[00:00] This is not the first time this has happened when i had alot of peers connected to my minecraft server the eth0 stop worksing [00:00] working* [00:01] it all ways start working if is sudo ifconfig eth0 down -- and then up [00:01] stats* [00:01] Its been happening for a few days now and i cant get to the bottom of it :/ [00:03] Danawar: is it possible the connections are using up all available RAM? ifdown would cause people to start disconnecting rapidly [00:04] ram is allmost maxed out on the server using a small ammount of swap [00:04] but today there is hardly any one on the servers and all i did was try to upload a 1mb pic =[ [00:05] Ram was at 80% when it died [00:05] swap was at 10% [00:05] Danawar: ah, interesting. nothing in dmesg? === cpg is now known as cpg|away [00:07] Sadly i have never used dmesg ill look it up now [00:08] Alot of UFW blocks [00:08] Danawar: literally, just run 'dmesg' [00:09] Just alot of UFW blocks from SRC=0.0.0.0 DST=224.0.0.1 [00:09] And one that is different [00:09] IN=eth0 OUT= MAC=50:e5:49:1c:a0:be:28:3c:e4:eb:b5:df:08:00 SRC=203.113.137.187 DST=192.168.1.3 LEN=48 TOS=0x18 PREC=0x60 TTL=113 ID=63072 PROTO=TCP SPT=53255 DPT=10000 WINDOW=65535 RES=0x00 SYN URGP=0 [00:10] with the last crashes [00:10] i always see that packet with URGP=0 [00:10] But i am unsure what that is yet [00:13] All the times it has DCed [00:13] I see alot of UFW blocks in my logs [00:15] Something could be going on that is not being logged or i just dont know where it is loged [00:17] Danawar: ?? hard to say. Might be time to call in a professional :) [00:18] Unfortunately its just a home server xD but it doing my head in xD [00:23] Just tryed uploading another picture same problem damn server =[ [00:31] I have a feeling it might be somthing to do with the PHP upload feature [00:51] This isn't Ubuntu related... but I'm trying to convert a bunch of 8mm video cassettes to digital files. & Google is being stubborn. I'm having trouble deciding the best video format to preserve quality but still keep the file size reasonable. Anyone happen to have tips? or know where I could ask? [00:53] I've got all the camera connections btw... the 30min test file just comes out as 8gb... which really makes me wonder how much wasted resolution I'm recording. [00:54] I would suggest starting with a generic encoder for dvd stuff, pick a low motion profile on a modern codec, and pick a few file sizes, see which gives a sufficient quality for the size? [00:55] Yah I usually use power director, but it was throwing errors. So I switched to Adobe Premeire elements & the publishing options seem so weird to me. Like if I check mpeg2... the file size goes to 11gb. Wtf? lol. I feel like adobe doesn't even understand it's own publishing options. [01:06] mpeg2 isn't what I'd call a modern codec. [01:13] xD Neither is 8mm video. xD but perhaps a more modern codec would be better. xD [01:16] the codec isn't the issue there [01:16] removing noise is the issue [01:16] and 8mm is going have a lot of noise [01:16] the more noise, the worse the compression [01:16] so if you want the rips to be small, your going have to get good with using video filters to clean it up first === cpg|away is now known as cpg [01:29] guys, WHat is the INITRAMFS prompt and how to i get my system to boot? [01:29] its stuck at this propmt === n0ts_off is now known as n0ts === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts === chilicuil_away is now known as chilicuil === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts [04:00] hello, i have multiple domains on a ec2 server (ubuntu 11.04) and i want to be able to send from multiple email adddress based on the domain i am sending from, is that possible? [04:07] hello all. I have some entries in fstab (UUID) that I have also shared out via NFS. The permissions are 777 (to troubleshoot) but it gives me a permission error when I try to copy over the network. Looking to correct this so i can copy over stuff. [04:08] *note it's worked in the past. Seems to be an issue after the latest updates [04:12] lickalott, do the uid's match up [04:13] yes sir [04:14] well....i'm not sharing out via NFS with the uuid. just the absolute path [04:16] lickalott, the UUID shouldnt matter at all. i mean the uid like 1000 [04:16] oh.... no. going from winblows to ubuntu === cpg is now known as cpg|away [04:17] lickalott, you are running an NFS server on windows?!?! [04:17] no. NFS from ubuntu. trying to copy over backups from windows [04:18] lickalott, back up a bit. NFS+windows=confusion. where does windows fit into this? [04:18] *side note - I am running nfs from another windows server (hanewin). it actually works really nice. [04:18] k [04:18] computer 1 = windows (my laptop) computer 2 = Ubuntu server (NFS shared dirs). i want to copy files from computer 1 to computer 2 across the network [04:19] that's what samba is for [04:19] you know what...now that you say it. those may be shared out via smb... lemme check [04:20] regardless there are permissions issue that weren't there a week ago. but lemme get specifics so I stop wasting your time. wait 1 [04:21] samba [04:21] browseable, writable = yes read only, guest ok = no for all 3 shares [04:22] are you able to browse the shares [04:22] yes [04:22] and just not write files, or are you not able to do anything [04:22] ok [04:22] i can move stuff from elsewhere on the server to those dirs [04:22] just not from my lappy [04:23] what exactly do you mean by that [04:23] do you mean you can, from windows, move stuff around but not copy new files? [04:23] i can telnet or logon to the server and move stuff into those dirs via command line. But across the network is giving me issues. [04:24] well, that's irrelevant [04:24] what's going on then is, the user you are authenticating to samba as, is not able to write files [04:24] and just not write files, or are you not able to do anything <--- just trying to fill in ALL the blanks [04:24] k [04:25] when you connect to the server, are you entering a username and password? [04:25] windows user = weed. ubuntu user = weed. I can't make the uid's the same right? whats the next step [04:25] or does it just open up automatically [04:25] opens auto [04:25] do the passwords match? [04:25] no [04:25] well, there you go [04:26] what's happening is [04:26] windows attempts to authenticate with your local credentials [04:26] that fails, so then it attempts to authenticate as guest [04:26] which is succeeding for some reason [04:26] but then you can't write files, because guest ok - no [04:26] i have a .bat that mounts the paths, and when I set them up initially i used the "weed" user's info from the server. i think it's cached [04:26] ok.. lemme try that [04:26] so, to solve it, change the passwords to match and try again [04:26] or change the user names to not match [04:31] still working it. I'll shoot a status update in a min. === fenris is now known as Guest69384 [04:37] they won't go away. net use /delete isn't working. need to reboot [04:48] qman__ same [04:49] "Destination Folder access denied" === Err404NotFound is now known as Error404NotFound === cpg|away is now known as cpg === chilicuil is now known as chilicuil_away [06:35] qman__ you still hanging around? === cpg is now known as cpg|away [07:42] how do i configure fqdn on 12.04.1 ,i have static ip and domain with isp === n0ts is now known as n0ts_off === n0ts_off is now known as n0ts === th0mz_ is now known as th0mz === sanderj__ is now known as Sander^work [09:35] === Guest91592 is now known as Ard1t [10:42] Daviey, jamespage, smoser: any objection to seeding software-properties-common, and if not, please could you sponsor? Bug 439566. I'm guessing that this is something not quite suitable for the normal sponsorship queue? [10:42] Launchpad bug 439566 in ubuntu-meta "add-apt-repository is not available by default on server" [Wishlist,Triaged] https://launchpad.net/bugs/439566 [10:48] rbasak: erm, i thought that was added to the seed last cycle? [10:48] But yes, i entirely support it, if not. [10:48] Oh, was it python-software-properties and renamed to software-properties-common, and the seed hasn't been updated? [10:58] * rbasak checks === mcclurmc_away is now known as mcclurmc [11:19] Daviey: I can't find it in the germinate output anywhere. Only for desktop, and cloud-image which gets it via cloud-init [11:19] I know we mentioned it last cycle, but I don't think anything got done [11:20] rbasak: Oh [11:21] rbasak: if you want bzr credit, fancy providing a merge proposal ? [11:22] * rbasak does so [11:28] Daviey: https://code.launchpad.net/~racb/ubuntu-seeds/add-apt-repository/+merge/136146 [12:11] Hello! [12:12] someone here? [12:13] i need some help configuring apache2 in ubuntu server 12.04 [12:14] specially ssl authentication [12:15] zul, pls give me a ping when you start; trying to decide whether I've found a bug in webob or not.... === lamont` is now known as lamont [12:19] jamespage: zul mentioned over the weekend that he thought we might need a newer nose.. related? [12:19] Daviey, not really (although I did hit a new nose issue but was able to workaround it) [12:19] glance [12:20] Daviey, the Checksum-MD5 header behaviour has changed in webob >= 1.1 [12:20] so basically you never get them with chunked transfer encoding... [12:21] ah [12:24] is there a nautilus plugin to display CR2 thumbnail? [12:24] zul: i will look into that thing later today [12:32] jamespage: sure...when i get in and after I give myself a heart attack by shoveling the snow off my laneway [12:32] zul, lol === niemeyer_ is now known as niemeyer === gary_poster|away is now known as gary_poster [13:14] http://status.ubuntu.com/ubuntu-quantal/group/topic-raring-servercloud-overview.html 404s. Should this be fixed or is there an alternative view? === pcarrier_ is now known as pcarrier [13:45] right good morning === n0ts is now known as n0ts_off [13:50] zul, have a better fix for glance now [13:51] jamespage: sweet pastebinit? [13:51] I still think bug 1083155 applies [13:51] Launchpad bug 1083155 in python-webob "Unable to set Content-MD5 header when using chunked transfer encoding" [Undecided,New] https://launchpad.net/bugs/1083155 [13:51] but we can work around it for the time being [13:51] yeah [13:52] we should probably push that to the upstream webob tracker [13:52] zul, oh - and I hit a odd nose issue as well with glance - it kept trying to execute glance/openstack/common/__init__.py as a test [13:52] jamespage: yeah i seen that multiple times [13:52] I worked around that for the time being by scoping run_tests to glance/tests [13:53] ack...thats a nose bug btw i think [13:53] zul, yes it is [13:53] I think its fixed in 1.2 [13:53] yeah i started packaging 1.2 this weekend [13:53] (well the upstream venv uses that version and appears not to have the same issue) [13:54] zul, oh - btw - did you mean to drop glance-client with the last upload to raring? [13:55] jamespage: the glance-client binary in glance? [13:55] zul, yes [13:55] yeah its in python-glanceclient now [13:55] zul, OK - so its still generated by the packaging - I've dropped it in the branch I'm preparing now [13:55] k [13:59] jamespage: I see that you have a fix for walinuxagent for bug #1079897 [13:59] Launchpad bug 1079897 in Ubuntu Raring "walinuxagent mangles server identity and access on upgrade" [Critical,Fix committed] https://launchpad.net/bugs/1079897 [14:00] jamespage: I can take care of the SRU if you wan [14:00] want [14:00] caribou, yes please [14:00] jamespage: ok, will do [14:04] jamespage: can you try to push the webob patch upstream [14:05] ill add that to the merge proposal [14:05] zul, I added the webob fix to the glance branch I proposed [14:05] I'll push the bug report upstream and the login in response looks a little fuddled to me [14:05] k [14:17] it appears that the precise server images now include quantal kernels (3.5.0-19) from Friday. Is this intended by any chance? [14:19] psivaa, I don't think so no [14:19] Daviey, ^^ [14:25] psivaa: No, not intended at all [14:25] psivaa: thanks for raising it. [14:25] psivaa: do you have any logs i can copy and paste? [14:26] Daviey: yes 1 second for logs but cjwatson on the #release thinks otherwise [14:26] erm [14:29] Daviey: https://jenkins.qa.ubuntu.com/view/Precise/view/ISO%20Testing%20Dashboard/job/precise-server-amd64_default/371/console is the link === Myrtti_ is now known as Myrtti [14:48] jamespage: http://pastebin.ubuntu.com/1389121/ [14:50] zul, and what does line 15 look like in your copy? [14:50] ifeq (,$(findstring nocheck, $(DEB_BUILD_OPTIONS)) [14:51] you are missing a ")" [14:51] zul, no - you are - mine is fine - ifeq (,$(findstring nocheck, $(DEB_BUILD_OPTIONS))) [14:51] uh [14:51] looks OK on the MP as well [14:52] jamespage: yeah it might have been a bad merge that i did...its in the trunk now as well hold on [14:55] jamespage: https://code.launchpad.net/~zulcss/glance/grizzly/+merge/136193 [14:56] zul, approved [14:57] jamespage: you merged it right/ [14:57] zul, doing it now [14:57] jamespage: ack [14:59] zul, done [15:00] jamespage: cool just testing the new nose === cheez0r_ is now known as cheez0r [15:27] hello all! Last week I posted this problem: https://answers.launchpad.net/ubuntu/+source/gnome-nettool/+question/214977 [15:27] to which someone replied this: "Having looked further into the igb, I'm wondering if the motherboard is using UEFI and if so, if the UEFI driver settings for the i350 are responsible for this" [15:28] jamespage: still get the same error with glance with a newer nose [15:28] how would I go about investigating that further? I'm not very well versed in UEFI and it does't look like I can disable it [15:28] zul, weird - worth checking which version gets into venv then [15:28] yep === matsubara is now known as matsubara-lunch [15:41] stgraber: so the git tag isn't there (so i missed it) but a tarball is - so 0.8.0 is released. were you working on a merge? Is there something else I should work from rather than starting with the release tarball? [15:52] jamespage: FYI, I was able to reproduce the walinuxagent bug on Azure. [15:53] hallyn: nope, no point in merging really. I don't intend to rebase on upstream until 0.9~alpha1 [15:54] well, one point would be to catch any mistakes in the upstream tarball early... but ok, yeah, it *would* be a lot more work to merge now... [15:54] all right back to my original plan then :) [15:55] I'm hoping to get Daniel to pull and release 0.9~alpha1 [15:55] have you heard from him since release? [15:57] nope [16:03] stgraber: autodev pushed to staging [16:05] hallyn: ok, I'll review and ack it once I'm done with my current meeting :) [16:18] join #ubuntu+1 === ahs3` is now known as ahs3 [16:22] what is best way to setup a fqdn on 12.04.1 ,i have static ip and domain from isp [16:22] i want to setup web and mail server [16:23] samba35: your question doesn't really make sense...are you asking how to set the host name to a FQDN on the server? [16:24] ok ,let me try to explain again [16:24] ok lets keep it simple [16:24] how do i configure fqdn on server [16:25] samba35: Have you looked at the Ubuntu server guide? [16:25] (see the channel topic) [16:25] This kind of thing is discussed there. [16:26] i have configure /etc/hosts with 127.0.0.1 localhost and 127.0.0.1 ubuntu mail.xxx.com [16:26] my hostname is ubuntu [16:26] TJ-: hello! Last week I posed a question about igb drivers acting weird. You suggested it could be related to UEFI drivers. How would I go about investigating that further? Any suggestions/docs you can point me to? [16:27] v0lksman: Wow! long time ago in IRC spacetime :D ... I think that suggestion was a result of some research I did on that driver and issues others have met, via Google. Try throwing those terms into a Google search [16:29] TJ-: yeah it was ancient... :) Will see what Google has to say today...I had been researching things last week but came up dry [16:30] I'll grep our conversation from last time to refresh my memory [16:30] TJ-: https://answers.launchpad.net/ubuntu/+source/gnome-nettool/+question/214977 [16:30] TJ-: also http://irclogs.ubuntu.com/2012/11/22/%23ubuntu-server.txt @1952 [16:31] Got it here ... shows just our conversation without the cruft [16:36] v0lksman: I think my most useful observation was "Having looked further into the igb, I'm wondering if the motherboard is using UEFI and if so, if the UEFI driver settings for the i350 are responsible for this" [16:37] Hello! Can anyone help me make my ubuntu server have a static IP so that it can be connected to? [16:37] TJ-: agreed. But I have no clue really how to chase that down. First time touching a box with UEFI [16:38] Freddie_, did you look at the server guide in the topic? [16:39] v0lksman: It's almost like having a busybox cmdline ... read up on EFI interpreter commands [16:39] What's the best way to upgrade a non-LTS install to the latest LTS [16:39] not..really... :L [16:39] TJ-: yeah I've hit a few articles today on the EFI shell. I'll dig deeper on that...Thanks! [16:39] Freddie_, I don't really help in this channel, so I'm unsure of the protocol, but look at https://help.ubuntu.com/12.04/serverguide/network-configuration.html#ip-addressing [16:39] specifically the part on "Static IP Address Assignment" [16:44] What is the proper way to upgrade a server on a antiquated release (10.10) to the latest LTS [16:44] GhostFreeman: You need to do it release by release. 10.10 -> 11.04 -> 11.10 -> 12.04. [16:45] Skipping releases is onl supported LTS to LTS. [16:45] And the command in 10.10 is do-release-upgrade? [16:49] i have write list = binaryhat, rick but only binaryhat can write to the share...help [16:52] hallyn: I just pushed a bunch of fixes to lxc-devel@lists.sf.net, would be great if you could review/ack before I push to staging. [16:53] stgraber: ok === Err404NotFound is now known as Error404NotFound === smoser` is now known as smoser [17:30] stgraber: I only saw the 3 patches [17:31] hallyn: yep, that was all I had at the moment [17:31] hallyn: you may also want to look at that new batnch from Dwight [17:35] roaksoax: erm, where is it? [17:35] tftp? [17:36] Daviey: python-tx-tftp [17:36] Daviey: python-txtftp [17:36] Daviey: quantal-proposed [17:36] oh [17:36] i was looking in precise [17:37] roaksoax: done [17:38] Daviey: thank you sir === mcclurmc is now known as mcclurmc_away === matsubara-lunch is now known as matsubara [17:54] http://reqorts.qa.ubuntu.com/reports/rls-mgr/rls-q-tracking-bug-tasks.html ? [17:55] der [17:55] jamespage: is the rls-$x-incoming tag still the proper way to get things tracked on http://reqorts.qa.ubuntu.com/reports/rls-mgr/rls-q-tracking-bug-tasks.html ? [17:55] adam_g, yep === jacalvo_ is now known as jacalvo === LordOfTime is now known as TheLordOfTime === baggar11_ is now known as baggar11 === pug is now known as Guest81757 [18:17] For web interface to IRC, any recommendation? I see cgiirc was dropped/abandoned, qwebirc has issues with python3 === Guest81757 is now known as DaveR [18:22] * hallyn off to lunch === exekias_ is now known as exekias [18:30] Hi, is there a recommended way for maintaining local (custom) patches for packages in apt? [18:31] Use some kind of software for repo maintenance. We use reprepro at work. [18:31] maswan: We have a working repo [18:32] It's just a question on the standard way to apply the patch. [18:32] Or maybe I misunderstand your answer [18:34] I can of course use a custom script to pull the source from apt and prepend/append to changelog and debian/patches/series, etc [18:34] But I thought maybe there was a 'standard' as to how to do that. [18:34] hm. well, apart from uploading the source package with your diff, we are far from using any recommended way for maintaining our local patchsets [18:34] maswan: ok, thanks [18:36] Just to verify, to make a patched binary, I need to 1) apt-get source the package; 2) put the patch (with the debian info prepended) in debian/patches/; 3) modify debian/changelog & debian/patches/series; [18:36] 4) dpkg-buildpackage === webmnky|away is now known as webmonkey [18:37] mgw: the 'devscripts' package provides a very useful 'what-patch' program that will tell you the type of the patch system in use on a specific package [18:37] it's mostly right :) so it's worth using it when you go to modify a package for the first time [18:38] yeah, debian/patches/ isn't universal I thought. been a while since I've been doing this stuff though, been doing other things than OS/software maintenance for the last 5:ish years at $work. :) [18:38] in some cases, the debian/patches/ is just there to make it easier to see which patches _have_ been applied... === furian is now known as shantorn [18:46] sarnold: thanks [18:46] i'll look at it [18:46] I'm specifically interested in openssh (AuthorizedKeysCommand patch) [18:46] The patch gets applied using the above [18:48] I think I found a bug in /proc/net/dev where would I report it? [18:51] hilarie: launchpad, the kernel team has an automated bot that will ask you to chcek if the problem also exists on upstream kernel and maybe other questions... [18:52] Was just finding that [18:53] Why does everyone want you to make an account for everything... [19:02] GhostFreeman: Yes. [19:04] thanks ScottK === yofel_ is now known as yofel === Malediction_ is now known as Malediction [19:33] I'm using a Ubuntu 12.10 box for a router/gateway/firewall plus LDAP server it works great except I'm trying to setup a IPSEC/L2TP server... [19:34] I think it has to do with ipsec verify saying this: Two or more interfaces found, checking IP forwarding [FAILED] [19:34] But cat /proc/sys/net/ipv4/ip_forward returns 1 [19:34] I can connect with my Mac OS X client but not only can I not ping local boxes on my network I can't ping the internet either. [19:34] I can show you my iptables --save output if it'd help. [19:36] stgraber: if you get a chance to review my update of https://wiki.ubuntu.com/LxcSecurity i'd appreciate it [19:36] jjohansen: ^ you too [19:36] billy_ran_away_: I wonder, cat /proc/sys/net/ipv4/conf/*/forwarding -- do the interfaces in question also have forwarding turned on? [19:36] sarnold: I'll check [19:36] Yep. http://cl.ly/L9CT [19:37] hallyn: I'll try to poke at it this afternoon [19:37] sarnold: Here's my iptables.rules: http://cl.ly/L9Oj [19:38] sarnold: I really appreciate any help you can provide. [19:38] jjohansen: thanks [19:38] sarnold: Most of the HOWTO's presume your server is behind a firewall and not the router and gateway itself. [19:38] sarnold: I'd really like to use this for both inside (internal Wifi) and outside my network [19:40] After I get it working I want to switch from PSK to certs and LDAP for authentication. But first I need to get the damn thing working. [19:45] billy_ran_away_: sounds like a fun project :) [19:45] Should have been until this snag... [19:46] hehe [19:50] hallyn: changes look good [19:51] stgraber: thanks [19:52] stgraber: are you done pushing to staging? I want to push the tiny pair of ubuntu-cloud opt parsing fixes [19:56] hallyn: yep, I'm just pushing to staging any thing that goes through lxc-devel with two reviews (signed off + one ack) but I always pull before pushing, so we should be fine. [19:58] cool, will push then === AaronMickDee_ is now known as AaronMickDee === chris|| is now known as chris| === LordOfTime is now known as TheLordOfTime [20:09] stgraber: i just sent it to the list (it's also in github.com/hallyn/lxc.git #staging.nov26.2, if that's easier) [20:10] hallyn: either way is fine, taking a look now [20:10] thanks. now on to a bit of qemu === lifeless_ is now known as lifeless === jMCg_ is now known as jMCg === pLr is now known as pLr` === pLr` is now known as pLr === benji___ is now known as benji === cpg|away is now known as cpg === cpg is now known as cpg|away === NomadJim_ is now known as NomadJim [21:44] Hey guys [21:45] Just upgraded from 11.10 to 12.04 and having some issues with Backuppc backing up my SMB guests [21:45] I've done a lot of googling and this appears to be an issue with NTLM with Samba v 3.6 [21:46] I've tried adding my domain to the smb.conf file under workgroup and that hasn't fixed the issue [21:46] Any ideas? [21:49] I get "Error NT_STATUS_UNSUCCESSFUL" [21:53] Krazypoloc: some things to look for (a) smb / nmb logs (b) can users authenticate? (c) don't just fiddle with domain vs workgroup; if you've got a domain, use it, if you've got a workgroup, use it (d) does backuppc run with system or similar account? do you need to take any steps to get those to work? (I know that's why yoou're here, but changing it from backuppc to system may make googling easier) [21:55] b - Its a domain, the machines I am trying to connect to via smbclient are domain machines and I am trying to pull the c$ share [21:56] Backuppc runs as a seperate backuppc account on the Ubuntu box [21:56] My other backups are working fine so I know its not a backuppc issue [21:56] Mac clients are working fine (rsync) [21:58] Krazypoloc: oh, so backuppc is a program that runs on ubuntu clients? hrm. [22:00] Yes, Backuppc is an open source backup solution written in pearl [22:00] I've been running an Ubuntu server for the last year and didn't have any issues until I upgraded to 12.04 [22:01] 12.04 upgraded to a new version of samba...which I understand added enhanced security... [22:01] Which I think is the issue here [22:01] Not sure if anyone has any experience connecting to Windows domain shares with 12.04 [22:02] purely out of curiosity, why did you pick rsync for the OS X clients but pick a samba-based program for the ubuntu clients? Seems like sticking with rsync for all the clients would have been easier,... [22:03] what sarnold said :P [22:03] So I don't have to configure rsync/cygwin on every single PC [22:03] I can just configure shares/perms through group policy [22:04] heh, I can understand sticking with a windows-oriented program for the windows machines [22:04] it just seems odd to use a windows-smelling client on the ubuntu machines. [22:04] Yeah I'm trying to keep the clients as native as possible [22:05] so [22:05] wait [22:05] now I'm confused [22:05] Yeah thats what backuppc uses....works very well....well as long as your DHCP pruning is strict [22:05] you said earlier that the backuppc was to back up your ubuntu machines [22:05] but rsync is far more 'native' :) on unix machines than anything smb based... [22:06] Backuppc runs on an ubuntu server [22:06] rsync is used for the Macs, smb is used for the PC [22:06] *PC's [22:07] Ubuntu Server->Backuppc scripts->LAN->PC/MAC [22:11] oh! [22:11] so [22:11] uh [22:11] does backuppc run as SYSTEM on your windows clients? [22:12] No [22:12] There is no client [22:12] It just grabs the files from the admin share [22:12] In most cases c$ [22:13] Thats the beauty of it....no need to install/config a client for each PC...its all done via the web GUI or config files of backuppc [22:14] oh... [22:14] There is literally no config on the client side for Windows clients [22:14] I think with this fourth iteration I'm finally getting it. :) [22:14] And just a key exchange for *nix clients [22:14] :) [22:15] Just hardcoding some admin password on the backup machine? [22:15] I use a domain account to pull the files from client machines to the backuppc server [22:16] It then tar's the backup job into the catalog [22:17] hallyn: hmm, could it be that the autodev change somehow messed up the tty device creation? === Akendo_ is now known as Akendo [22:17] hallyn: my containers don't seem to boot anymore here and I'm getting weird permissions errors on tty devices [22:17] hallyn: crw--w---- 1 root tty 136, 16 Nov 26 17:13 console [22:18] * stgraber downgrades to the previous daily for now === cpg|away is now known as cpg [22:20] I've a script that gets rendered by a template when chef-client runs. I've made a ton of changes to the source erb, but it's not getting re-rendered when I run chef-client. It's doing the :create action. How can I ensure this script gets updated, aside from deleting the existing file? Other templates seem to get correctly re-rendered, so I'm somewhat at a loss.... [22:21] stgraber: you have autodev turned off right? [22:21] stgraber: with autodev = 1 it'll be broken until the mountall fix gets pushed, [22:21] hallyn: right [22:21] autodev = 0 shouldn't do anything! checking [22:21] unless it's automatically on when not listed in the config? [22:21] whee, user error. figured it out. Thanks. [22:22] stgraber@castiana:~/data/vm/lxc/lib$ grep -r autodev */config [22:22] stgraber@castiana:~/data/vm/lxc/lib$ [22:23] stgraber: where is the exact source tree you're using? [22:23] hallyn: git import of staging [22:24] hallyn: FWIW, the downgrade didn't seem to help... [22:25] stgraber: these are raring containers under raring host, or what? [22:25] hallyn: quantal on raring actually, but should be similar [22:25] I just tried an older precise container and it boots fine, will check if changing the permissions of the lxc/* entries is enough to fix it [22:25] * hallyn boots up the raring laptop he'd just shut down [22:28] hallyn: hmm, so oneiric boots fine and the permissions have apparently been wrong for a while [22:28] so probably not related to the recent commits, let me dig some more, may have been an SRU breaking the world [22:28] hallyn: precise boots fine too [22:29] hallyn: right, so that's quantal and raring no longer booting, even with autodev set to 0 [22:29] hallyn: my guess is on a recent SRU breaking the world [22:29] I'm using a Ubuntu 12.10 box for a router/gateway/firewall plus LDAP server it works great except I'm trying to setup a IPSEC/L2TP server... [22:30] I think it has to do with ipsec verify saying this: Two or more interfaces found, checking IP forwarding [FAILED] [22:30] But cat /proc/sys/net/ipv4/ip_forward returns 1 [22:30] hallyn: oh, and a new mountall was released to -updates 3 hours ago, what a conincidence [22:31] I can connect and authenticate to the server from the Internet (Mac OS X) but no packets are forwarded to the local network nor the Internet. [22:32] hallyn: hmm, that's not mountall, downgraded it and still failing to boot [22:33] hallyn: oh, I have an idea but if that's the problem, we'll have to be creative on how to fix it :) [22:33] hallyn: gah, yeah, that's it... found the problem [22:33] hallyn: alright, so short story, with the new kernels (from -updates in quantal) a new filesystem called efivars was introduced. This filesystem is mounted on systems running uefi and that's detected by mountall. [22:34] hallyn: by default, our apparmor profile blocks it, which the fails the boot and gets the container stuck with nothing started. [22:35] hallyn: the problem is that adding it to fstab won't work on systems that aren't UEFI so we can't do our usual trick. We really need to let mountall mount it but block it with apparmor. [22:38] hallyn: I'm pushing the fix to ubuntu:lxc, will need to be considered for SRU [22:44] hallyn: pushed, not uploaded though as I remember you mentioning another lxc upload later this week. [22:46] stgraber: i'll be waiting a few weeks - that's for the upstartification of /etc/lxc/auto [22:46] so pusha way [22:46] (on phone, biab) [22:53] stgraber: my raring box doesn't have /sys/fs/efi. what is on that fs? is it ok to mount in the container, or does it have sensitive info? [22:54] hallyn: mounting is fine, writing is out of the question, reading might be fine but I'll have to check [22:55] it basically lets you read and write to firmware variables, storing anything from boot order to secureboot PKI keys [22:55] right, it seems like something we'd prefer for mountall to let us NOT mount [22:55] stgraber: i pushed the autodev doc fix you pointed out to ubuntu:lxc [22:56] hm,s uppose i can add the /dev/kmsg fix [22:57] yeah, for now the apparmor change was the easiest way to get a working system again, but I'll take a look at the mountall code and see how easy it'd be to fix [22:57] (sruing the mountall change will be a bit trickier than an apparmor rule change) === billy_ran_away_ is now known as billy_ran_away [22:58] stgraber: so should i build+push the pkg for now? [22:58]