/srv/irclogs.ubuntu.com/2012/11/12/#ubuntu-server.txt

unclezipperHey, could anyone here help me out? I'm having a bit of a problem with OpenSSH.00:19
=== Ursinha-afk is now known as Ursinha
=== n0ts_off is now known as n0ts
_KaszpiR_just state your problem, we're not reading in minds...yet01:18
_KaszpiR_sigh, split view ftw01:18
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== IdleOne is now known as ElliotNess
=== ElliotNess is now known as IdleOne
=== smw_ is now known as smw
=== smb` is now known as smb
lifelesshallyn: you might enjoy https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/107783808:16
uvirtbot`Launchpad bug 1077838 in qemu-kvm "qemu-nbd -r -c taints device for subsequent usage, even after -d" [Undecided,New]08:16
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
sorenlifeless: Yeah, the nbd driver doesn't seem to clear the flags of the nbd_device struct on disconnect.08:28
lifelesssoren: or alternatively set them to the desired state on connect08:29
lifelesssoren: which I suspet is more robust; doing a narrow fix now08:29
sorenlifeless: Hm. The NBD_SET_FLAGS ioctl doesn't seem to be handled by the kernel at all.08:35
sorenlifeless: ...because qemu does try to reset the flags on init, but AFAICT, the ioctl is ignored.08:36
lifelesssoren: I can't see any code to reset BLKROSET on init at the moment, except when RO is requested.08:38
lifelesssoren: I'll have a test package in a second to see if this works08:38
sorenlifeless: Oh, you're right.08:40
sorenblockdev --getro /dev/nbd208:40
soren108:40
lifeless:)08:40
sorenI maintain, though, that the flags local to the nbd driver also don't seem to get reset. :)08:40
lifelessI don't disagree08:41
lifelessthere may be security implications in there though08:41
lifelesswhich is why I think resetting on connect is better than resetting on disconnect08:41
lifelessI bet LP just corrupted the mime type...08:44
lifelessno, whew.08:44
lifelesssoren: patch attached08:45
lifelesssoren: are you testing the patch ?09:01
lifelesssoren: I'm just fighting with my vm .. qemu makes gcc go large:09:01
lifeless  CC    x86_64-linux-user/target-i386/translate.o09:01
lifelesscc1: out of memory allocating 11522544 bytes after a total of 101806080 bytes09:01
Davieymikal: Hey, you can approve an openstack CLA membership, right?09:08
Davieylifeless: nice, you attached a patch.  As you identified, hallyn would be the best person to revew it.. but he probably won't be around today.09:11
lifelessDaviey: patch is bust, fixing :)09:11
Daviey(also, a dsc and changes doesn't really help.)09:11
Daviey(debdiff is plenty)09:11
lifelessDaviey: they were advance defense against the crazy triagers09:11
Davieylifeless: the server team are indeed crazy.09:13
lifelessI had my senses reversed.09:13
lifelesssoren: ^ switch the = 0 and = 1 lines, and it should work09:14
lifelessDaviey: :P09:14
mikalDaviey: oh hi09:22
lifelessDaviey: would love to see this backported to quantal & precise; should be pretty low risk09:22
mikalYeah, that's one of the things I normally do09:22
mikalI'll take a look at the queue now09:22
mikalDaviey: who was asking for approval? I'll do the three in the queue now...09:25
Davieymikal: yolanda has been wanting it since Friday09:26
Davieylifeless: yeah, looks reasonable.. I'm sure hallyn will help it along.  Out of itnerest, what were you trying to achieve when you hit this?09:27
lifelessDaviey: I use qemu-nbd to extract the kernel and ramdisk from a qcow2 ami in openstack, so they can be passed to the NTT baremetal code, which PXE boots every time09:27
lifelessDaviey: avoids folk needing to manually configure it09:27
mikalI just approved Yolanda09:28
mikalIts super manual at the moment09:28
lifelessDaviey: but, I didn't want the image getting futzed with by ext4 journal replay or anything, so I passed -r09:28
mikalIt takes one of two or three people to notice09:28
mikalThey're working on automating it09:28
lifelessDaviey: separately, we use qemu-nbd when putting ami's together... and I noticed this when the put-it-together code depramed its toys without warning09:28
lifelessDaviey: or - https://plus.google.com/105660309458564946897/posts/Qpwi9LUDcAN :)09:31
Davieylifeless: erm, isn't this what libsomethingsomething was invented for?09:34
Davieylibguestfs?09:34
lifelessDaviey: if I could find said thing, sure.09:35
lifelessDaviey: well, presumably it will run smack bang into the same thing, or would need fixing to use readonly block devices, and then run into the same thing09:35
lifelessDaviey: (thanks for the pointer, may simplify our code)09:36
lifelessDaviey: I knew something was out there but had 0 luck remembering the name at the relevant time09:36
jotterbot1234Hello everyone, does anyone have any experience with Hardware RAID here?09:38
lifelessjotterbot1234: assume the answer is yes09:38
lifelessDaviey: so - guestmount -r, should in principle hit the same bug.09:39
jotterbot1234indeed I do assume so09:39
jotterbot1234Am I able to post a link to serverfault with a problem I am having ?09:39
jotterbot1234does that violate any channel rules?09:40
lifelessnot that I'm aware of09:40
sorenlifeless: Why would it hit the same bug?09:42
sorenlifeless: It doesn't use nbd at all.09:42
sorenlifeless: It fires up a VM, attaches your disk image, and marshalls requests from your application through to a deamon running in the VM.09:44
jotterbot1234http://serverfault.com/questions/447682/raid-50-24port-fast-writes-slow-reads-ubuntu09:46
jotterbot1234Any help with this would be greatly appreciated!09:46
=== edamato-afk is now known as edamato
lifelesssoren: *blink*09:49
lifelesssoren: that is not at all how I imagined it would work09:49
lifelesssoren: that said, what code does kvm use for dealing with qcow2? - I guess it manages it without a kernel block device?09:51
sorenlifeless: I can relate.09:51
sorenlifeless: Yeah, it's all userspace. qcow2 originated in qemu.09:51
lifelessyah, I knew that :>09:51
sorenlifeless: I can appreciate the fact that it keeps everything neatly in userspace. I can also appreciate the fact that it probably protects your from a bunch of security problems as a result.09:52
soren...but it still just feels... wrong.09:52
lifelessthe guestfs-faq is very ... opinionated09:53
lifelessif I wasn't so keen on nuking openstack disk param injection, I'd consider porting it to use libguestfs if it doesn't already.09:54
lifeless'Ubuntu .. Canonical decided to change the permissions on the kernel so that it's not readable except by root.  This is completely stupid, but they won't change it... So09:55
lifeless           every user should do this:09:55
lifeless            sudo chmod 0644 /boot/vmlinuz*09:55
lifeless'09:55
lifelesssoren: *very* opinionated :)09:57
lifelessunless I'm missing something though, richard jones is assuming root access in the first place09:59
lifelesswhich kindof misses the point, doesn't it ?09:59
=== n0ts is now known as n0ts_off
=== mcclurmc is now known as mcclurmc_away
=== DarkG is now known as TonyL
sorenlifeless: Where is he assuming that?10:38
=== disposab1e is now known as disposable
=== mcclurmc_away is now known as mcclurmc
=== cpg is now known as cpg|away
taalas1Hi, I am currently trying to provide an Ubuntu 12.04.1 Server network install image. I do ave a working PXE environment using tftp and nfs exports. This works very well for Ubuntu Desktop, but following the same configuration for server the installation stops and says that it cannot find the installation medium (CDROM). Is there anything I should be doing differently when netbooting server install?12:12
=== n0ts_off is now known as n0ts
rbasakUsing NFS sounds a bit odd to me. What are you using NFS for, and is there a particular reason you went down that route?12:14
taalas1I am using an NFS export to provide client access to the installation files. Is there a better way I should be doing this?12:16
rbasakThe usual way is to PXE/TFTP for the d-i netboot kernel and initrd images, supply a preseed URL on the kernel command line, serve the preseed over HTTP and then the installer will fetch everything else directly from an archive mirror over http. You can run your own mirror or proxy cache there if you want, using the preseed to point to it.12:20
rbasakAlso look into MAAS, though I'd recommend running 12.10 MAAS as there were major improvements over the 12.04 version12:20
rbasak(you can still deploy 12.04 servers)12:21
taalas1fetching the packages from an official mirror would be fine. the main reason I am doing this is, that I need a diskless install12:24
taalas1Is there any article you know of that would explain the needed steps in detail (where to get the netboot kernel, etc)12:25
rbasakI'm not sure12:26
rbasak(of an authoritative place where this is documented)12:27
rbasakTo see it in action install maas from 12.1012:27
rbasakIf that does what you need then great12:27
rbasakIf not, http://archive.ubuntu.com/ubuntu/dists/precise/main/installer-amd64/current/images/netboot/ubuntu-installer/amd64/ for the netboot installer kernel/initrd12:27
rbasakAlso https://help.ubuntu.com/12.04/installation-guide/amd64/appendix-preseed.html12:29
taalas1great, thank you. I will look into both options12:29
taalas1Do I have to use preseeding, or can I simply boot the netboot and then supply the source manually? which source would that be for 12.04.1 server?12:30
rbasakWithout preseeding it'll work fine, but you'll have to answer all the questions manually. Preseeding just pre-answers all the questions for a fully automated install12:30
rbasakWhen netbooting, the 12.04/12.04.1 distinction doesn't really matter. You'll always get the latest from precise-updates12:31
rbasakIt'll default to the correct source12:32
taalas1thank you very much12:32
rbasakWhen you netboot you basically just get what you'd get if you had booted the CD manually. The installer will just do the right thing12:32
rbasak(there are some minor differences but I don't think they'll matter to you)(12:32
taalas1rbasak: Just wanted to let you know that the netboot option worked flawlessy, thanks again. Will look into MAAS, too, but for now this did exactly what I wanted to achieve13:24
taalas1rbasak: I did get the initrd for this netboot from the server install iso. At later stages of the installation it is possible to also choose desktop components. Can I use this netboot to install any flavor of Ubuntu? Also, is there any difference between server and desktop except for these package options?13:24
rbasaktaalas1: the only differences between server and desktop are install method and package selection13:25
rbasak(AFAIK. I hope I'm not missing something)_13:26
taalas1rbasak: I see. So I could use this PXE Netboot for Desktop clients as well...that's very neat :)13:26
janetI wonder how long it would take to run an internet-wide port scan13:57
TheLordOfTimeinfinitely long/.14:00
zulalrighty libvirt 1.0.0. uploaded14:23
=== Shehrazad is now known as ElixirVitae
PooperHi all, I created a software based array of disks (4x3TB) using mdadm RAID 5. I then used mkfs.ext4 to partition with the following parameters:  -b 4096 -E stride=128,stripe-width=384... Now that the array is mounted, when I transfer files to it the md5sum of the files changes with respect to the original.... Any ideas as to why this is happening?15:12
xnoxanything interesting in the /var/log/syslog?15:13
xnoxor dmesg?15:13
Pooperxnox, here is a snippet of dmesg http://paste.ubuntu.com/1353328/15:17
Pooperxnox, /var/log/syslog looks fine15:17
Pooperxnox, any ideas?15:19
xnoxPooper: there is not enough details, but there have been reports of checksum mismatches on files on linux-raid mailing lists. I have not seen / reproduced them.15:21
xnoxbut it sounds like the best place for you to seek expert advice.15:22
Pooperxnox, but is this an issue with GPT partitions?15:22
xnoxthat. should not matter at all.15:23
smoseradam_g, jamespage gwd is interested in trying to get openstack xen/xcp path installable as juju charms15:38
smoser(whoohoo!)15:38
smoseri pointed him at http://bazaar.launchpad.net/~gandelman-a/+junk/juju-deployer/files15:38
smoserbut i'm sure there is omething better.15:38
smoserhe's hoping to basically go from maas to xen/xcp based openstack15:39
gwdadam_g, jamespage: So glancing through the "deployments.cfg", it looks like I might want to take the "nova-compute" charm and add some new "virt-type" options to it...?15:40
jamespagesmoser, gwd: no adam_g this week :-)15:41
jamespagegwd: thats a good place to start15:41
jamespagenova-compute is the nux of the openstack charms in terms of hypervisor15:42
jamespageso its where xen should be integrated...15:42
=== n0ts is now known as n0ts_off
=== matsubara is now known as matsubara-lunch
jamespagegwd: I actually see ""xen") compute_pkg="nova-compute-xen";;" already in the compute charm16:08
jamespagegwd: but I know its never been tested....16:08
gwdjamespage: Ah, right -- hmm, I can check it out, but there's no way I can actually get a test setup to test a whole open-stack rig top to bottom.  How hard would it be for someone to give that a quick smoke-test?16:10
ninjixwhy am I getting "user does not match any options" with Quantal when I try 'sudo nova-manage user admin user1' ?16:14
ninjixI'm following 12.10 serverguide docs on Folsom install16:15
* RoyK wonders why on earth 32bit desktop is the default for downloads...16:19
ninjixRoyK: agreed16:19
RoyKubuntu+unity is rather on the heavy side, so using a 32bit machine is likely to be dead slow for that anyway16:20
ninjixahh... looks like the official 12.10 server pages for ubuntucloud need to be updated16:23
ninjixcurrent pages are referencing essex commands instead of openstack folsom16:24
ninjixsee: https://answers.launchpad.net/nova/+question/20490516:24
=== n0ts_off is now known as n0ts
=== matsubara-lunch is now known as matsubara
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== matsubara is now known as matsubara-brb
=== n0ts is now known as n0ts_off
=== mcclurmc is now known as mcclurmc_away
lifelesssoren: walking the kernel memory to determine its symbol table18:06
lifelesssoren: kmem isn't readable w/out root, right ?18:06
RoyKlifeless: don't think so, no18:16
RoyKimho that'd be a jolly bad idea18:17
=== matsubara-brb is now known as matsubara
=== pcarrier_ is now known as pcarrier
lifelessRoyK: exactly ;)18:24
Davieysmoser: do you have capacity to look into bug 1064835?  Looks like the upstream commit doesn't really fix the issue?18:25
uvirtbot`Launchpad bug 1064835 in python-keystoneclient "[SRU] keystoneclient fails on SSL certificates that work for other services" [Critical,Fix committed] https://launchpad.net/bugs/106483518:25
Daviey(verification failed of quantal sru)18:25
smosersuck.18:26
Davieysmoser: if you don't, that is also ok18:27
smoserdai'd like to defer on it. i was chasing other fires at the moment. raring cloud images are not booting. :-(18:29
smoserand i keep wanting to get a raring cluod-inti upload18:29
PineappleCLockWould setting up pptpd on my server mess with DNS? I can't seem to get ubuntu to use my DNS servers, but querying them manually works fine via nslookup18:35
patdk-wkPineappleCLock, are you using 12.*?18:42
PineappleCLockyes 12.04 LTS18:42
patdk-wkyou aren't editing resolv.conf are you?18:43
PineappleCLocknope, I added "dns-nameservers" to the end of /etc/network/interfaces and restarted networking18:44
PineappleCLockI can see that resolvconf has the correct lines in resolv.conf18:44
PineappleCLockthe only networking change was to allow pptpd to work and that was adding a iptables masquerading command to rc.local per a howto18:45
PineappleCLockI can ping IP addresses just fine like google.com, but DNS is kaput :\18:46
PineappleCLockI know it's not that because even if I flush iptables, I can't resolve hostnames... very weird18:48
smoserSpamapS, around ?18:48
smoserlooking for feedback on bug 105719518:48
uvirtbot`Launchpad bug 1057195 in cloud-init "cloud_config apt_proxy has no option to specify HTTPS or not" [Medium,Incomplete] https://launchpad.net/bugs/105719518:48
PineappleCLockAny thoughts on why DNS client would not work at all, even though the nameservers are properly configured18:57
smoserutlemming, did you make any progress on raring images boot issues ?19:26
utlemmingsmoser: not yet....hopefully soon19:27
=== cpg|away is now known as cpg
Fatguyanyone know why I'm only able to modify properties for one of my network cards?20:00
Fatguywhy would my secondary NIC be locked up so that I can't modify the properties in the network manager (GUI)?20:04
patdk-wkheh? you do know this is ubuntu-server?20:04
patdk-wkthere is no gui20:04
Fatguyim using 12.10 server with desktop GUI installed20:04
Fatguyi would use the commands if i knew what they were but im just getting into the development for personal and business cloud vpn's and use the GUI for ease of use20:05
patdk-wkwell, network-manager is a total unknown in here20:06
Fatguyok, do you know what I would have to do in terminal to change the properties of my secondary NIC?20:06
Fatguymy primary is eth1 and i have it set where i need it but the secondary eth0 wont let me modify anything, at first it wouldn't work at all but I finally got it enabled20:07
Fatguyall i need to do is modify the ipv4 address to static and change the gateway and dns info. what would I have to edit to do that?20:09
Fatguylooks like linux is getting just about as useless as windows, #ubuntu sent me here for some help but noone here knows how to modify network settings...guess ill have to find help elsewhere20:12
patdk-wkheh20:12
philipballewWhats the best web server if I only have 128 mb's of ram?20:14
Erik_Dphilipballew: is nginx too much?20:23
philipballewErik_D, I have not tried nginx,20:25
RoyKphilipballew: apache will probably be heavy, but nginx should work20:25
philipballewI was considering that or lighttpd20:25
RoyKlighty isn't that good20:25
philipballewIts just my wp blog that feeds to the planet20:25
philipballewso unless I put a blog title up like "Ubuntu sucks" noones ever gonna visit20:26
RoyKlighttpd is rahter old, nginx is better20:26
philipballewalright, and the repos version id good enough?20:26
RoyKshould do20:27
philipballewalright. Thanks for the confirmation.20:27
philipballewpeace20:27
milestonehi folks i have a problem with a precise server, which hangs after printing Running /scripts/init-bottom20:28
milestonethere does not seem to be an error20:28
milestonei have let the machine run for a day and still no luck20:28
milestonewhat is happening after /scripts/init-bottom ?20:28
pseudonymousA good reference for upstart ? Specifically I'm looking to understand how I disable services from starting on boot20:37
FroMasterRunning Ubuntu 12.04.1 on ESX 5.1 and wondering if i should install open-vm-tools (via apt-get) or vmware-tools (via cdrom/compile). Thoughts/suggestions?20:41
jjcmFroMaster: doesnt hurt to compile20:42
jjcmbut the vmware proprietary tools will offer more features20:43
=== cpg is now known as cpg|away
=== cpg|away is now known as cpg
epistememorning everyone. I'm experiencing an issue with vsftpd where if i connect using a local user account i get the message that the login is incorrect. I have overly checked that i was entering the username and password correctly. and i do have local user enabled. Anyone else having this issue or knows how i can fix it? TIA21:06
pseudonymousQuestion #2: Do people run Ubuntu LTS for their servers or Ubuntu ? Is there any distinction, security-wise ?21:10
genii-aroundpseudonymous: http://upstart.ubuntu.com/cookbook/21:21
ScottKpseudonymous: There's no distinction security wise.21:22
pseudonymousdamned be all the fragmentation. Sometimes it seems to me that FreeBSD's biggest boon is that there's no distribution hell to consider. Why can't base things such as service management be agreed upon ? Why are most proposals unnecessarily complex ? Grrr.21:27
* ScottK thought FreeBSD's biggest boon was the lack of kernel features.21:31
lifelessDaviey: so when is hallyn around :>21:33
Davieylifeless: when it's not a US Holiday :)21:36
Daviey(he did check in earlier, but he's out right now.)21:37
lifelessDaviey: ah :)21:55
=== acidflash_ is now known as acidflash
lifelesshallyn: thanks ;)23:12
=== cpg is now known as cpg|away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!