[01:31] hey ubuntu-server [01:31] i would like to ssh into my server without having to type my password, but I've added my id_rsa.pub to my account's authorized keys on the server and I still have to type my password. why would this happen? === cpg is now known as cpg|away === kd7jwc is now known as shantorn [01:59] marshall, you shold modify the sshd config on your server (as far as I can remember) [02:01] evening, i am very new to server work and am trying to get my feet wet, i have been all over the web today trying to find a good recomended partitoning layout for a file server and have yet found anything i can sink my teeth into, could one of you point me to a tutorial or guide on recomended directory sizes for a standard server please === Deathvalley122 is now known as Deathvalley122|2 === Deathvalley122|2 is now known as Deathvalley122 === n0ts_off is now known as n0ts [02:07] hi [02:36] shantorn: use a simple layout like /, /home, and swap [02:37] thanks for th response but wouldnt it be better to do sep /usr /var as well? [02:37] i just dont know [02:37] shantorn: no [02:38] shantorn: sometimes /var if you have something special going on there that might fill up / otherwise. like a database [02:38] i see [02:39] what do you think would be safe for / size? 15 gb? [02:39] size doesnt really matter but i want to get a hang of this [02:40] shantorn: unless you want to save your diskspace for something special just use /, /home, and swap. you should figure out what you need for /home and swap and give the rest to / [02:41] thank you for the advice [02:42] shantorn: it's hard to give better if i don't know what you intend to do with the server [02:43] its going to be a basic file and media server for starters, and then grow from there, i also want to share files across my network for my lin laptop and sons nix laptop and print server [02:44] shantorn: how much disk space do you have in total? [02:45] for the install? 160 gb [02:45] i also have a seperate drive for shared stuff [02:45] ntfs on one and ext 4 on the other so 3 drives total [02:46] shantorn: so 160 for the system itself and the other drives contain the served files? [02:46] yes [02:46] shantorn: will there be other users on this system? [02:46] yes 4-5 [02:47] shantorn: how much memory? [02:47] 4 gb witha tri core amd [02:48] shantorn: i recommend forgetting about separate /home (5 users is not a lot) and go with: swap of 3 GB and the rest on / [02:49] interesting [02:49] ok [02:49] shantorn: do you trust these users? [02:50] they are my wife and kids so its sketchy [02:50] lol [02:50] they cna follow directions and will do as i suggest [02:50] shantorn: i was actually thinking of that answer before you said it [02:51] shantorn: you should be good then [02:52] thank you for your time [02:53] shantorn: you're welcome. btw, a 160 GB drive sounds kinda old. make sure you don't use too old a drive. they tend to fail [02:54] its a test machine and its about 2 years old [02:54] the drives [02:54] maybe 3 now lol [02:55] not too bad [02:55] actually that's pretty ripe for failure [02:56] in my experience, drives made in the last five years or so give up the ghost at about 2-3 years power on time [02:56] just make sure you have backups [02:57] of all the drives I've bought in that time, that's the mark for 50% failure rate [02:58] thats high i would think, but you have a valid point [02:58] I know the sample is a bit small, but I've got at least three different brands, lots of models, and over 50 drives [02:59] and no trends in the failure rates between brands [03:00] The only drives I've had fail in less than 5 years without some obvious external cause were all Western Digital. [03:00] wow [03:00] then you haven't bought enough of them [03:00] I had a Seagate die recently that was 6 years old, but hadn't been used much, so I hadn't replaced it. [03:00] Not sure how to score that. [03:01] I've lost...12? seagates [03:01] and I've RMA'd three of my 13 samsungs, and two more are showing signs [03:01] They did have a bad run a few years ago, I didn't buy any then. [03:01] I've lost 7200.10s, 7200.11s, and 7200.12s [03:02] if it's a bad run, it's a three year bad run [03:02] I also don't count a laptop hard drive that died a week after I had a major car crash and it was in the car. [03:02] No, I don't think so. [03:02] I wonder how much difference power supplies make? [03:03] I could imagine better power helps reliability, but I've got no data to say. [03:03] I always buy oversized power supplies and run UPS on almost everything [03:03] so, in my case, no help there [03:03] the point is, though, you can't trust a hard drive [03:03] Sure. [03:03] so keep good backups [03:04] unless it's a quantum fireball [03:04] No argument there. [03:04] because if it's still working after the last 12 years, it'll probably keep going a lot longer [03:05] mine's actually closer to 15 [03:07] I have a Dual PIII 450 system I built in 1999 that's still running as a file server, but I've replaced the hard drives (premptively) and it's about time to do it again. [03:08] this one survived windows 95, and went on to outlive no less than 11 other drives in the same server [03:08] and it's still going [03:08] it doesn't have SMART so I don't know exactly, but it's in the realm of 10 years power on time [03:10] and I honestly wouldn't be surprised if it lasts ten more [03:11] if I can even get an IDE controller in a server 10 years from now [04:24] hello, is it possible to limit samba just allowed some type of files ? === cpg|away is now known as cpg [04:27] New bug: #1022462 in mysql-5.5 (main) "package mysql-server-5.5 5.5.24-0ubuntu0.12.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,Expired] https://launchpad.net/bugs/1022462 [04:30] is it possible to limit samba just allowed some type of files ? === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts [05:24] how to setup web server? [05:29] jamespage: (ignore my previous ping; switching to stable ppa fixed it for me) [05:41] hi all [06:37] hello [06:37] error while loading shared libraries: libcrypto.so.4 [06:37] what is this guys ? [06:51] d3f4c3d: exactly as it sounds... problem with libraries. [06:51] any clue to fix it somehow ? [06:52] d3f4c3d: not without knowing the progrm that is failing, and where it came from [06:52] its cisco IOS program basically [06:52] when im trying to start routers i get ../wrapper-linux: error while loading shared libraries: libcrypto.so.4: cannot open shared object file: No such file or directory [06:52] ugh [06:52] closed source binaries are the worst [06:53] i have no clue what you said sir but okay :D [06:53] d3f4c3d: most likely it was built for an older version of the lib that is not on your system [06:54] * SpamapS passes out [06:57] Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully: Waiting for network configuration... network file: http://pastebin.com/DdsLLHBz [06:57] I have disabled the waiting by commentin sleep in failsafe.conf [07:03] oddly i have /usr/lib/libcrypto.so.4 [07:03] /lib/libcrypto.so.4 === moothecow is now known as Guest74900 [07:55] jamespage: hey, can you clarify what unit https://jenkins.qa.ubuntu.com/view/Quantal/view/ISO%20Testing%20Dashboard/job/quantal-server-amd64_minimal-virtual/123/testReport/test/MinimalVirtualTest/testInstallSize/ is? [07:56] Daviey, 1k blocks [07:56] # 1k blocks that is - it looks at the output from df [07:58] threshold for amd64 is ~684MB [07:59] jamespage: so, what do you think about the current test? [08:00] is it a failure? or should we bump the max? [08:00] bump it [08:00] Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully: Waiting for network configuration... network file: http://pastebin.com/DdsLLHBz [08:01] jamespage: so, that is currently ~710MB? [08:01] yeah [08:02] I would say target 725MB [08:02] as the max [08:03] odd that amd64 is more than 50MB bigger than the i386 max threshold [08:06] jamespage: i assume you saw, bug 725972 latest comment? [08:06] Launchpad bug 725972 in gnome-settings-daemon "gnome-settings-daemon crashed with SIGSEGV (dup-of: 554280)" [Medium,New] https://launchpad.net/bugs/725972 [08:06] Launchpad bug 554280 in gnome-settings-daemon "gnome-settings-daemon crashed with SIGSEGV in g_str_hash()" [Low,Expired] https://launchpad.net/bugs/554280 [08:06] jamespage: amd64 is probably bigger because of multi-arch? [08:07] err, bug 1017978 .. bad paste [08:07] Launchpad bug 1017978 in libfcgi "[MIR] libfcgi, ceph (radosgw)" [Medium,Fix released] https://launchpad.net/bugs/1017978 [08:08] Daviey: flip - that was only 17 minutes ago [08:08] fixing now [08:08] \o/ [08:08] although its OK to put radosgw into main; you can't actually use it ATM without a package from multiverse [08:15] Daviey, the test does add some extra for amd64 to accomodate multiarch - 30MB [08:15] so its 20MB bigger than that! [08:17] * jamespage melts his laptop for a bit building ceph [08:18] jamespage: let the cloud be with you. [08:18] still quicker using 4 cores + SSD [08:18] I have to open the window tho :-) [08:18] jamespage: Think of the trees! [08:42] I'm trying to get xen-tools on debian to debootstrap precise for me. Anyone happen to have an idea why the ubuntu guest freezes on boot like this? https://dl.dropbox.com/u/2468164/Screen%20shot%202012-09-12%20at%2010.41.11.png [08:46] Hi, I'm trying to find out which process is listening to the nfs port without much success, netstat gives me that the port is open and something is "LISTENING" but lsof -i doesn't reveal what process this is, what am I missing here? (see http://pastebin.com/eRuzwLtT) Thanks. [08:46] I managed to get another image booting, but had problems with xen barrier killing the disk. So I upgraded the debian xen hypervisor to the latest stable to get that issue fixed. Not sure if that upgrade relates to now killing my xen-tools instead [08:47] I'll just try dd the other working image and reconfigure it for now [08:53] <_ruben> karihre: use netstat -lp [08:55] _ruben: yep, I was sort of already there: http://pastebin.com/CApkN10Y , what does the - mean? [08:56] I'm using nfs4, just find it strange that in order for it to work, you only need port 2049 open (in firewall), yet I can't see what process is listening to this port..? [08:56] jamespage: hey.. did you try a build without dh_makeshlibs -n? [08:57] Daviey, yeah - just finishing now - there is a reason for the manual maintainer scripts but I think I have a neater way of doing it [08:57] i really wonder what part of the dh generated postinst it complains about [08:57] jamespage: using override? [08:58] Daviey, the ceph package has some .so's; I think I can use a -X to exclude those from being detected [09:00] ah cool [09:00] which means we can drop the maintainer scripts [09:00] testing that theory now [09:00] problem is that ceph takes ~30 mins to build [09:02] Okay I am getting this a bit strange output from netstat: http://pastebin.com/CApkN10Y , what does the - mean, indicating that no process is listening, yet something is listening to the port, I'm confused here..? [09:11] Do we have any Ubuntu Hardware Certified Suite / tool ? [09:11] Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully: Waiting for network configuration... network file: http://pastebin.com/DdsLLHBz [09:20] Eagleman: maybe the dhcp doesn't respond? [09:23] balboah any idea where to see that? [09:23] because i will get a respond in a few seconds with dhclient [09:47] packages.ubuntu.com can anyone open it [09:49] koolhead17: it's down for everyone, server issues on the Canonical side [09:49] oohok === mcclurmc_away is now known as mcclurmc [10:19] stgraber: When I add the rotate option to tail or head it's not picked up, Do any services need to be reloaded ? [10:20] *option rotate or timeout:1 aren't picked up as the failover to the second entry is very slow 5+seconds === Kiall is now known as zz_Kiall [10:30] Why is ubuntu hanging on every reboot, it will take about 3 minutes to boot succesfully: Waiting for network configuration... network file: http://pastebin.com/DdsLLHBz === zz_Kiall is now known as Kiall [10:37] Eagleman: in general ' bootchart' is a nice package to see your booting-process in detail as image [10:37] in this particular case: if noone onhere reacts on the problem, - consider searching your favorite search for the error-string - its a well known issue and the message should end in tons of forum hits [10:39] it will [10:39] but i ended up using a workaround [10:39] not fixing the issue [10:41] Eagleman, that would normally indicate that your network is not starting correctly during bootup; which version of Ubuntu do you see this on? [10:41] 12.04 server [10:41] everything works [10:41] thats the problem [10:42] even if i disable sleep in failsafe.conf ( the file which lets me wait ) [10:43] Eagleman, if you check in /var/log/upstart you might see some additional log information related to the network interfaces starting up [10:43] Eagleman: yep - my workaround wasnt a solution either - but a hack ....had the issue as well some month ago (but i dont remember the details) [10:45] A lot of information in /var/log/upstart [10:46] and why are they archived? [10:46] logrotate [10:47] and because you may need previous logs, for comparison, or so you can see what happened last time etc [10:48] Still everything works as it should [10:48] i doubt i will find anything [10:48] Hi, Do Ubuntu provides any hardware certification Test suite which can be performed locally and report logs to ubuntu? [10:54] I've added option rotate to /etc/resolvconf/resolv.conf.d/base and rebooted, When I dig for a dns entry I always get the same nameserver. Should they not rotate round robin? Does anyone know if the resolution of the timeout option can be decimal? === glebihan_ is now known as glebihan === cpg is now known as cpg|away === n0ts is now known as n0ts_off [11:04] <_ruben> karihre: ah, i think i know what's going on: you're most likely using the nfs server that resides in kernelland and not userland, so it doesn't show up as a (userland) process === zz_KristianDK is now known as KristianDK === n0ts_off is now known as n0ts [11:19] _ruben: ah, that seems reasonable [11:23] stgraber: /etc/resolv.conf wasn't a symlink, quick dpkg-reconfigure and it's all working now. [11:25] _ruben: thanks [11:57] adam_g/Daviey: ill upload quantum and horizon rc1 today === KristianDK is now known as zz_KristianDK [11:58] Daviey: the MIR should be ready for quantum with the work we put into it [12:00] \o/ === gary_poster|away is now known as gary_poster === zz_KristianDK is now known as KristianDK === KristianDK is now known as zz_KristianDK [12:27] I keep getting this msg [12:27] CPU0: Package power limit notification (total events = 1) [12:27] never seen it before until ubuntu, is this an issue? [12:38] hello how do you scan a lan network on ubuntu ? [12:43] Troloulol: nmap? [12:46] thx do you know full comand ? === zz_KristianDK is now known as KristianDK === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts [13:32] best snippet ever: [13:32] [ "$(dpkg --print-architecture)" = "amd64" ] && farch="$(dpkg --print-foreign-architectures)" && [ "${farch#*i386}" != "${farch}" ] && sudo dpkg --remove-architecture i386 && echo "ridded you of that needless i386" [13:37] New bug: #1049582 in ceph (main) "radosgw crash on armhf architecture" [Undecided,New] https://launchpad.net/bugs/1049582 [13:37] New bug: #1049620 in quota (main) "quota does not correctly report for quotas above 2 TB" [Undecided,New] https://launchpad.net/bugs/1049620 [13:37] New bug: #1049674 in awstats (main) "awstats : incompatible-java-bytecode-format with OpenJDK 7 as default-jdk" [Undecided,New] https://launchpad.net/bugs/1049674 === Kiall is now known as zz_Kiall === zz_Kiall is now known as Kiall [13:59] hallyn: ping === KristianDK is now known as zz_KristianDK [14:01] zul: here, but walking out - back in a few [14:01] hallyn: k [14:16] zul: 'sup? [14:16] hallyn: i totally forgot now :( [14:16] zul: yay it worked! [14:17] hallyn: ill remember it eventually [14:17] ok [14:20] hallyn: oh yes now i remember what happens if the block device is in both devices.allow and devices.deny [14:20] i keep getting this debug msg [14:20] 08:26 < grefter> CPU0: Package power limit notification (total events = 1) [14:20] anyone happen to know if that's an issue? [14:21] or just generic output? [14:21] zul: depends which you add it to last [14:21] zul: last one wins [14:21] it's a stupid, simple whitelist [14:21] New bug: #1049852 in multipath-tools (main) "package kpartx 0.4.9-3ubuntu5 failed to install/upgrade: dependency problems - leaving unconfigured (dup-of: 1049850)" [Undecided,New] https://launchpad.net/bugs/1049852 [14:21] New bug: #1049853 in multipath-tools (main) "package kpartx 0.4.9-3ubuntu5 failed to install/upgrade: dependency problems - leaving unconfigured (dup-of: 1049850)" [Undecided,New] https://launchpad.net/bugs/1049853 [14:22] so if i detach the detach the device i could put it in devices.allow and then remove the block from the container? [14:22] er...devices.deny [14:23] smoser: ^^^ [14:24] hallyn: im just trying to figure out a sane way to do the detach block device from a container [14:25] zul: yup, should work [14:25] anyone know where in the php5 package their documentation / release notes are? [14:25] (Quantal) [14:26] and then what happens when you have to add it again? hallyn ? [14:26] sorry to ask in here, but, you know, you *are* the server package people :P [14:26] TheLordOfTime: /usr/share/doc/php5 [14:26] ie, say he needs to add that same major minor? [14:26] you add it again to devices.allow? [14:26] it seems like the interface works, but its strange. [14:26] smoser: assuming yes [14:27] since devices.allow and devices.deny is a simple blacklist thingy [14:27] (i love my technical terms [14:28] hallyn, ? [14:28] is that right? [14:28] so: while(1) { add_to_devices_allow() ; add_to_devices_deny(); } [14:29] smoser: yes. it's a simple whitelist [14:29] add to devices.allow, it's added [14:29] add to devices.deny, it's removed (if it's there) [14:30] note, upcoming kernels this will change just a tinge. but for now, and since 2008, that's how it works [14:30] change as in how? [14:30] just curious [14:30] well, from a simple whitelist, to a 'default behavior' (allow or deny) plus exceptions (whitelist or blacklist) [14:30] ah ok [14:31] smoser/hallyn: so the thing i have in my mind is this [14:32] put the device in the devices.deny, rm the block device [14:33] smoser: sounds good? [14:35] what happens if the device is in use ? [14:35] (mounted or otherwise, a filehandle open) [14:36] smoser: you can keep using those [14:37] just as you can keep using mounted / even though it's on sda1 and that's not in your whitelist [14:37] only actions on the actual /dev node will fail [14:37] zul, so you will have to take care to deal with that. [14:37] i'm not sure how [14:38] smoser: agreed [14:38] i'm asusming the subsequent iscsi detach will fail? [14:38] hallyn, ? [14:38] ie, the host will be adding and removing the block device to the lxc container would un-attach the iscsi device that is backing it [14:38] smoser: im not sure what an iscsi detach entails [14:38] but that will surely fail if it is still in use [14:39] i'm not sure either [14:39] smoser: lemme play with it and ill get back to you === zz_KristianDK is now known as KristianDK [15:13] stgraber, around? [15:13] smoser: yep [15:13] i havent verified this in testing [15:13] but it seems to me that your merge of open-iscsi broke iscsi-network-interface.conf [15:14] it's not completely impossible that it did :) [15:14] as i dont think the initramfs is writing /dev/.initramfs/open-iscsi.interface anymore, but iscsi-network-interface.conf is still trying to consume it [15:14] it was more of a sync + re-apply relevant delta than a merge [15:15] (well, /run/initramfs/open-iscsi.interface) [15:15] hmm, ok, weird that it didn't break my system during testing... but should at least be pretty easy to fix [15:16] actually, shouldn't it be looking for /run/net-* instead of checking yet-another-custom-file? [15:30] hallyn: is there a way to determine if something is mounted in the container from the host? [15:31] zul: does cat /proc/pid/root/proc/1/mounts and ../mountinfo work? [15:31] should [15:33] hallyn: ill check [15:34] hallyn: just thinking ahead [15:35] zul: ok. pretty sure it's how i usually debug startups (i don't think about it much, just do it) so should work [15:35] thanks [15:51] New bug: #1049908 in lxc (universe) "Upstart control of lxc container instances" [Undecided,New] https://launchpad.net/bugs/1049908 [16:01] rm -rf cd qemu-kvm-1.2.0+noroms <- jinkeys that's not good [16:01] New bug: #1049914 in lxc (universe) "cannot use long form of '--name' to lxc-clone" [Undecided,New] https://launchpad.net/bugs/1049914 [16:01] New bug: #1049915 in nova (main) "Logrotate.d files do not have the compress option enabled" [Undecided,New] https://launchpad.net/bugs/1049915 [16:09] damn [16:09] mad bugs :x [16:11] can u join 12.04 with an ad ds on win2k8 ? [16:12] New bug: #1049926 in lxc (universe) "logging of init doesn't go to console" [Undecided,New] https://launchpad.net/bugs/1049926 [16:24] zul: smoser: i won't resort to this unless it fixes a bunch of subtle bugs, but i'm testing qemu-kvm 1.2 package right now. built locally and runs fine so far (starting heavy testing now), but about to push it to ppa:ubuntu-virt/virt-daily-upstream [16:27] I'm looking for a way to ask the ppa maintainer for precise php5, if he/she would update the php5 version due to a bug that impacts production ubuntu-servers (its fixed in newer ver of php 5.3). Anyone know the right/formal way to do this? [16:27] I cant find the maintainers on https://launchpad.net/php/main or the precise link from w/in there. [16:29] you file a bug report [16:30] rynop: look in the registry-drivers team, lots of names [16:30] https://bugs.launchpad.net/ubuntu/precise/+source/php5 [16:30] 56 active members, I'm sure starting a conversation iwth one of them [16:30] would get things moving a bit [16:30] ok thanks much [16:31] ikonia: looks like the bug has already been reported :) [16:31] https://bugs.launchpad.net/ubuntu/precise/+source/php5/+bug/1014044 [16:31] Launchpad bug 1014044 in php5 "PHP5-FPM not reporting errors to web server (nginx)" [Medium,Fix committed] [16:32] ikonia, is it typically pretty 'fast' from the time its in 'fix-committed' to 'fix-released' state? like weeks/months? i know its prob dependent on the time the maintainer has [16:33] hallyn: cool...would be good for quantal+1 [16:35] zul: well, that's up for debate. this version is strict upstream, not debian [16:35] zul: if we're going to go with debian pkgs (which would be nice), i need to change the package layout to completely match debian's - qemu, qemu-kvm, and all [16:35] (might require changes to qemu-linaro) [16:36] erp :) [16:36] and i'm getting a little worried about the debian qemu community (not qemu-kvm, but qemu-kvm is going away anyway) [16:36] so yeah, i need to think about it and we ned to talk about it [16:37] if we don't follow debian, then we need to try and work with upstream to have -stable trees we can collaborate on [16:37] eh, well, i'd rather follow debian. i'm going to spend a day or two in october trying to hash that out === KristianDK is now known as zz_KristianDK [16:43] if you modify the preseed file on the ubuntu iso will this modified file be used during the install process? [16:46] jamespage: do yo uknow of a way/place to get full stdout/stderr log output from utah? [16:53] smoser: Daviey ping === mcclurmc is now known as mcclurmc_away === matsubara is now known as matsubara-lunch [17:07] jdstrand: when doing 'uvt new -r -v -t desktop oneiric amd64 test', when it fails with 'ssh command failed' (but the vm is up), what is usually the proper fix? [17:08] i've got 'nameserver 192.168.122.1' in resolv.conf... [17:09] oh feh, is it bc it's not running under ssh-agent? === zz_KristianDK is now known as KristianDK === n0ts is now known as n0ts_off [17:46] ah yeah that worked [17:48] im having a problem where my server doesnt seem to be recognizing my authorized keys. I've added id_rsa.pub and i'm still being asked for a password. [17:58] marshall, most probably too laxist permission on the private key [18:06] marshall: are you confusing 'password' with 'ssh private key passphrase'? [18:12] New bug: #1049986 in horizon (main) "Openstack dashboard's Ubuntu theme needs to be re-enabled and refreshed." [Undecided,In progress] https://launchpad.net/bugs/1049986 [18:16] New bug: #1049987 in lxc (universe) "lxc-cloned container breaks if source is later destroyed" [Undecided,New] https://launchpad.net/bugs/1049987 === matsubara-lunch is now known as matsubara === cpg|away is now known as cpg [18:48] adam_g: quantum is building with the testsuite im going to upload it [18:52] zul: where is it building? [18:52] adam_g: locally in the chroot [18:52] zul: can you push the changes that enable it to the -proposed branch and build it via jenkins first? [18:52] adam_g: sure [19:01] New bug: #1050001 in lxc (universe) "API shutdown(timeout=X) call always tries to call stop(), spewing error messages to the console when the container is already stopped" [Low,Triaged] https://launchpad.net/bugs/1050001 [19:03] adam_g: builds fine [19:04] zul: woot [19:04] adam_g: uploading [19:04] zul: beware there will be binary-new with that upload. [19:05] adam_g: ack [19:16] New bug: #1047404 in quantum (universe) "quantum-server upstart script fails to start" [High,Fix released] https://launchpad.net/bugs/1047404 [19:16] New bug: #1047560 in quantum (universe) "quantum-server (and others) cannot be removed." [High,Fix released] https://launchpad.net/bugs/1047560 [19:21] adam_g, here now [19:27] smoser: openstack components started to specify cliff>=1.2. we currently have python-cliff 1.1.2 in archive. thoughts on a FFE to bring python-cliff up to date (its only one release off)? [19:28] fun. [19:32] New bug: #1049177 in isc-dhcp (main) "isc-dhcp-server apparmor profile should have include ".d" " [Medium,In progress] https://launchpad.net/bugs/1049177 [19:37] jdstrand: hey quantum should be fine now [19:42] sbeattie, if i install a file into apparmour dir (#include ) should my postinst run sudo apparmor_parser -r ? [19:42] er... drop sudo. but you get the idea [19:42] do i need to do that or does some other magic handle that [19:54] hallyn: howdy!! I was wondering if virsh needs to be shipped with libvirt-bin, or can it be shipped outsite it? [19:57] roaksoax: uh. i suppose it could be shipped in a separate package depending on libvirt-bin. but why? === cmagina-lunch is now known as cmagina [19:57] roaksoax: oh well i guess i can guess. [19:57] (suppose it should be able to just depend on libvirt0) [19:58] hallyn: cause for example, maas uses virsh for power contorl... but it make sno sense to install libvirt-bin and related dependencies just to be able to use it [20:00] roaksoax: should be doable i think [20:00] hallyn: cool thanks! [20:01] New bug: #1050021 in autofs (main) "autofs failed to mount .hidden" [Undecided,New] https://launchpad.net/bugs/1050021 [20:03] roaksoax: note it brings is out of step with debian (no biggie, we're nto following them) and would require ffe for q [20:03] zul: ^ you'd be interested [20:04] hallyn/roaksoax: yeah sure [20:16] New bug: #1050027 in maas (main) "apt-get remove --yes doesn't automatically deconfigure and purge the database " [Undecided,New] https://launchpad.net/bugs/1050027 [20:17] matsubara: ping [20:17] roaksoax, hi Andres [20:18] matsubara: howdy.. if you have the chance... do you think you can check any other package that uses dbconfig-common to see if you pass --yes does not prompt any questions? [20:18] matsubara: i have been trying to not get that showed.. but couldn't figure out a way to do it [20:19] sbeattie, around? [20:19] i need some apparmor help [20:21] roaksoax, ok. I'll take a look, don't know much about dbconfig-common [20:33] * slyboots face melts into a pile of goo "Anyone familure with setting up NFS shares?" [20:33] I can see/mount them, but permissions and UID/GID's are all screwed up === medberry is now known as med_ [20:44] slyboots, do you have statd running? [20:44] I dont know whath that is, so .. odds are "no" [20:45] My Ubuntu-server is actually only the client however [20:46] try changing statd=yes in /etc/default/nfs-common and the run `service statd start` [20:47] For the client..? [20:47] yes [20:47] Okay.. [20:49] Im not sure what that was supposed to do :P [21:27] adam_g: ill get swift out tonight as well [21:28] zul: cool === matsubara is now known as matsubara-afk === metasansana is now known as deku_baba === deku_baba is now known as metasansana [23:34] hi guys i installed phpmyadmin on my ubuntu-server but the problme it wont open or load after installed any idea..? [23:35] anyone can help [23:35] pelase [23:37] Daviey: ping there is some new binaries for quantum in the last upload, can you use your magic powers please? [23:38] jdstrand, sbeattie mdeslaur anyone able to help me with some apparmor trouble? [23:38] zul: Are they kosher ? [23:38] Daviey: yah [23:38] Daviey: its just some new plugins [23:39] smoser: I am in a meeting atm. sbeattie could probably help more, but I'll ask-- what's up? [23:39] zul: no Breaks/Replaces required? [23:39] http://paste.ubuntu.com/1201554/ [23:39] Daviey: nope [23:39] Hi, I 've bought some old machines installed windows. Now I want to install ubuntu maas on them. I did the following things: 1. get a 12.04 iso, burn it into usb. 2. use this usb on machine A to install a maas server. 3. use this usb on machine B to "install from a maas server" 4. Machine be shutdown immediately, but I can see the node enlisted on http://machineA/MAAS. 5. I clicked accept & commission for that node. But it [23:39] smoser: jjohansen should be able to help (i have to vanish again shortly; stupid fairy godmother) [23:39] Daviey: adam_g ^^^ [23:40] jdstrand. i run that, (creating a apparmor.d/dhcpd/maas file) and then trying to use the relaxed permissions [23:40] but i'm getting [23:40] this is my error log [23:40] http://pastebin.com/grAX8CXg [23:40] [466072.226852] type=1400 audit(1347493086.507:31): apparmor="DENIED" operation="capable" parent=20318 profile="/usr/sbin/dhcpd" pid=20339 comm="dhcpd" pid=20339 comm="dhcpd" capability=1 capname="dac_override" [23:40] hi guys i installed phpmyadmin on my ubuntu-server but the problme it wont open or load after installed any idea..? [23:40] sbeattie: oh sure your fair god mother bails you out again [23:40] this is my error log---------------> http://pastebin.com/grAX8CXg [23:40] smoser: start it as root [23:40] http://paste.ubuntu.com/1201556/ [23:40] (i run 'sudo ./go') [23:41] the profile loads correctly, and if i put something bogus in the 'maas' file, it complains [23:41] so i know its getting loaded [23:41] but my content must just be wrong [23:42] cap_dac_override indicates that the dac permissions on something are wrong, and that the root process is overriding the DAC permissions [23:42] zul: upstream Licence "websockify is licensed under the LGPL version 3" .. but d/copyright says GPL-3? [23:42] sbeattie, too many big words. can you dumb it down? [23:43] Daviey: damn it ill have a look at it tomorrow morning need to deal with cranky child [23:43] zul: yeah, i'm too tired to full go over it anyway. [23:43] smoser: dac permissions == regular file xugo perms [23:43] no-- dhcpd drops privs differently than in the past, so you have to start it the same way that upstart is starting it [23:43] smoser: ^ [23:43] that is how upstart starts it [23:43] smoser: oh, no [23:44] smoser: I remember, your /run/maas/dhcp /var/lib/maas/dhcpd don't have the right perms [23:44] smoser: look at the standard dhcp perms and mimic those in your script [23:44] Daviey: vishy has some changes that he did for it as well which i want to incorperate [23:45] Daviey: anyways im out of here [23:45] hm.. [23:45] maybe because /run/maas is root:root, but /run/maas/dhcpd is dhcpd:dhcpd ? [23:46] ah. i see. i think [23:46] smoser: I forget off hand-- look at the upstart job for what it needs to be [23:47] GUYS..? [23:47] HELP [23:47] http://changelogs.ubuntu.com/changelogs/pool/main/i/isc-dhcp/isc-dhcp_4.2.4-1ubuntu7/changelog [23:47] smoser: ^ look at 4.2.4-1ubuntu4 [23:48] smoser: sorry for only half-attending to you... [23:49] jdstrand, thank you [23:49] http://paste.ubuntu.com/1201566/ [23:49] yeah, leases file needs to be root:root but i was making it dhcpd:dhcpd [23:50] smoser: cool, yeah, that was the problem with the upstart job before. gald it worked out :) [23:50] glad even [23:52] ruben23, like always, start with the first issue, and move on [23:52] PHP Warning: require(): open_basedir restriction in effect. File() is not within the allowed path(s) [23:52] fix that [23:55] patdk-lap: yes what you can suggest on that..? [23:56] google? [23:56] I really can't mind-read your server