/srv/irclogs.ubuntu.com/2012/11/20/#ubuntu-server.txt

keithzgsarnold: no, there's a separate, unmanaged network for the iscsi host and clients.00:00
keithzgall the normal addresses are 10.1.x.x, and the iscsi ones are 10.0.x.x00:01
sarnoldkeithzg: ah :) good, that should be far easier to do.00:01
sarnold.. to the point of making me wonder why it doesn't just do that already?00:01
keithzg...yeah that's what's confusing me. Suddenly when I want to ping any host, for example, it's trying to ping from the unmanaged iscsi network.00:02
=== cpg|away is now known as cpg
sarnoldkeithzg: 'ip route list' will show you the routing table, perhaps all you need to do is move the 'default' route to a different gateway?00:05
keithzgsarnold: yeah, that makes sense, right now it's showing "default via 10.0.0.1 dev br1  metric 100" and should be 10.1.etc dev br000:06
* keithzg can't seem to find in the documentation for "ip route" how to change that00:06
lvmerI've been reading a bunch of security tutorials, but what is the best way to shield my LAN ubuntu server from internet traffic / etc.00:07
sarnoldkeithzg: that's the anoying thing; back in the day when you wrote all your own ifconfig and route commands fixin these things was easy. now you've got to find the right incantation in /etc/network/interfaces to get done what you want.00:07
lvmerdo I have to like go to a library with a laptop & nmap my server's IP address?00:07
sarnoldlvmer: step 1: netstat -anp   will show you what is open and which programs have those sockets open00:08
sarnoldlvmer: step 2: install ufw, it'll make configuring firewall really easy00:08
lvmersarnold: I have shorewall. Should I use ufw too?00:09
sarnoldlvmer: step 3: configure applications to only listen on interfaces you want them to -- sometimes you only want them to listen on 10.x or 192.168.x and sometimes you want them on *00:09
sarnoldlvmer: nah, one firewall thingy is enough.00:09
sarnoldufw is just easy enough that people'll use it. :)00:09
sarnoldlvmer: I also like to make sure tha every program that listens on a network socket is confined by apparmor; the apparmor-utils package tool 'aa-unconfined' makes it easy to see which programs are listening but not confined.00:10
sarnoldkeithzg: that almost sounds like incorrect network masks ..00:10
lvmersarnold:  aaaah all I've done with apparmor  is $ sudo apt-get install apparmor-profiles   lol00:11
keithzgsarnold: could be, I'm fairly dumb in regards to those specifics; I have both interfaces set for netmask 255.255.0.000:12
sarnoldkeithzg: hrm. that sounds like it fits what you wanted in the first place. :/00:13
keithzgsarnold: so I got it right? I guess this is one of those perverse debugging moments where finding out one *hasn't* made a mistake is disappointing!00:14
sarnoldkeithzg: well, obviously osmething is slightly wrong somwhere :) you've got the wrong results. I'm surprised though that it sounds to me like you should be fine.00:16
keithzgsarnold: yeah, it's quite the conundrum00:20
sarnoldkeithzg: can you pastebin the whole interfaces file? It might be overkill to the right person, but I'm not sure what specificxally to ask for. :)00:21
keithzgsarnold: http://pastebin.com/dagKBUEw00:22
keithzgthere's probably some weird interactions with whatever systems the historical sysadmin of this infrastructure has set up over the years00:23
sarnoldkeithzg: okay, I know nothing of the bridge stuff :) SO, with that caveat out of the way, the 'broadcast' addresses look incorrect; they should probably be 10.1.255.255 and .... hrm.00:24
sarnoldkeithzg: is the 10.1.* a hole punched out of the middle of the 10.* range?00:24
sarnold.. or are there two ranges, 10.1.* and 10.0.* ?00:24
keithzgsarnold: in *theory* it should be two ranges, 10.1.* and 10.0.*00:25
keithzgI'm tempted to just change the iSCSI addresses all to an entirely different range, though, see what that accomplishes00:25
sarnoldkeithzg: okay; then the 10.255.255.255 ought to change to 10.2.255.255, the 10.255.255.255 ought to change to 10.0.255.255, and I think you need to remove the 'gateway 10.0.0.1' line completely; two gateways configured in one file is probably just asking for trouble.00:26
keithzgsarnold: yeah I actually commented out the second gateway line recently, but it didn't seem to make a change so I figured I'd just paste the file as it had been for longer.00:27
sarnoldhehe00:27
sarnoldgood debugging instinct. :)00:28
shtihi everyone. does anyone know what the maximum amount of IPv6 addresses I can allocate on one system are? is it limited by memory?00:28
sarnoldshti: as far as I know, limited by memory; thousands ought to be doable on nearly anything; I'm not too sure about millions, but one hopes you could find out overnight :)00:30
shtii figured as much, thank you00:31
keithzgsarnold: thanks! that, along with a few other pieces of fiddling with other things that were wrong or conflictingly configured, seems to have solved nearly everything. Now I just need to tackle the actual iSCSI part . . . gulp.01:00
sarnoldkeithzg: woot! :)01:01
sarnoldgood luck there. that thing seems _huge_...01:01
=== fenris is now known as Guest34244
=== Gallomimia_ is now known as Gallomimia
=== fenris is now known as Guest9079
=== micahg_ is now known as micahg
lvmersarnold: I don't think apparmor even runs on startup. But I didn't find anything 'unconfined.'  I only found 'enforce' and 'complain.'03:25
sarnoldlvmer: aa-status will give you details on what's running..03:26
lvmersarnold: ops. I made a mistake. sshd & apache2 are 'not confined'03:26
sarnoldyeah, confining sshd requires administrator decisions03:26
lvmersarnold: hum.03:27
sarnoldand apache2 is so wide open that it is nearly impossible to provide a pre-written profile for it.03:27
lvmersarnold: hum.03:27
lvmersarnold: I installed both my servers the same way, but I'm thinking now... I only want samba on (1) of them. & I'll keep the other with everything to just fool around03:27
lvmersarnold: should I just remove apache2? and php5?03:28
sarnoldlvmer: I would; I try to keep what's running on my systems to just the minimum03:28
=== n0ts_off is now known as n0ts
lvmerhey03:28
lvmerfor dpkg -l   how can I output it to a file? lol03:29
sarnoldlvmer: dpkg -l > filename03:29
lvmersarnold: omg the paste doc is 500 long03:31
sarnoldyes, there are a lot of packages on a standard system. :)03:32
lvmersarnold: I have no idea what to remove & what not do lol :/03:32
lvmersarnold: oooohhhh the horror: http://paste.kde.org/611126/03:32
lvmeram I allowed to remove vim? as I really just stick to nano.03:33
lvmer$ apt-get remove vim vim-common vim-runetime vim-tiny    ? xD03:34
sarnoldheh, funny, removing nano is the first thing I normally do. :)03:34
lvmersarnold: I kind of always understood programing, and setting up this server was frustrating, but it only took about a week.  And now.... seeing this list of 500 things long.... I litterally have no idea what they are. I feel like a teenage girl looking at the task manager processor list.03:35
sarnoldthe names will grow on you -- before long they'll be old friends. :)03:36
lvmerlol03:38
sarnoldthe 'deborphan' tool can help you clean up packages you're not using any more03:38
sarnoldthough it probably makes less sense on a brand-new install than one that's been running for a few years03:39
lvmersarnold: so install to uninstall? I like it. :)03:39
lvmerbind9 bind9-host bind9utils  ??03:39
sarnoldlvmer: yes, that does seem strange :) "apt-get install deborphan ; deborphan" --> _fewer_ packages installed...03:39
sarnoldat least bind9-host is nice to have, you can run 'host foo' and get IPs, reverse lookups, MX entries, etc. awesome little tool.03:40
lvmerI just don't want to mess up my samba on this bad boy03:40
lvmeraaahh ok. good to know. I shall keep it then.03:40
lvmerftp?03:41
sarnoldsure, it's just the client program03:41
sarnoldand sometimes wget or curl are annoying compared to an interactive ftp client.03:42
lvmerso many libs03:42
lvmerwait so uninstall ftp? or keep?03:43
sarnoldkeep ftp03:43
lvmerI do have 2 servers & this one is pretty much only samba03:43
lvmerok03:43
sarnoldyou may never use it :) but it's nice to have when you do need it03:43
lvmermysql ? xd?03:44
lvmereasy way to type all those bad names?03:44
lvmermysql-client  .... client-core  common server... etc. lol03:44
sarnoldjust apt-get remove mysql-common will probably get all the rest of them -- they'll need the -common package to satisfy dependencies.03:45
lvmeroh... so that happens automatically?03:46
sarnoldit'll prompt :)03:46
lvmerif I remove bind9  ... it says dnsutils & ubuntu-standard also remove03:50
lvmerbad?03:50
lvmersarnold: look how much progress I've made:  http://paste.kde.org/611150/03:52
lvmersarnold: lol xD03:52
sarnoldlvmer: 'nsupdate' from 'dnsutils' might be very nice to hold on to.. I don't know if it is used by default, but it -might- be...03:53
lvmeryah I held on to them03:53
lvmersarnold: I can't seem to remove apache2.2-common  is the file special?  it shows up as 'rc'03:54
sarnoldlvmer: woo. :) that's pretty good. run deborphan and see if there are any libraries you don't need any more... that's probably enough, though. my development workstation has 1807 packages installed. :)03:54
sarnoldlvmer: 'rc' means 'remove configured' -- the configuratoin files are still there, in case you re-install, but the package isn't currently installed03:54
sarnoldlvmer: you can use dpkg --purge or apt-get purge to _also_ remove the configuration files03:54
lvmeroh how do I get rid of those?03:55
lvmerah03:55
lvmercould I type sudo apt-get remove vim-*  ??03:59
sarnoldtry it with 'vim-*' -- with the quotes04:00
sarnoldif there is something in your current working directory that matches vim-<something>, the shell will expand the * and not give the right results to apt-get04:01
lvmerdouble or single?04:01
sarnoldeither04:01
sarnold(that tip goes for way more than just apt-get -- if you want to find all files ending with .orig, you should also use quotes here: find . -name '*.orig'   )04:02
lvmersarnold: :) k04:02
lvmerinstalled deborphan04:03
lvmerah. -a04:03
lvmerhttp://paste.kde.org/611180/04:04
lvmeranything weird?04:05
sarnoldmaybe mysql-client-core-5.504:05
sarnoldif you don't care about mysql or mysql clients on this machine, you can remove that04:06
lvmersarnold: my computer is a dell 4500 from 2001... it is impossible for it to use wireless should I uninstall wireless stuff?04:06
lvmerI did remove most mysql04:06
sarnoldlvmer: you could remove the wireless stuff if you want, but that might threaten to remove things you want to keep04:06
lvmerah04:07
sarnoldhow much memory is in this system? if four gigabytes of RAM or less, you can probably also ditch the linux-generic-pae kernel04:07
lvmer1gb lol...04:07
lvmerif that04:07
ScottKsarnold: For recent releases it's all PAE04:07
lvmerI'll check04:07
sarnoldScottK: oh??04:07
sarnoldlvmer: don't touch linux-generic-pae :)04:08
sarnoldScottK: thanks :D04:08
ScottKamd64 has been all PAE for awhile and i386 as of 12.10.04:08
lvmersarnold: I actually surprisingly have 2gb.... wow.04:08
sarnoldooh04:08
sarnoldspeed demon from 2001 :)04:08
lvmerNow that I think about it... I think I threw away the 2 computers from 2000 & 2001... this bad boy might be an 03 xD04:09
sarnoldmakes sense to drop plain old x86 kernels. they're definitely the minority these days and the pae kernels probably boot pre-pae machines just fine.04:09
lvmerwhat is whoopsie and getty?04:10
lvmergam_server? winbindd?04:10
sarnoldlvmer: whoopsie handles the "this program has crashed, send a report?" crash reporting service; getty provides the login: prompt on your consoles.04:10
lvmersarnold: um.... I have a lot of 'getty -8 38400 tty'04:11
lvmersarnold: in 'htop'04:11
sarnoldlvmer: probably seven? :)04:11
sarnold.. or six?04:11
lvmersarnold: .... lol04:11
lvmersarnold: ok you win04:12
sarnoldone for each virtual console, alt+f1, alt+f2, alt+f3, .. , alt+f604:12
sarnoldX runs on alt+f704:12
lvmersarnold: o04:12
lvmersarnold: never used alt+ any f04:12
sarnoldyou probably have to use control+alt+f1 to swap to the virtual consoles from within x04:12
lvmersarnold: I'm on putty too btw.04:13
lvmerlandscape-common ?04:13
sarnoldlandscape.ubuntu.com -- a management framework04:13
lvmerThe following packages will be REMOVED:04:17
lvmer  crda* linux-generic-pae* linux-image-3.2.0-29-generic-pae* linux-image-3.2.0-33-generic-pae*04:17
lvmer  linux-image-generic-pae* wireless-regdb* wireless-tools*04:17
lvmergood or bad? lol04:17
sarnoldbad :)04:18
* ScottK has a computer from 2001 running precise.04:20
lvmerscottk: lol how you do that?04:20
sarnoldScottK: you haven't replaced it with a pandaboard? :)04:20
lvmersarnold: oooo bad? dang. lol04:20
* ScottK doesn't usually replace working hardware.04:20
ScottKAlso it's my test server.04:20
lvmer........ lol04:20
lvmerI must know how to ***04:21
lvmerlol04:21
lvmer* test04:21
lvmerlol04:21
* ScottK also has one from 1999/2000 running Hardy (it missed the ACPI cutoff date in the BIOS, so that's the latest it can run) doing file storage.04:21
* lvmer test04:22
lvmerlmao04:22
sarnoldScottK: yeah, I can definitely understand that urge. but man, a few watts, no heat, no fan... granted, storage speed on panda is s s l l o o w w04:22
lvmertest04:23
sarnoldlvmer: /me test04:23
sarnoldoh I see you already found it04:23
lvmersarnold I know I did it up there xD04:23
lvmersarnold: what is umode?04:23
ScottKThey help keep the basement warm.04:23
sarnoldlvmer: time to learn a new tool :) "apt-cache show umode"04:23
lvmer? lol04:23
sarnoldScottK: hehe04:24
lvmerunknown command04:24
sarnoldohhh, umode, that must be from your irc client -- user modes04:24
sarnoldlvmer: still, it's time ot learn a new command :) try "apt-cache show ureadahead"04:25
lvmerno way04:25
lvmerI'm not cache'ing anything04:26
lvmerlol04:26
lvmerwhat does it do?04:26
* lvmer lvmer is not so gullible04:26
sarnoldlvmer: apt-cache will show you data from the packages visible to apt-get04:27
lvmeroh lol04:27
sarnoldapt-cache search and apt-cache show are two immensely useful little commands on debian / ubuntu systems04:27
* lvmer has just realized04:28
lvmerok I'm going to stop that before I get banned. lol. I appriciate it. I'm checking it out.  btw: I couldn't find 'umode' lolz :p04:28
=== kInOzAwA is now known as Guest45163
sarnoldlvmer: about umodes: http://freenode.net/using_the_network.shtml04:30
lvmersarnold: yup. :) thanks again. :)04:31
sarnold'night lvmer :)04:33
lvmersarnold: good night04:33
lvmerI have no swap space.... is this bad? I'm running lvm2. & I just noticed in htop: swp 0/0MB04:48
greppylvmer: how much RAM do you have?05:22
lvmergreppy: 2GB.... I sware I thought I had swap when I installed. I don't see it anymore though... in df -h or fstab or htop.05:35
ScottKDepends on what you're doing with the box.05:49
qman__it's only bad if you require more memory to perform the tasks you're attempting05:51
=== Gallomimia_ is now known as Gallomimia
ranjanHi all, is there an  official channel for Ubuntu Cloud?07:19
ranjanhave some doubt related to Ubuntu Cloud Live CD07:19
lifelessranjan: here is fine to ask07:49
Kartagiscan you help me with roundcube? #roundcube is kind of dead07:54
ranjanlifeless, how can i use nova-volume in ubuntu cloud live?07:58
blkperlKartagis: what kind of help?08:01
Kartagisblkperl: I'm getting "Make sure that the configured database exists and that the user has write privileges DSN: " but the database is there08:02
rbasakScottK: what do you think of https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1027061/comments/14 ?08:03
uvirtbotLaunchpad bug 1027061 in postfix "Postfix upgrade to 2.9.3-2~12.04.1 changes configuration files" [Wishlist,Invalid]08:03
blkperlKartagis: what do the database logs say? do they show failed connection attempts08:08
Kartagisblkperl: nothing in roundcube logs. do you mean imap server logs?08:09
blkperlKartagis: what database are you using? mysql, postgres?08:12
blkperlsqlite?08:12
Kartagismysql08:12
blkperlgo look at those logs08:12
blkperlalso check that the user has write privs in mysql08:12
Kartagiscreate database db;grant all on db.* to user@localhost identified by 'pass'; <--- this was my line08:14
blkperlcan you connect to the database from the roundcube server?08:16
Kartagisyes08:17
KartagisI've also imported the databasr schema. that must mean I have at least INSERT access, no?08:19
stiv2khi08:20
stiv2khow can i see which program on my server is causing 2.79 load average.... but cpu usage is low08:20
Kartagishtop08:21
stiv2kwhy htop08:21
stiv2kover regular top08:21
Kartagisit is more detailed08:21
stiv2koh08:21
stiv2kwell08:27
stiv2ktransmission daemon is using like 10% cpu and 11% mem08:27
stiv2kits the most active process i have... yet my load average is very high08:28
=== ranjan is now known as Guest90825
=== n0ts is now known as n0ts_off
=== acidflash_ is now known as acidflash
freakynlHi, I'm using automatic updates on some servers. Now it mails me that a reboot is required, but only the make package has been updated. I'm not used to linux requiring reboots for anything but kernel (services are usually just restarted when updated). This however is neither a service nor a kernel and make isn't actively used either :/10:12
vezqcheck are you running the latest kernel10:26
vezquname -a and compare to files in /boot10:27
freakynlvezq: heh thx, my spamfilter ate that e-mail :/10:40
freakynlit was consistent tho', it ate all of the auto update messages from that day. Must not like some package10:43
=== n0ts_off is now known as n0ts
=== Akendo_ is now known as Akendo
=== Akendo_ is now known as Akendo
=== kInOzAwA is now known as Guest33607
CuacrzzDoes anyone know how to change metric settings on my l2tp vpn settings like that checkbox on Windows, because i'm connected and it works but all pages are blocked right know12:13
=== mdeslaur_ is now known as mdeslaur
=== mcclurmc_ is now known as mcclurmc
nopzWhen one rsync a directory to another, does it just send the changed bytes or the whole file is transfered for each modification ?13:06
qman__changes only13:11
qman__well, there's some caveats to that13:11
qman__but yes, it only transfers changed bytes by default13:13
nopzcool thank you13:18
CuacrzzDoes anyone know how to change metric settings on my l2tp vpn settings like that checkbox on Windows, because i'm connected and it works but all pages are blocked right know13:18
nopzRegarding inotify, if i lookup a folder by registering to its events, does it watch automatically every child folders in it ?13:20
Kartagisqman__: how about if there are some deleted files from source?13:21
RoyKnopz: from the manual:  Inotify monitoring of directories is not recursive: to monitor subdirectories under a directory, additional watches must be created.13:23
nopzHo thank you RoyK, do you have a link pointing to that?13:24
nopzOk it's at the bottom of the man page13:25
ScottKrbasak: I think the package is designed to use debconf and since they didn't, they are on their own.  That said, I think it would be a useful improvement.13:31
rbasakScottK: I think puppet is probably doing DEBIAN_FRONTEND=noninteractive apt-get install postfix, and then the postinst is clobbering main.cf13:33
rbasakScottK: is that your understanding when you say they're on their own?13:33
rbasak(I haven't verified this though)13:34
rbasakScottK: need to go offline but I'll check the logs to see if you've responded.13:40
=== cpg is now known as cpg|away
lamontScottK: I decided to add a comment there. (1027061)13:50
ScottKlamont: Thanks.13:50
=== rnbrady_ is now known as rnbrady
caribouquick question : what is the best way to upgrade the kernel in an Openstack/canonistack instance ?14:11
caribouwithout using a different cloud image, just need to test a new kernel14:11
Akendohi14:25
AkendoHey jamespage, My Cinder + Ceph is working. But without authentication14:26
jamespageAkendo, libvirt uuid still proving problematic?14:27
AkendoJust a question out of my mind, can it be that you have to create a extra client instead of using client.admin for this?14:27
AkendoYes14:27
AkendoI'll solve it late, I just wanted to ensure that the connection is working.14:27
jamespageAkendo, I do that yes; client.admin is like 'root' whereas cinder only needs access to pools/rbd's14:28
AkendoBut shouldn't it be possible to use this "root" for everthing in the beginning? This is justa proof of concept for me, it shound't have to much complexbility14:29
jamespageAkendo, what rbd_user did you specify?14:31
AkendoFor now admin14:32
AkendoBut late I think it will be one use per tenant14:32
AkendoSo that this tenant have it's own access credentails14:32
jamespageAkendo, I think thats right14:32
AkendoFirst I have to get a feeling for Ceph with OpenStack ;-)14:33
AkendoOne Question, that keeps going torugh my mind is: How does the single pool per tenant will behavior with this placement groups? It's a "hard" limit for my Pool?14:34
pmatulishallyn: hey.  looks like bug #1057024 is still not done.  i just posted14:49
uvirtbotLaunchpad bug 1057024 in qemu-kvm "kvm kernel module always loaded, without setting /dev/kvm permissions" [High,In progress] https://launchpad.net/bugs/105702414:49
zuljamespage: ping14:51
jamespagezul, pong14:51
zuljamespage: fyi the quantum proxy ip stuff got merged into the stable/folsom tree14:51
jamespagezul, yeah - I've been watching gerrit mp's14:52
jamespagew00t!14:52
zuljamespage:  ok cool14:52
jamespagezul, thanks for pushing on that btw14:52
jamespageAkendo, not sure single pool per tenant makes sense?14:52
zuljamespage: no worries all a part of the days work..14:52
AkendoWhy not?14:53
jamespageAkendo, well the pool in ceph is completely abstracted from the users of Openstack14:53
AkendoSure14:54
jamespageAkendo, and you can only configure it once in cinder, and not on a per tenant basis14:54
AkendoAh14:55
AkendoReally?14:55
Akendohm...14:55
AkendoThat indeed a problem then I didn't think of yet14:55
hallynpmatulis: the p11-kit thing is separate and was supposed to be fixed long ago.  but yes, there is also the new bug 1080912 i'm trying to reproduce right now14:57
uvirtbotLaunchpad bug 1080912 in qemu-kvm "package qemu-kvm 1.0+noroms-0ubuntu14.4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [High,New] https://launchpad.net/bugs/108091214:57
hallynslangasek had wanted me to change the fix for that bug, and the new way doesn't seem to be as robust as doing it by hand14:57
hallynpmatulis: do you still have access to that box?14:57
hallynwell lemme see how my box does after a 11.10->12.04 upgrade14:58
pmatulishallyn: indeed i do15:00
hallynpmatulis: great - what does /dev/kvm look like?  (ls -l and getfacl)15:02
pmatulishallyn: not good at all i'm afraid15:03
pmatulissudo ls -l /dev/kvm15:03
pmatulisls: cannot access /dev/kvm: No such file or directory15:03
Akendopmatulis,  modprobe kvm is working?15:06
pmatulisAkendo: yes it does, that looks like the beginning of a workaround15:08
AkendoWhat is lsmod |grep kvm displaying?15:08
pmatulisAkendo, hallyn: indeed, after loading the module i can start my guests15:09
hallynpmatulis: do you ahve the ugprade logs?  did 'start qemu-kvm' fail?15:09
Akendo;-)15:09
hallynbc that should have loaded the module15:09
pmatulishallyn: let me take a look for the logs15:09
pmatulishallyn: note that i rebooted twice.  once after the upgrade, and once again after upgrading qemu-kvm15:10
pmatulis(-proposed)15:10
hallynhm.15:10
hallynso it wasn't loaded at all after reboot.  that's bad.  and weird15:11
pmatulishallyn: agreed15:11
pmatulishallyn: i'll update the bug15:11
hallynpmatulis: to be sure, did all work well under oneiric on that box?15:11
ninjixanyone running a 12.04 based OpenStack with Quantum + Open vSwitch?15:13
AkendoThat can happend from time to time, then you should add kvm to the /etc/modules.conf15:13
AkendoCan you past me via pastbin the dmesg output?15:14
pmatulishallyn: yes, all worked very well on 11.1015:14
Akendoah15:14
=== matsubara is now known as matsubara-lunch
Akendobtw: /etc/modules for Ubuntu15:14
fleishcan someone help me translate this EDAC info into a which DIMM is actually reporting errors? EDAC MC1: CE row 1, channel 0, label "CPU#1Channel#0_DIMM#1": Corrected error (Socket=1 channel=0 dimm=1) ... my manual/board labels the  DIMMs P1_DIMM{1,2,3}{A,B,C} & P0_DIMM{1,2,3}{A,B,C}15:17
hallynpmatulis: odd, my test box had /dev/kvm just fine :(15:19
hallynpmatulis: i  suspect yours deserves a new bug15:19
pmatuliswonderful15:19
Akendojamespage, Do you know of any bug in glance that can't list the uploaded image to ceph?15:24
ninjixI see there are what look like tokens in the Ubuntu Openstack supplied configuration files. Things like %SERVER_USER%. Most of the tutorials call for you to replace these but is there a better Canonical way for configuring the services?15:27
AkendoHey ninjix15:30
AkendoCheckout the nimbis-keystone-init on github15:30
ninjixAkendo: hi15:30
AkendoMaybe not whay you mean, but it can help you to setup all important stuff  for you15:31
AkendoThen your using a tenant called service15:31
AkendoI hope this can you help15:32
ninjixthanks. I've been holding off with the helper scripts while I familiarize with the Folsom release15:33
AkendoGreat ;-)15:33
ninjixthen wants I understand how to better use Quantum and Open vSwitch, I'm going to look into a MaaS+Juju rollout15:34
ninjixwants ?? -> once :)15:35
ninjixAkendo: are you running Openstack?15:37
jamespageAkendo, not that I know of - I have not seen that issue15:38
jamespageAkendo, just out of interest can you see it with nova image-list ?15:40
ninjixAkendo: sorry, better question is are you running it in production?15:42
=== matsubara-lunch is now known as matsubara
=== rnbrady_ is now known as rnbrady
=== paskal is now known as tarzxvf
tonyyarussoI'm getting millions of lines like this in my syslog:  "Nov 20 10:30:14 ntop ntop[1180]:   **WARNING** Packet # 37334012 too long (len = 2546)!"  What's that mean?16:31
lvmerI've got a LAN server with just samba on it. Is there a good way to maximize the computer solely for samba? aka: like dedicate lots of ram to caching files that are typically requested, etc.16:55
=== n0ts is now known as n0ts_off
rbasakThat'll happen automatically for you17:00
lvmerrbasak: really?17:01
rbasakThe kernel uses available memory to cache what it can17:01
lvmerin [global] I setup: socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=6553617:01
lvmerI was thinking about doubling it to 131k or so17:01
lvmerrbasak cause right now my server is only using 62mb of ram.... lolzzzzzzz17:02
=== yofel_ is now known as yofel
lvmerops I thought I was in the samba channel. -_-17:03
lvmersshd is 'not confined' by apparmor, how shall I change this?17:10
hallyngah17:14
hallynbad changelog17:14
jdstrandlvmer: that is acually a particularly challenging application to confine because it is designed to spawn shells17:14
jdstrandlvmer: I recommend looking at http://wiki.apparmor.net/index.php/Pam_apparmor_example17:14
jdstrandlvmer: you might also want to join #apparmor on OFTC and discuss it there17:15
lvmerjdstrand: ah. :/  yes I did #apparmor.  I was guessing it would be easy with only 1  sshd allowable computer / ip.17:15
lvmerjdstrand: ty for the starting place. I am looking through it now.17:16
jdstrandlvmer: the experts in #apparmor usually don't come online until around now17:16
RoyKlvmer: it's little point adding IPTOS... and the SO_ stuff - the default values are ok17:16
=== Akendo is now known as Akendo_
RoyKlvmer: that is, unless you're on a 10Gbps network and really want full throughput, all the default values should be ok. It'll be either your network or the I/O on the server being the bottleneck17:17
lvmerroyk: yup you seem right on that. noticed no difference.17:18
lvmerroyk: definitely server I/O17:18
lvmerroyk: 12 year old computer ftw... lolz.17:18
RoyKlvmer: what sort of disksystem?17:18
RoyKsingle IDE drive? ;)17:18
lvmerroyk: IDE lol17:18
lvmerroyk: 3 stripe raid17:18
RoyKraid-5?17:18
lvmerroyk: but the dell motherboard is attrocious17:19
lvmerroyk: raid 017:19
lvmerroyk: lol trust me, it doesn't help much with the bus speed of this Dell.17:19
RoyKraid-0 is a bit like BASE jumping with an umbrella...17:19
lvmerroyk:  all information has 2 other separate backups & is non-essential. I know the risks.17:20
* RoyK uses RAID-6 for most stuff these days17:20
lvmerroyk: I'm actually hoping these hd's fail so I can buy a $300 computer this christmas17:20
RoyKwell, obviously, if you handle the downtime and restore, no problem17:20
lvmerroyk: lol that will def. be the hard part.17:20
* RoyK wants uptime... http://xkcd.com/705/17:20
lvmerroyK: but the server is only 1 week old.... & I've re-installed 2x already from stupid mistakes. so I don't think it'll take more than 1 day.17:21
lvmerroyk: trying to configure rsync for configs, but right now I just copy/paste them to NAS17:21
RoyKif you can do with the space on two drives, use raid-5 and change later or add more drives later17:21
RoyKthat is, if you have a NAS, why do you want a fileserver?17:22
lvmerroyk: ide drives? no freaking way17:22
lvmerroyk: cause it's a windows temp. nas lol17:22
lvmerroyk: and it sucks17:22
lvmerroyk: also this was mostly just supposed to be a fun project to get my feet wet.... into linux which is clearly much faster.17:23
RoyKyou can get a mobo + cpu + memory for almost nothing, probably $150 will go a long way17:23
lvmerroyk: ok last question.... here I'm done explaining my logic lol. idc if it is flawed.17:23
RoyKor at least $20017:23
lvmerroyk: yes... that is why I est. $300....17:23
lvmerroyk: 3TB HD... xD17:23
lvmerroyk: which will be sata17:24
RoyKlvmer: install sysstat and start it, and it'll collect performance data for you17:24
RoyKor perhaps munin17:24
lvmerroyk: why?17:24
RoyKyou'll see quickly where the bottleneck is17:24
lvmerroyk: k17:24
RoyKsysstat / sar is basically terminal stuff, munin makes nice graphs17:24
lvmerroyk: ok how do I use this? never used sysstat17:25
lvmernvm I got a tut17:26
RoyKapt-get install sysstat - vi /etc/default/sysstat - enable it - /etc/init.d/sysstat start17:26
RoyKrun 'sar'17:26
RoyK!uupdate17:27
lvmerroyk: ?17:28
RoyKjust tried to ask the bot about uupdate17:28
lvmero17:28
lvmer!uupdate17:28
RoyK!mail server17:28
ubottuUbuntu supports the Simple Mail Transfer Protocol (SMTP) and provides mail server software of many kinds. You can install a basic email handling configuration with the "Mail server" task during installation, or with the "tasksel" command. See also https://help.ubuntu.com/community/MailServer and https://help.ubuntu.com/12.04/serverguide/C/email-services.html17:28
lvmerroyk: ok I ran sar.... I don't get it17:29
lvmerroyk: shows cpu17:29
lvmerroyk: that's it.17:29
lvmerroyk: and a restart17:29
RoyKno need to restart17:29
RoyKand man sar17:29
RoyKit'll show a lot more17:29
RoyKsar 1 1217:29
RoyKand it'll check status every second for 12 seconds17:30
RoyKwhat you get in the %iowait column is the time the system spends waiting for i/o, eg slow drives17:30
lvmershould it be  sar -i 1217:31
RoyKjust 'sar <secs> <number of polls>' will do17:31
RoyKlike17:32
RoyKhttp://paste.ubuntu.com/1372914/17:32
RoyKthis system is running a crashplan backup where the client spends a lot of cpu time and waits for i/o a bit17:33
lvmerhttp://paste.kde.org/611492/17:33
RoyKguess this wasn't during a copy?17:34
RoyKyour system's mostly idle17:34
lvmerroyk: this lan is small & barely gets accessed17:34
RoyKstart a large copy operation and try again17:34
lvmerroyk: if I did a copy the disk I/o bottle neck would be obvious...17:34
lvmerroyk: k17:34
RoyKalso, you can use17:35
RoyK!pastebinit17:36
ubottupastebinit is the command-line equivalent of !pastebin - Command output, or other text can be redirected to pastebinit, which then reports an URL containing the output - To use pastebinit, install the « pastebinit » package from a package manager - Simple usage: command | pastebinit -b http://paste.ubuntu.com17:36
lvmerroyk: ah that is helpful.17:36
lvmerroyk: wait I blocked all 80 ports... only 137, 139, & 445 work. xD17:36
RoyKalso outgoing?17:37
RoyKif you just used ufw to only allow those ports, all outgoing access should work17:37
lvmershorewall17:37
lvmerufw sucks17:37
RoyKwell, ufw works17:38
lvmerhttp://paste.kde.org/611498/17:38
lvmerroyk: outgoing works now. I shall use that command it is grand.17:38
lvmer12:36:52 PM     all      0.00      0.00      0.00    100.00      0.00      0.0017:39
lvmer100 I/o wait17:39
RoyKsystem isn't under heavy load...17:39
lvmerroyk: nope not at all17:39
RoyKwell, you get such hichups from time to time17:39
lvmerroyk: it only runs smbd17:39
RoyKyou may want to check your drives with smartctl17:39
lvmerroyk: uninstalled nearly everything except shorewall, denyhosts, fail2ban, etc.17:40
lvmerroyk: are you trolling me?17:40
RoyKno17:40
RoyKold drives have a tendency to fail17:40
lvmerroyk: ..... I already know my hd's are bad17:40
lvmerroyk: they are 12 year old IDE HDDs.... lol17:40
RoyKand smartctl asks the drives if they have known errors17:40
RoyKif they have, they'll slow things down17:40
RoyKold drives != bad drives17:40
lvmersmartctl notfound17:41
lvmerjohn@UBUNTUSERVER2:~$ sudo apt-get install smartctl17:41
lvmerReading package lists... Done17:41
lvmerBuilding dependency tree17:41
lvmerReading state information... Done17:41
lvmerE: Unable to locate package smartctl17:41
lvmerjohn@UBUNTUSERVER2:~$17:41
RoyKapt-get install smartmontools17:42
lvmeris libsensors4 important?17:43
RoyKlvmer: don't remember the dependencies or smartmontools, but another set of libraries won't hurt17:43
lvmerjohn@UBUNTUSERVER2:~$ smartctl --scan17:47
lvmer/dev/sda -d scsi # /dev/sda, SCSI device17:47
lvmer/dev/sdb -d scsi # /dev/sdb, SCSI device17:47
lvmer/dev/sdc -d scsi # /dev/sdc, SCSI device17:47
lvmerwhat next?17:47
RoyKsmartctl -H ...17:48
lvmermeh.17:48
RoyKor smartctl -t short /dev/blah to start a short test or -t long to start a long test17:48
lvmerpermission denied17:49
RoyK-t long shouldn't be needed very often, but if you haven't run any tests yet, it might be worth it17:49
lvmeroh ops.. sudo lol17:49
lvmerno fails, but errors :/17:49
RoyKpastebin?17:50
lvmerhttp://paste.ubuntu.com/1372945/17:51
lvmerwhat do you think?17:52
RoyKI think the drive has bad sectors17:52
RoyKdmesg will probably give you some error messages17:52
RoyKI/O sort of thing17:53
lvmer.... too manyz17:53
lvmerhttp://paste.ubuntu.com/1372956/17:53
RoyKnothing there about I/O errors17:54
lvmerah good17:54
lvmeryah I couldn't see until I checked the url17:54
lvmertoo squished17:54
RoyKbunch of apparmor messages, but no I/O stuff17:54
lvmerstill thinking bad sectors?17:55
lvmeror what?17:55
RoyKsnartctk says si17:55
RoyKso17:55
RoyKops17:55
RoyKsmartctl says so17:55
RoyK# 1  Short offline       Completed: read failure       90%     25545         629816217:55
lvmer:/17:55
RoyKtry -H on the other drives17:55
lvmerfix attempt worth it?17:55
RoyKyou can't fix sectors17:55
lvmerhttp://paste.ubuntu.com/1372961/17:56
RoyKwhat you can do, is use redundancy to avoid data loss17:56
RoyKseems you've started a long test on that one and it's still running17:56
RoyKTotal time to complete Offline17:57
RoyKdata collection: (  430) seconds.17:57
lvmerpossibly a long time ago17:57
lvmerbefore installing ubuntu17:57
RoyKyou can stop the test and run a short test17:57
RoyKor just try to initiate a short test17:59
RoyKmight do it17:59
RoyKlvmer: really, finding a 120GB drive unused somewhere shouldn't be much of a problem, I guess people are throwing those away regularly these days.... better get a new one (or three), convert to raid-5 and sleep well at night18:08
RoyKor even better, get a new box and setup raid-5 on sata drives from the start18:09
lvmer...................................... the information stored here is superfluous. I'm done this troll storm.18:11
RoyK?18:12
RoyKtroll storm???18:12
lvmerI told you from the start the information stored on the hdd's is redundant and useless.... why would I care if they fail?18:13
RoyKwell, ok, just saying that at least one of your drives are dying18:13
lvmereta?18:13
RoyKand it's less hassle to just use raid-5 in the first place to avoid recreating everything18:13
RoyKETA is not possible for drives18:14
RoyKsometimes they die without notice18:14
RoyKsometimes they give you a warning with S.M.A.R.T.18:14
RoyKthat warning usually means something is bad, but the drive may live another month or even a year after that18:14
lvmerhave you ever rebuilt a raid 5 array? the build time is ridiculous18:15
lvmerI'd rather use 118:15
RoyKno, it's ok18:15
RoyKI've rebuilt RAIDs of all known levels ;)18:15
lvmerhow long did the 5 take  / size?18:15
RoyKfor a 5x2TB RAID, about a day, perhaps a bit more18:16
RoyKfar less than restoring the lot18:16
lvmerdefinitely more18:16
RoyKwith 120GB drives, a few hours18:16
lvmerlucky you had 5x drives though18:16
lvmerimagine 10tb with 3 drives18:16
lvmeryou'd be building forever18:16
RoyKI wouldn't use RAID-5 with such amounts of data18:17
RoyKI'd use RAID-6 so that it can take a second failure during rebuild18:17
lvmer5x2tb = 10tb............. * .8 = 8tb....18:17
lvmeryour not far off18:17
RoyKcurrently 6 drives in RAID-6 in my home server ;)18:17
lvmerthat's a good setup18:17
RoyKplus a spare18:17
lvmerhard with without a raid controller though?18:18
lvmerwhat mb?18:18
RoyKjust linux md18:18
RoyKsoftware raid18:18
RoyKsome cheap - sec18:18
RoyKASrock M3A UCC18:18
RoyKwith some PCIex SATA controllers I got off ebay cheaply18:18
RoyKI've been working with storage long enough not to trust 'hardware raid' more than what can be done in software18:19
RoyKit's software after all, even the 'hardware raid', the only difference is it's running on another chip18:19
RoyKusually with less cpu power and with a narrow memory bus, meaning usually slower18:20
RoyKI'd guess 90% of enterprise storage have 'software raid', only they hide it18:20
lvmergood to know18:21
RoyKA Dell EqualLogic controller take up to a minute to reboot - that's not hardware - it's its OS booting18:21
RoyKand probably linux at the base, since Dell uses linux for most stuff these days18:22
RoyKlvmer: even if you can restore quickly, using RAID-5 for this setup can probably teach you a few things about storage ;)18:25
SpaceBassI'm trying to do an apt-get upgrade and keep getting an error that the MD hash for base-files is invalid … or smiler, will paste bin… this is the 3rd time this has happened and always results in needing a fresh install.18:55
SpaceBasserror: http://pastebin.ca/225351018:55
sarnoldSpaceBass: check dmesg. I expect your hard drive is dying.18:56
SpaceBasssarnold, thought that was the problem the first two times, so I've replaced it each time. This is new, fresh SSD (as were the others)18:56
sarnoldSpaceBass: oohhhhhhhhh.18:57
SpaceBassalthough perhaps you are right sarnold, the drive doesn't look heathy http://pastebin.ca/225351418:59
sarnoldSpaceBass: can you test the drive in a different machine or usb enclosure or something?19:00
SpaceBasssarnold, in theory, but since this is the 3rd error on the same box, all with SSDs (different make/models), I'm not more suspicious of the motherboard or controller19:00
sarnoldSpaceBass: yes, I suspect your motherboard or controller are the problem instead of the harddrive, but putting the drive into something else may be easier than putting a new motherboard in :)19:01
SpaceBasswhich sucks… b/c I'm starting to loath this kind of hardware support…. might be time to replace with a mac mini (data is on external raid anyway)19:01
SpaceBassputting the ultimate solution aside, any tips on resurrecting this install and getting apt-get upgrade functioning?19:02
sarnoldSpaceBass: agreed, I spent a few weeks trying to track down data corruption problems and eventually found MCE events :/ horrible few weeks...19:02
SpaceBasssarnold, there was a time I like that kind of troubleshooting….but I'm with you, horrible19:02
sarnold_maybe_ you can fiddle wit hthe BIOS and change the way it uses the sata ports; change from 'legacy' to 'ahci' or the other way around.19:03
SpaceBasssarnold, good idea, I'll test19:04
SpaceBassit's on ahci now, I'll try legacy19:04
SpaceBass(when i get home tonight, using SSH into that box  currently)19:04
RoyKSpaceBass: a friend of mine had two SSDs dying on her rather rapidly, the third still works after half a year...19:04
RoyKSpaceBass: try smartctl -H19:06
RoyKcheck if the drive think it's bad19:06
SpaceBasscommand not found :(19:07
RoyKapt-get install smartmontools19:07
SpaceBasscan't… apt-get fails19:07
SpaceBasslooks like another fresh install in my future… not the end of the world, but not happy about it19:12
RoyKSpaceBass: never good to see a drive failing - that's why I mirror things or use RAID-6 ;)19:29
=== glebihan_ is now known as glebihan
=== cpg|away is now known as cpg
=== cpg is now known as cpg|away
=== The_Pugilist is now known as DaveR
=== gary_poster|away is now known as gary_poster
koolhead17thanks for all! happy appreciation day :)21:19
koolhead17*221:19
=== Gallomimia_ is now known as Gallomimia
=== pcarrier_ is now known as pcarrier
=== lordieva1er is now known as lordievader
=== NomadJim_ is now known as NomadJim
=== acidflash_ is now known as acidflash
=== matsubara is now known as matsubara-afk
=== negronjl` is now known as negronjl

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!