] <jjohansen> sbeattie: oh sure your fair god mother bails you out again
[23:40] <ruben23>  this is my error log---------------> http://pastebin.com/grAX8CXg
[23:40] <jdstrand> smoser: start it as root
[23:40] <smoser> http://paste.ubuntu.com/1201556/
[23:40] <smoser> (i run 'sudo ./go')
[23:41] <smoser> the profile loads correctly, and if i put something bogus in the 'maas' file, it complains
[23:41] <smoser> so i know its getting loaded
[23:41] <smoser> but my content must just be wrong
[23:42] <sbeattie> cap_dac_override indicates that the dac permissions on something are wrong, and that the root process is overriding the DAC permissions
[23:42] <Daviey> zul: upstream Licence "websockify is licensed under the LGPL version 3" .. but d/copyright says GPL-3?
[23:42] <smoser> sbeattie, too many big words. can you dumb it down?
[23:43] <zul> Daviey: damn it ill have a look at it tomorrow morning need to deal with cranky child
[23:43] <Daviey> zul: yeah, i'm too tired to full go over it anyway.
[23:43] <jjohansen> smoser: dac permissions == regular file xugo perms
[23:43] <jdstrand> no-- dhcpd drops privs differently than in the past, so you have to start it the same way that upstart is starting it
[23:43] <jdstrand> smoser: ^
[23:43] <smoser> that is how upstart starts it
[23:43] <jdstrand> smoser: oh, no
[23:44] <jdstrand> smoser: I remember, your /run/maas/dhcp /var/lib/maas/dhcpd don't have the right perms
[23:44] <jdstrand> smoser: look at the standard dhcp perms and mimic those in your script
[23:44] <zul> Daviey: vishy has some changes that he did for it as well which i want to incorperate
[23:45] <zul> Daviey: anyways im out of here
[23:45] <smoser> hm..
[23:45] <smoser> maybe because /run/maas is root:root, but /run/maas/dhcpd is dhcpd:dhcpd ?
[23:46] <smoser> ah. i see. i think
[23:46] <jdstrand> smoser: I forget off hand-- look at the upstart job for what it needs to be
[23:47] <ruben23> GUYS..?
[23:47] <ruben23> HELP
[23:47] <jdstrand> http://changelogs.ubuntu.com/changelogs/pool/main/i/isc-dhcp/isc-dhcp_4.2.4-1ubuntu7/changelog
[23:47] <jdstrand> smoser: ^ look at 4.2.4-1ubuntu4
[23:48] <jdstrand> smoser: sorry for only half-attending to you...
[23:49] <smoser> jdstrand, thank you
[23:49] <smoser> http://paste.ubuntu.com/1201566/
[23:49] <smoser> yeah, leases file needs to be root:root but i was making it dhcpd:dhcpd
[23:50] <jdstrand> smoser: cool, yeah, that was the problem with the upstart job before. gald it worked out :)
[23:50] <jdstrand> glad even
[23:52] <patdk-lap> ruben23, like always, start with the first issue, and move on
[23:52] <patdk-lap> PHP Warning:  require(): open_basedir restriction in effect. File() is not within the allowed path(s)
[23:52] <patdk-lap> fix that
[23:55] <ruben23> patdk-lap: yes what you can suggest on that..?
[23:56] <patdk-lap> google?
[23:56] <patdk-lap> I really can't mind-read your server