[01:06] <Gaming4JC> Hey all, trying to migrate from a worthless VPS server. Is it possible from a SolusVM Serial Console to start sshd on the VPS. It is running Ubuntu.
[01:07] <Gaming4JC> their support team told me they would not be able to assist because of "my bad configuration" which appears to be a problem on their end, can't ssh into the VPS :(
[01:07] <sarnold> Gaming4JC: do you have a login: prompt on the serial console? or is it stuck somewhere else?
[01:08] <Gaming4JC> sarnold: I can get into root at serial console, however I'd like to turn ssh back on and login as my user and backup my stuff locally.
[01:09] <sarnold> Gaming4JC: excellent. first things first, run apt-get update && apt-get install openssh-server openssh-blacklist openssh-blacklist-extra
[01:09] <sarnold> Gaming4JC: if it wasn't installed yet, this will install it. if it is installed, it ought to be a no-op
[01:11] <Gaming4JC> sarnold: It has sshd but it's only for the control panel, it's like a limbo account. I can't login as my user and the IP is different from the VPS (it would appear to be spawning an SSH shell on the control panels IP itself) :-/ ??
[01:12] <Gaming4JC> at any rate I should be able to backup most of my stuff from this shell, even though user permissions are all wrong and I can't get dropbox to sync as my user
[01:13] <sarnold> Gaming4JC: hrm; are you trying to use password or keys? when you try to ssh in, what error do you get?
[01:14] <Gaming4JC> sarnold: trying to use passwords. I'm getting Connection refused
[01:15] <sarnold> Gaming4JC: check netstat -anp output and see which IPs your sshd is bound to
[01:15] <sarnold> Gaming4JC: check iptables -L output and make sure you can connect to your sshd from your client
[01:17] <Gaming4JC> sarnold: inside of Serial console it is bound to 0.0.0.0 and ipv6 ::: :(
[01:18] <Gaming4JC> ok I think I have something, it's letting me login from root and drop to user, at least then I can innitiate a backup
[01:18] <Gaming4JC> :)
[01:20] <sarnold> Gaming4JC: 'it' == serial console, right?
[01:21] <Gaming4JC> sarnold: yes, ran a netstat -anp inside of serial console and you can see an sshd running and bound to 0.0.0.0
[01:24] <Gaming4JC> wow.
[01:24] <Gaming4JC> begin to see the problem. I'm inside the VPS and can't even ping google.com
[01:24] <Gaming4JC> it can't reach the internet
[01:25] <sarnold> Gaming4JC: hey, that's progress and a good reminder to check the basics. :)
[01:26] <Gaming4JC> yes, was overthinking the obvious :)
[01:26] <sarnold> Gaming4JC: ip addr show ; ip route show   ... make sure those look sane? :)
[01:27] <Gaming4JC> looks pretty insane - http://pastebin.ubuntu.com/1398178/
[01:27] <Gaming4JC> that's ip addr show
[01:27] <FauxFaux> DOWN
[01:28] <Gaming4JC> heh, I think I'll cancel my subscription ASAP. :|
[01:29] <sarnold> wow. never seen 'lo:..down' before. :)
[01:30] <Gaming4JC> Well, I guess I could have expected as much for 1TB bandwith 1GB of memory and 100GB of space for $100 a year.
[01:30] <Gaming4JC> cheap :P
[01:30] <sarnold> that sounds like a good deal, indeed :)
[01:31] <Gaming4JC> It worked for 11 months with 80/75% up-time and 512MB of ram :)
[01:31] <FauxFaux> 80% uptime, eh.
[01:31] <sarnold> haha
[01:31] <Gaming4JC> they told me it's my fault it runs so bad
[01:31] <Gaming4JC> epic support.
[01:31] <Gaming4JC> ran Minecraft on it ;)
[01:31] <FauxFaux> None of our other customers noticed!
[01:32] <FauxFaux> To be fair, http://www.hetzner.de/hosting/produkte_vserver/vq7 is about competitive with that, and they are a serious hosting company (i.e. 98+% uptime).
[01:32] <FauxFaux> http://www.hetzner.de/en/hosting/produkte_vserver/vq7
[01:32] <FauxFaux> That's unfair, it's probably 99.99%+
[01:32] <sarnold> that's the third time in three weeks I've heard good things about hetzner :)
[01:33] <Gaming4JC> not heard of them but will keep it in mind. I got one of the LowendBox ChicagoVPS packages ($300 for $30 Cybermonday deal) that I'm going to test out next
[01:33] <Gaming4JC> gotta love 90% discounts
[01:33] <Gaming4JC> I expect a lot
[01:33] <Gaming4JC> ;P
[01:33] <FauxFaux> I said cheap, not good.  Their server auction, https://robot.your-server.de/order/market , is pretty awesome, if you want, say, more than 100gb of storage for under €30/mo.
[01:33] <FauxFaux> (Which is why I'm with them.)
[01:34] <Gaming4JC> Chicago VPS was $30 for a year
[01:34] <Gaming4JC> :)
[01:34] <FauxFaux> Sounds awful. =p
[01:34] <Gaming4JC> 2GB of ram, 1TB of bandwith and 50GB of space
[01:34] <Gaming4JC> w00t
[02:34] <kantlivelong> hey all.. im setting up a raid 5 using mdadm.. im a bit confused on what to do.. i made autodetect partitions on each drive.. the total size will end up over 4TB requiring GPT.. do i need to make a partition on the md0?
[02:50] <patdk-lap> kantlivelong, heh? you need gpt if your making a partition and if the drive is >2tb
[02:50] <patdk-lap> you don't need to partition md0 if you don't want to
[02:50] <patdk-lap> depends on what your doing
[02:50] <patdk-lap> you could must format it with your filesystem
[02:50] <patdk-lap> partition it, then format
[02:51] <patdk-lap> or install lvm on it, then format the lvm parts
[02:51] <patdk-lap> if you don't boot from it, no need for partitions though
[02:51] <sarnold> patdk-lap: why would you need to partition it if you boot from it?
[02:52] <patdk-lap> sarnold, cause grub will get upset? and so will the bios
[02:53] <sarnold> patdk-lap: hrm, grub can find its way through raid5? :)
[02:53] <patdk-lap> hmm, yes
[02:53] <patdk-lap> grub has had raid support for awhile
[02:54] <sarnold> nice!
[02:54] <patdk-lap> I don't know of the limitations, if any
[02:54] <patdk-lap> cause I would never boot from my data disks
[03:17] <Chalaman> hello all
[03:19] <ruben231> hi guys
[03:20] <ruben231> any help on this please, i got error---------------------> http://pastebin.com/yEMZuc6F -------------------------> http://pastebin.com/TSA2EEcM
[03:25] <lvmer> What do you guys use to DLNA to a "smart tv" ?  minidlna?
[03:25] <lvmer> or is there something like media tomb?
[03:29] <ruben231> guys any help there
[07:53] <D3RGPS31> how can i skip the warning dialogue for no swap when installing server 12.10 through kickstart
[08:22] <Sander^work> Can anyone recommend software for alert monitoring and graphing of server performance?
[08:31] <pndemc> I installed Zpanel on my ubuntu server, and now I can't launch my game servers, it keeps telling me "No such fule or directory" when it gets to either ./steam or ./srcds_run
[08:41] <vezq> Sander^work: Zabbix
[08:42] <Sander^work> vezq, What is it based on?
[08:44] <Sander^work> vezq, I would prefer something with an agent.
[08:48] <Sander^work> vezq, Would prefer something which dosn't require snmp configuration.
[09:12] <progre55> hi guys. How do you set a timezone on a remote server without interactvity? "dpkg-reconfigure tzdata" requires some extra actions from the user =)
[09:12] <vezq> Sander^work: it has an agent, not snmp required
[09:23] <FauxFaux> progre55: Set /etc/timezone then run dpkg-reconfigure -f nointeractive tzdata.
[09:23] <FauxFaux> Well, on Debian, anyway.
[09:24] <progre55> FauxFaux: thanks, will try that
[09:39]  * pr3d4t0r eyes FauxFaux.
[10:04] <BrixSat> any one here with cisco any connect  vpn client? (i cant seem to make it run automaticaly in ubuntu server)
[10:04] <BrixSat> i have to make the connection manualy by typping the commands
[10:04] <BrixSat> in to the vpn program of cisco
[10:14] <mjau^> morning!
[10:14] <mjau^> what apache version does the latest ubuntu-server run?
[10:16] <rbasak> mjau^: https://launchpad.net/ubuntu/+source/apache2 will give you a summary
[10:17] <mjau^> rbasak: ah, so 2.2.22 then? do you know if it's got OCSP support?
[10:49] <BrixSat> nobody with cisco vpn?
[10:53] <greppy> not on linux.
[12:52] <satya> we are getting tcp reset on port 80, while other ports are getting accessed properly .. there is no firewall which is running on the system .. can anybody provide any clue or help
[12:54] <FauxFaux> What happens if you stop the webserver?
[12:55] <RoyK> satya: check the webserverlogs
[12:56] <satya> there is no request which is getting logged on webserver
[12:56] <satya> packet getting tcp reset as we see in tcpdump
[12:56] <RoyK> satya: and netstat -ln --tcp shows you're listening to port 80?
[12:56] <satya> yup
[12:57] <RoyK> which webserver?
[12:57] <satya> nginx
[12:57] <RoyK> perhaps try to strace -f nginx
[12:57] <satya> it works if we run on any other port other than 80
[12:57] <RoyK> perhaps try to strace -f `pidof nginx`
[12:57] <RoyK> eh - that doesn't make sense...
[12:58] <RoyK> perhaps try #nginx
[12:58] <satya> even we tried with nc -l 80 after stopping nginx
[12:58] <satya> still no luck
[12:59] <RoyK> do the packets arrive to port 80?
[12:59] <RoyK> does it work from localhost?
[12:59] <satya> yes
[12:59] <RoyK> yes what?
[12:59] <satya> both yes
[13:00] <RoyK> no idea - must be an nginx issue...
[13:00] <RoyK> that is - I really don't know
[13:00] <FauxFaux> I love the way people just ignore me.
[13:00] <RoyK> iptables -vnL shows an empty set?
[13:00] <satya> we stopped nginx and made port 80 listening using netcat
[13:00] <satya> yes iptables show empty
[13:01] <FauxFaux> So, kill netcat and try to connect.  What does the client get/
[13:01] <satya> http://paste.ubuntu.com/1399034/
[13:01] <RoyK> kill nginx and netcat and check with netstat -ln --tcp if something's listening
[13:01] <FauxFaux> Jesus fucking christ.
[13:03] <satya> nothing is listning on port 80
[13:03] <satya> and the response is
[13:03] <satya> telnet: Unable to connect to remote host: Connection refused
[13:05] <satya> we suspect some kernel firewall or some sort of thing in os which is sending resets to port 80
[13:16] <Kartagis> sorry if not appropriate question here, but would using pvcreate on an already existing partition wreck it?
[13:21] <RoyK> Kartagis: it'll overwrite whatever's there, yes
[13:21] <RoyK> or at least the start of it
[13:23] <jamespage> Daviey, just added the check for irqbalance to the default server test in raring
[13:23] <Kartagis> thanks RoyK, looks like it's useful to make a backup first
[13:24] <Daviey> jamespage: thanks
[13:24] <RoyK> Kartagis: it's always useful to have a backup or two...
[13:24] <Kartagis> RoyK: how do I move the backed up files back afterwards? a simple mv will do?
[13:24] <jamespage> Daviey, running the tests now in the lab
[13:24] <RoyK> I ususally just use rsync
[13:26] <Daviey> jamespage: running the test for just raring, or precise daily aswell?
[13:26] <jamespage> Daviey, thats just raring atm
[13:27] <Daviey> jamespage: confirmed, precise includes it.
[13:27] <Daviey> it must just be the cloud images..
[13:27] <jamespage> Daviey, for precise - lemme check
[13:28] <Daviey> jamespage: My iso install just confirmed it
[13:28] <jamespage> Daviey, for precise?
[13:28] <Daviey> Yes, iso precise has it.. I haven't confirmed cloud images
[13:31] <jamespage> Daviey, cloud-image looks OK _ although it stops on a m1.small due to only having 1 cpu
[13:31]  * jamespage tries a bigger image
[13:31] <soren> What's the problem with irqbalance?
[13:32] <jamespage> Daviey, actually its installed in my raring cloud-image as well - just not running
[13:32] <jamespage> soren, question over whether its shipping by default or not
[13:32] <jamespage> but I think it is
[13:33] <soren> It is. It's been since... Gosh, a long time ago.
[13:33] <jamespage> soren, yes
[13:33] <Daviey> soren: Yep, been in standard since Lucid, and seeded directly before
[13:33] <jamespage> Daviey, I'm not sure this is an issue tbh
[13:34] <Daviey> soren: The issue is a large user had a 'bad time' until they installed it
[13:34] <hallyn> stgraber: a guy (in private email, sigh) complains that lxc-clone doesn't preserver hardlinks.  do you have any experience with how much -H slows down rsync?
[13:34] <Daviey> soren: So i'm trying to work out how they are not having it byu default
[13:35] <soren> Daviey: Ah, I see.
[13:36] <Daviey> jamespage / soren: Might not be a one off.. http://www.linux-archive.org/ubuntu-user/519707-irqbalance-off.html
[13:37] <jamespage> Daviey, hmm
[13:39] <soren> Daviey: I may have a guess.
[13:39] <Daviey> soren: oh?
[13:41] <Daviey> jamespage: Maybe the reason you are seeing it not run, is it exit's itself if it's a one (v)cpu box
[13:41] <jamespage> Daviey, thats what I'm thinking
[13:42] <jamespage> its def installed and is running when I spin up something with more than 1 CPU
[13:42] <soren> Daviey: Hang on, readiing code.
[13:42]  * jamespage probably just created a test failure in the lab by adding a check for this.
[13:43] <soren> Daviey: Oh, wait... Did they say it wasn't installed or that it didn't run?
[13:44] <Daviey> soren: Honestly, the info is too sketchy to be sure
[13:44] <Daviey> I think it was not installed.
[13:44] <soren> That package's use of debconf is... umm... interesting.
[13:44] <soren> db_set irqbalance/enable ENABLED
[13:45] <soren> where irqbalance/enable is a boolean
[13:45] <soren> (from irqbalance.config)
[13:45] <Daviey> hah
[13:46] <Daviey> Still, i don't think that is the cause.
[13:47] <soren> Daviey: You're probably right.
[13:47] <jamespage> soren, I can't see that?
[13:48] <jamespage> soren, package dbconf looks OK to me
[13:55] <Daviey> jamespage: you are confident this isn't a bug our side?
[13:57] <jamespage> Daviey, I don't think so
[13:57] <jamespage> Daviey, needs a check of the aws cloud image as well
[13:59] <Daviey> jamespage: surely that would be the same?
[13:59] <Daviey> but yes, good thinking
[13:59] <Daviey> jamespage: Do you have access to an AWS image running already?
[14:00] <stgraber> hallyn: nope. I wouldn't expect it to take much longer as rsync needs to call stat on all the files anyway, all -H should do is that it'll do it before copying anything to figure out if some are the same inode
[14:02] <zul> jamespage: https://code.launchpad.net/~zulcss/ubuntu/precise/python-novaclient/new/+merge/137201
[14:05] <hallyn> stgraber: ok, then maybe i should just add it always.  I usually use lvm cloning anyway so *I* don't care :)
[14:05] <jamespage> Daviey, installed on 10.04 and 11.10 instances I have running
[14:06] <stgraber> hallyn: I usually use the rsync code path, but I'm on SSD pretty much everywhere ;)
[14:06] <jamespage> Daviey: erm - I don't appear to have a handy 12.04/12.10 instance to check this on
[14:08] <Daviey> jamespage: OK, lets leave it for now
[14:08] <Daviey> thanks for your help
[14:08] <jamespage> zul, see MP - 1 minor nit; please fix and upload
[14:09] <jamespage> Daviey, ack
[14:09] <zul> jamespage: ack
[14:10] <zul> jamespage: last one https://code.launchpad.net/~zulcss/ubuntu/precise/python-keystoneclient/new/+merge/137202
[14:12] <jamespage> zul: stop
[14:12] <zul> stopped
[14:13] <Daviey> zul: your bzr commit includes 3 x * New upstream release...
[14:14] <zul> Daviey: for which one?
[14:14] <Daviey> https://code.launchpad.net/~zulcss/ubuntu/precise/python-keystoneclient/new/+merge/137202
[14:15] <zul> Daviey:  in the debian/changelog? i dont see
[14:15] <Daviey> the bzr commit...
[14:15]  * jamespage rewinds
[14:15] <zul> Daviey: im looking at line 552 of the diff
[14:17] <Daviey> ah, i guess that makes more sense... i was looking at the BZR COMMIT LOG
[14:17] <jamespage> zul: sorry - python-novaclient is fine for precise-grizzly
[14:18] <zul> jamespage: k
[14:18] <Daviey> (remember debuild -v)
[14:19] <zul> keystoneclient alright as well?
[14:19] <jamespage> zul, keystoneclient looks OK as well
[14:21] <zul> cool thanks
[14:21] <jamespage> zul, Daviey, smoser: I added a new script to smoses cloud-archive-check
[14:21] <jamespage> ~james-page/+junk/cloud-archive-check/
[14:21] <jamespage> lp:~james-page/+junk/cloud-archive-check/
[14:22] <jamespage> verify_ca_branch.py - see code for details of what it does
[14:23] <Daviey> release notes?!  THE CODE IS THE RELEASE NOTES :)
[14:34] <Kartagis> what package does it take to install KDE? kdebase-bin?
[14:34] <Kartagis> sorry, wrong channel
[14:40] <caribou> what is a good tool to browse python code ? ctags ? cscope doesn't seem to like python
[14:49] <RoyK> caribou: spyder?
[14:49] <RoyK> there's a bunch of different ones out there
[14:50] <RoyK> oh, spyder is the scientific one - probably not what you'r looking for
[14:50] <benji> caribou: I have used cscope semi-succesfully with Python but it was a hack (and a hack that I don't remember very clearly); ctags works well, for what it is.  I have been meaning to try http://pypi.python.org/pypi/pycscope/
[14:51] <caribou> benji: yeah, I saw mentions of pycscope, but didn't find it in the archives. Since I had ctags already installed, I tried it but not convinced
[14:52] <caribou> benji: I'll give a second look at pycscope
[14:52] <benji> caribou: if you think of it, let me know how it goes; I would like to be motivated/demotivated with regards to setting it up mysel
[14:52] <caribou> benji: ok, will do
[15:03] <caribou> benji: d/led it, installed & built the cscope file. seems to do what I want, even from within VIM with exhuberant CTAGS shortcuts
[15:03] <benji> cool, sounds like a winner
[15:03] <caribou> from the timestamp, took ~10 min to setup :)
[15:19] <hallyn> zul: jdstrand: http://people.canonical.com/~serge/libvirt-hugepages.debdiff and http://people.canonical.com/~serge/qemu-hugepages.debdiff, plus a server guide entry on picking values for sysctl vm.nr_hugepages ...  any objections?
[15:20] <zul> hallyn: looks good to me
[15:23] <JoeVLcek> smoser: ping
[15:24] <yolanda> hi, is there any way to build a package skipping the tests? i'm just trying to debug some lintian errors
[15:24] <jdstrand> hallyn: well, this gets back to if guests end up with access to other guests
[15:25] <jdstrand> hallyn: I'm not really familiar with hugepages. will the kernel isolate them based on pid or similar?
[15:25] <jdstrand> (if so, then ack-- it is as good as the kernel enforcing other access controls)
[15:30] <hallyn> jdstrand: no, the kernel won't isolate guests based on pids i don't think
[15:30] <hallyn> however, you have to opt into /run/hugepages/kvm being mounted...
[15:32] <hallyn> jdstrand: so to make this more secure, we'd have to edit qemu_driver.c and virt-aa-helper.c, i assume, to grant access to only $HUGEPAGES_MOUNT/libvirt/qemu/<vm-name> ?
[15:34] <hallyn> jdstrand: but... there are no files under there, actually
[15:35] <kirkland> does anyone know if it's possible to have multiple partitions on an EBS root device?
[15:35] <kirkland> (and still actually boot the damn thing?)
[15:44] <jdstrand> hallyn: if there are no files, what is it accessing?
[15:44] <hallyn> jdstrand: just looked, here's how it works
[15:45] <hallyn> libvirt just creates $hugepagemount/libvirt/qemu, and runs qemu-kvm with -mem-path <thatpath>,
[15:45] <hallyn> qemu-kvm then opens a file in that dir, mmaps memory from it, and truncates the file immediately
[15:45] <hallyn> so that's why with a hugepage-backed vm running, there areno files to be found in that dir
[15:47] <jdstrand> seems a rogue guest would not be able to take advantage of that... I assume there is some locking mechanism to prevent races on $hugepagemount/libvirt/qemu
[15:48] <hallyn> jdstrand: qemu-kvm uses mkstemp in that dir
[15:48] <jdstrand> ah
[15:48] <jdstrand> that sounds ok then
[15:48] <jdstrand> hallyn: thanks for looking into it
[15:48] <hallyn> so the worst a guest should be able to do is grab all the hugepages
[15:48] <hallyn> np.  thanks, ttyl
[15:48] <jdstrand> yeah, but apparmor wouldn't prevent that anyway
[15:49] <jdstrand> (assuming the user actually wants to use hugepages)
[15:49] <hallyn> right
[15:49] <jdstrand> or rather, assuming the host wants guests to use hugepages
[15:50] <jdstrand> hallyn: hugepages is opt-in via the xml?
[15:50] <hallyn> yes
[15:50] <hallyn> (unfortunately :)
[15:50] <hallyn> i need to look into adding a switch in virt-manager for that
[15:50] <jdstrand> hallyn: so, actually, since that is the case, would it be better for virt-aa-helper to add that line only for guests that want huge pages?
[15:51] <hallyn> yeah...
[15:51] <hallyn> i guess i need to look deeper into virt-aa-helper anyway.  there are other open bugs with that...
[15:55] <jdstrand> hallyn: I think all you need to do is in get_files() look in ctl->def->(<whatever hugepages is>) and see if you should use it, then call virBufferAsprintf() appropriately (see vah_add_file for how to do that)
[15:58] <hallyn> jdstrand: waht exactly is get_files() meant to do?  get list of all paths it needs access to?
[16:00] <jdstrand> hallyn: it looks in the vm definition for user specific file paths, yes
[16:01] <hallyn> jdstrand: all right for now i think i will (a) push that qemu-kvm debdiff, and (b) look at every apparmor related libvirt bug i can find and see if i can get a few done in one fell swoop along with this
[16:01] <jdstrand> hallyn: a few are also added in main()
[16:01] <jdstrand> hallyn: this one might be better in main() (or some function you create called from main() rather than get_files(), since the actual path is user specified)
[16:02] <jdstrand> err
[16:02] <hallyn> jdstrand: actually this might be a problem - the path isn't user specified per se,
[16:03] <jdstrand> *isn't* user specified
[16:03] <hallyn> so virt-aa-helper will have to reprdouce the logic done in qemu_driver.c to determine the path
[16:03] <jdstrand> hallyn: hmm
[16:03] <hallyn> ok, will look into it - thanks, bbl
[16:06] <sliddjur> Hello, how do I open port 53 for DNS?
[16:07] <sliddjur> I created etc/iptables.rules and it contains "-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
[16:07] <sliddjur> "
[16:08] <andol> sliddjur: While DNS uses TCP in some cases (large responses) it most commonly uses UDP.
[16:08] <sliddjur> andol, yeah, i got a line for udp too
[16:09] <sliddjur> nmap shows port 22, 111 and 2049 is open
[16:09] <andol> sliddjur: Of course assuming that /etc/iptables.rules is read by an iptables-restore (or an iptables-apply) somewhere.
[16:14] <SpamapS> adam_g: hey, I was looking at quantal SRU's and noticed the nova and quantum SRU's which have a ridiculous number of bug #'s, but no single bug to track the general testing effort (since we'll be doing them like an MRE)
[16:22] <yolanda> mm, i'm having a lintian error about empty binary package, but that package actually has some contents inside /usr/share/doc... is that a good idea to add some lintian overrides there, or what's the best fix for that?
[16:24] <yolanda> jdstrand, what do you think about it? ^
[16:25] <jdstrand> if it doesn't ship anything usable or isn't a meta-package, it should probably be removed.
[16:27] <yolanda> jdstrand, it's the nova-compute-xcp package, and ships some documentation inside /usr/share/doc/nova-compute-xcp/
[16:56] <jdstrand> yolanda: sorry for the delay
[16:56] <yolanda> jdstrand, no problem, i'm trying to progress with other points
[16:56] <jdstrand> yolanda: so, /usr/share/doc/nova-compute-xcp/changelog.Debian.gz is there because the package was declared in debian/control
[16:56] <jdstrand> yolanda: so that shouldn't be considered
[16:56] <jdstrand> yolanda: /usr/share/doc/nova-compute-xcp/copyright is an actual file
[16:57] <jdstrand> yolanda: t (to be considered), but it is referring to things that the package doesn't ship. this looks to be a mistake
[16:59] <jdstrand> yolanda: looking at the Depends, it seems to be a package made simply to pull in python-xenapi
[17:00] <yolanda> i added an override there
[17:00] <yolanda> a lintian overrides
[17:01] <jdstrand> yolanda: I suggest asking zul what the intent of the package is (he added xcp support in 2012.1~e4-0ubuntu1)
[17:01] <jdstrand> an override might be ok, I can't say. zul can let you know if there is a mistake there
[17:01] <zul> its on my personal todo list to fix for raring
[17:01] <zul> override should be fine for now
[17:07] <keyz182> Hi all, not sure if there's a better place to be asking this, so point me there if so. I'm running an Essex openstack installation at the moment on Ubuntu 12.04 for a university research project. We'd like to upgrade to Folsom, and there seems to be an upgrade path out there for it, but I can't find much info on it other than Mark Shuttleworths video, and instructions on how to enable
[17:07] <keyz182> the correct repo. Is there any info out there, or guides, on preperation that needs to be done, potential problems, and any manual steps? My google-fu is failing me today.
[17:09] <yolanda> zul, ok, i added that override
[17:12] <roaksoax> jamespage: howdy!! so I was thinking that it doesn't really make sense to make the charms (i.e. keystone) configure its own haproxy when there's really a charm for it
[17:12] <roaksoax> jamespage: so we should probably use it as a subordinate
[17:12] <roaksoax> or figure out a way to use it effectively
[17:13] <jamespage> roaksoax, charms can only have one personality
[17:13] <jamespage> subordinate or principle
[17:13] <roaksoax> jamespage: right, we can have a simplified version of the HA proxy charm then
[17:13] <roaksoax> jamespage: i.e. keystone principal, with 2 subordinate haproxy/hacluster
[17:13] <roaksoax> and a relation in bteween the subordinates
[17:14] <roaksoax> jamespage: or even colocate them with jitsu
[17:14] <jamespage> roaksoax, not that last option
[17:14] <roaksoax> yeah that wouldn't work with add-unit
[17:14] <jamespage> everything should be deployable WITHOUT jitsu
[17:14] <jamespage> roaksoax, I agree with 're-use' for haproxy but not with subordinate
[17:15] <roaksoax> jamespage: right, so then there's really no way to do so without integrating haproxy in keystone
[17:15] <roaksoax> jamespage: or even in the hacluster charm
[17:17] <jamespage> roaksoax, OK - so reuse the same code for haproxy across all of the openstack charms that need it
[17:18] <jamespage> and add stuff into the charm hooks that calls it in the right way
[17:18] <jamespage> that way the principle is in charge of configuring its haproxy; hacluster takes care of the VIP/service failover
[17:18] <jamespage> I think adding another subordinate is over complicating things
[17:19] <roaksoax> jamespage: right, so we will only use haproxy if we have hacluster right?
[17:19] <adam_g> SpamapS: what is the quantum SRU? i had put together a nova SRU last month for quantal-proposed with a meta bug (LP: 1074359) to track. but upstream has released a new stable release yesterday that ill be preparing a new one (today,m hopefully) that will supersede that one.
[17:20] <SpamapS> adam_g: ah ok, want to just reject the current upload then?
[17:20] <SpamapS> adam_g: I'd say just make it clear in the changelog which one is the meta bug
[17:20] <SpamapS> adam_g: and re quantum, I'll just chalk that up to me assuming you did them both.
[17:21] <jamespage> roaksoax, hmm - probably;  the principle should start generating config for haproxy as soon as it has peers
[17:21] <jamespage> and a vip configured
[17:22] <roaksoax> jamespage: right, so I think it might be easier to make the hacluster do that config, since it is there were we will configure the vip
[17:22] <adam_g> SpamapS: looks like zul did the quantum one back on nov 07th. rejecting them is fine. in the new batch ill be  sure to reference the metabug at the top of the changelog
[17:22]  * jamespage thinks
[17:25] <adam_g> SpamapS: also FYI--i sent an email to the TB list yesterday (stuck in moderation, tho) requesting cinder and quantum be added to the existing MRE
[17:26] <SpamapS> adam_g: Its still "provisional".. I wonder, how many have been done since that provisional MRE was granted?
[17:28] <hallyn> jdstrand: <shrug> still playing, but i think i'll just need to add the backing file to the VirDomainDef struct
[17:30] <jamespage> roaksoax, not sure TBH; I like the separation between hacluster (responsible for VIP's and service control) and a principle that set's up and configures the services
[17:30] <jamespage> that way if a principle starts todo something new; then all it has todo is tell hacluster...
[17:31] <roaksoax> jamespage: or, you can simply tell hacluster "get me haproxy with HA"
[17:31] <roaksoax> jamespage: then hacluster will configure haproxy for such escenario
[17:31] <roaksoax> jamespage: and in principal charms, you would simply say
[17:31] <roaksoax> "enable haproxy, this is the VIP i want you to use"
[17:32] <jamespage> hmm
[17:32] <roaksoax> jamespage: i see this as a similar thing as what will happen with DRBD
[17:33] <jamespage> I remain unconvinced
[17:33] <adam_g> SpamapS: we managed to push out 4 SRUs (LP: #1041120).  this time around there is a set release schedule for upstream point releases, so i expect we'll be shooting to do as many in Ubuntu this time around
[17:35] <jamespage> roaksoax, sorry - I'm not trying to be awkward :-)
[17:36] <roaksoax> jamespage: lol no worries :)
[17:37] <roaksoax> jamespage: so HA proxy in this escenario (running in the same place as keystone), doesn't make sense without hacluster
[17:37] <roaksoax> right?
[17:37] <jamespage> roaksoax, agreed; and it won't work really cause it does not have an IP to bind to
[17:37] <jamespage> roaksoax, the way I saw it (probably) was
[17:37] <jamespage> juju set keystone vip=xx.xx.xx.xx
[17:37] <jamespage> juju add-unit keystone
[17:38] <jamespage> (at which point we start generating a haproxy configuration using a peers hook)
[17:38] <jamespage> juju deploy hacluster keystone-hacluster
[17:38] <jamespage> juju add-relation hacluster keystone
[17:39] <jamespage> (keystone then says to hacluster - relation-set vip=xx.xx.xx.xx service=haproxy)
[17:39] <jamespage> ^^ that line is over simplified I know
[17:39] <jamespage> and then hacluster does it magic, brings up a vip on one of the nodes and starts up haproxy
[17:39] <jamespage> roaksoax, does that make sense?
[17:40] <taowa> Hos do I use wireless on ubuntu server
[17:40] <roaksoax> jamespage: yeah, that's very similar workflow as I was thinking but doing so in the hacluster side
[17:40] <roaksoax> as in: juju set keystone vip=x.x.x.x
[17:40] <roaksoax> juju deploy keystone
[17:40] <roaksoax> juju deploy hacluster
[17:40] <roaksoax> juju set keystone service=haproxy
[17:41] <roaksoax> juju add-relation keystone hacluster
[17:41] <smoser> JoeVLcek, i'm here now.
[17:41] <roaksoax> juju add-unit keystone
[17:41] <taowa> Hos do I use wireless on ubuntu server
[17:41] <roaksoax> jamespage: and then, hacluster say, oh wait, keystone wants to use VIP for HA proxy, let's install and configure haproxy for usch purpose
[17:42] <taowa> How do I use wireless on ubuntu server?
[17:42] <roaksoax> jamespage: to me, in reality, is the same in either place
[17:42] <sarnold> taowa: normally, it is considered polite to repeat questions once an hour at the most.
[17:42] <jamespage> roaksoax, hmm
[17:44] <roaksoax> jamespage: in this case escenario it is exactly the same
[17:44] <jamespage> roaksoax, I just prefer the split of what (in keystone) and how (in hacluster)
[17:44] <roaksoax> jamespage: the benefit I see, however, is thta this would work (or should) if we don't deploy them in the same machine
[17:45] <jamespage> roaksoax, I don't understand that last comment
[17:46] <roaksoax> jamespage: basically is "there might be various units of keystone, but as long there's no hacluster controller haproxy, then they are all useless"
[17:46] <roaksoax> s/controller/controling
[17:47] <roaksoax> so you might aswell integrate haproxy in hacluster, the same way you would do with DRBD
[17:47] <roaksoax> as in, juju deploy mysql
[17:47] <roaksoax> juju dmeploy hacluster
[17:47] <roaksoax> juju add-relation mysql hacluster
[17:48] <roaksoax> hacluster will then say, oh mysql in HA, so I need to configure DRBD, and put all the mysql stuff in the DRBD partition
[17:48] <roaksoax> and control mysql
[17:48] <roaksoax> jamespage: but again, to me really, it is the same doing it in keystone or doing it in the hacluster
[17:49] <elventear> Hello. I am having an issue with a software raid 1 volume that is rebuilding. The new drive that was added to the volume is writing at very slow speeds, in the the hundreds of KB/s. Any ideas what could I check to see what is going on?
[17:49] <jamespage> roaksoax, it think it is different
[17:50] <jamespage> roaksoax, keystone should tell hacluster which resources it should HA; same with MySQL
[17:50] <sarnold> elventear: anythin in dmesg that looks like io errors?
[17:51] <elventear> sarnold: Nothing.
[17:53] <roaksoax> jamespage: sure! again really this doesn't make any difference to me
[17:53] <roaksoax> it is ust who does the configuration and controls it
[17:54] <roaksoax> because my way of seeing things in this particular case is "haproxy does not make any sense without hacluster"
[17:54] <roaksoax> so you might as well do the haproxy configure in hacluster rather than in keystone
[17:54] <elventear> I changed the scheduler and things are better now. I was using deadline.
[17:55] <roaksoax> same as it wouldn't make any sense to have DRBD without hacluster
[17:55] <roaksoax> so hacluster should be the one configuring DRBD based on the specifications of whomever wants to use DRBD
[17:55] <sarnold> elventear: no kidding? o_O
[17:55] <sarnold> elventear: thanks for reporting back :)
[17:56] <elventear> sarnold: Maybe I spoke too soon. Speeds spiked for a while but they are going down :(
[17:56] <jamespage> roaksoax, I think the two use-cases are different; DRDB is 'please provide me with a replicated block device' - its just one thing
[17:56] <jamespage> roaksoax, haproxy is software with potentially service specific configuration....
[17:57] <roaksoax> jamespage: same as drbd :)
[17:57] <sarnold> elventear: oh :/
[17:57] <jamespage> roaksoax, OK _ so maybe me trying to think this through at 1800 on a Friday is not working so well.
[17:57] <roaksoax> jamespage: haha maybe :)
[17:58] <roaksoax> jamespage: i beer would help,. wouldn't it?
[17:58] <jamespage> roaksoax, can I suggest that you put together a prototype of each; we have most of the keystone bits done for haproxy in keystone; lets work them both and compare and contrast next week
[17:59]  * jamespage thinks that sometimes its a good idea to spike two solutions to see which one works best
[17:59] <roaksoax> jamespage: indeed
[18:00] <jamespage> roaksoax, adam_g: btw I have quantum integrated into the nova-compute charm now
[18:00] <JoeVLcek> smoser: ping
[18:00] <jamespage> just need to finish off the quantum gateway bits now - but that will be monday
[18:00]  * jamespage <- brain is fried
[18:01] <roaksoax> jamespage: to finilize my thoughts, for simplicity, keystone would manage haproxy, then you need to add support for cloud-controller no manage haproxy as well right?
[18:01] <jamespage> roaksoax, yes - but the code will be shared across all os services that need this feature
[18:02] <jamespage> so its a hook and a call to nova-common/openstack_common
[18:02] <jamespage> +1 extra package to install
[18:02] <JoeVLcek> smoser: Sorry I missed you. I was grabbing some lunch. Back now
[18:03] <jamespage> roaksoax, have a good rest of the day - catchup monday
[18:03]  * jamespage signs out for the weekend
[18:03] <roaksoax> jamespage: alright, you have a good weekend
[18:03] <jamespage> (like that actually ever happens)
[18:04] <jamespage> roaksoax, you to
[18:06] <qwebirc14433> Hi, my /boot ran out of space.  What's the proper way to remove files in /boot?
[18:06] <qwebirc14433> I am trying to upgrade from 10.04 to 12.04 and encountered "no space left on device"
[18:07] <greppy> qwebirc14433: uninstall any unused kernels
[18:07] <qwebirc14433> how to uninstall?
[18:08] <greppy> dpkg -l | grep linux-image
[18:08] <greppy> then for instance do: apt-get remove linux-image-3.2.0-30-generic
[18:08] <greppy> or whatever your old unused kernels are.
[18:09] <qwebirc14433> ic.  so i can basically remove all the old kernels, maybe keep one or two just in case needed right?
[18:10] <greppy> I normally only keep the last kernel and the current one.
[18:10] <greppy> and once I reboot on the latest one and all is well, I have been known to remove the older ones and only leave the one.
[18:12] <qwebirc14433> great, it's working!  Thanks greppy!
[18:29] <Lorax> perhaps a silly question, but will the current iso fit on a 2gig usb stick with unetbootin?
[19:23] <lvmer1> Where should I ask ubuntu-server dlna questions? I'm having trouble with linux -> samsung pc for some reason, while windows seems to work fine.
[19:23] <lvmer1> samsung tv**
[19:25] <tedski> lvmer1: which dlna server are you using?
[19:27] <lvmer1> tedski: I tried minidlna & it didn't seem responsive to the tv, but it worked across computers so I uninstalled it & was just going to go down a list until I found one that worked: mediatomb, mythtv, serviio, etc. But I figured I'd ask, because Mezzmo from Win7 -> samsung tv works fine.
[19:27] <sarnold> I've used ushare to my ps3 before, but it never seemed to work as well as just using the browser on the ps3 to download video files...
[19:27] <sarnold> pause kinda sucked.
[19:28] <lvmer1> sarnold: yah fastforward kinda sucks for me xD
[19:28] <lvmer1> lol I'm 'pinging' a tv.....
[19:29] <lvmer1> what has this world come to
[19:29] <sarnold> lvmer1: just wait until your tv refuses to do anything until you give it a software update..
[19:29] <lvmer1> sarnold: lol that already happened
[19:30] <lvmer1> it forced me to download "angry birds" as part of a necessary software update
[19:30] <lvmer1> lmao
[19:30] <sarnold> hahaha
[19:30] <tedski> lvmer1: i hate to answer your question with a different solution... but i use plex
[19:30] <lvmer1> yah... makes you wonder.... what kind of deal did samsung do with angry birds lol
[19:30] <tedski> lvmer1: samsung has an app for it, too
[19:30] <lvmer1> yah
[19:31] <lvmer1> pcsharemanager or allshare or something
[19:31] <lvmer1> doesn't work even on my windows pc's no idea why
[19:31] <lvmer1> doesn't work on the samsung bluray player either
[19:31] <lvmer1> I doubt I can install it on linux either
[19:31] <lvmer1> unless I do some crazy wine terminal stuff on the server
[19:32] <lvmer1> I'm going to try plex and ushare
[19:32] <lvmer1> thanks tedski & sarnold   :)
[19:41] <simen> Hi guys. I am trying to locate the cause of my high load. I have low CPU, low RAM, low IO wait. Are there any other parameters that might affect my load?
[19:42] <simen> I am guessing maybe some latency? Maybe epoll (memcached) or TCP/IP.
[19:42] <sarnold> simen: what do you mean by 'high load'?
[19:43] <simen> sarnold: I mean 10 concurrent users on a web server with 1 core and 2 GB RAM is constantly around 1.7. Web server is Nginx with APC caching and Memcached
[19:43] <taowa> How do I use wireless on ubuntu server?
[19:44] <sarnold> taowa: what have you tried? where are you stuck?
[19:44] <taowa> Nothing..
[19:44] <SpamapS> simen: so if you run top, you don't see anything using CPU?
[19:44] <genii-around> man wpa_supplicant
[19:44] <Danichan> hello!
[19:45] <simen> sarnold: Top has brief spikes of php-fpm processes doing some work, but average CPU is around 20%
[19:45] <SpamapS> simen: Is this by any chance on Ubuntu 10.04 on EC2?
[19:45] <SpamapS> simen: there were problems with "phantom load" on EC2 for a while
[19:46] <simen> SpamapS: No, it's 12.04 VPS - hosted by my provider. Not sure about their infrastructure
[19:46] <SpamapS> "VPS" ?
[19:46] <SpamapS> Can you elaborate?
[19:46] <simen> SpamapS: "Phantom load" describes my problem pretty well. Good name
[19:46] <TheLordOfTime> their image i think SpamapS
[19:46] <simen> SpamapS: VPS = Virtual Private Server. So on some other, bigger box.
[19:46] <TheLordOfTime> simen, we know that, but what architecture?
[19:46] <TheLordOfTime> 32bit?  64bit?
[19:46] <SpamapS> simen: but, is it a VM, or a container?
[19:46] <TheLordOfTime> all VMs still have an arch.
[19:47] <TheLordOfTime> :P
[19:47] <SpamapS> If its a container, then thats the issue.
[19:47] <TheLordOfTime> although SPamapS has a good point
[19:47] <Danichan> I have a samba PDC  and a client as ROLE_DOMAIN_MEMBER that it can join to the domain using a terminal. Can i log in domain using a xdm like slim or gdm??
[19:47] <simen> My service provider often talks about "container" and how there sometimes isn't room for me to upgrade on it.
[19:48] <Danichan> windows domain style
[19:48] <SpamapS> if its a VM, you should see the "steal%" go up with other users using your CPU, and that is also "load"
[19:48] <henkjan> SpamapS: hmm, leaving canonical?
[19:48] <SpamapS> henkjan: aye
[19:48] <SpamapS> henkjan: have we met?
[19:48] <henkjan> no, i just read your post at the planet
[19:49] <SpamapS> ah ok :)
[19:49] <SpamapS> simen: ignore load average
[19:49] <simen> SpamapS: really?
[19:49] <SpamapS> simen: though realistically, it probably *is* legitimate
[19:50] <SpamapS> simen: your concern is response time of your app
[19:50] <SpamapS> simen: you should be monitoring that
[19:50] <simen> SpamapS: Actually, response times are not bad
[19:50] <henkjan> SpamapS: you where responsible for mysql 5.5 packaging right?
[19:50] <SpamapS> simen: I suggest logging how long requests take, and having your monitors watch for spikes and trends in the logs.
[19:50] <SpamapS> henkjan: yes
[19:50] <SpamapS> henkjan: still am responsible actually :)
[19:51] <henkjan> and you keep maintaining it after you leave?
[19:52] <SpamapS> simen: the load is just saying that on average you have 1.7 things waiting for resources .. with 10 users (assuming they never pause to LOOK at the screen, just keep clicking), thats still only 170ms per request
[19:52] <SpamapS> henkjan: when I can, here and there.
[19:52] <SpamapS> henkjan: others have the skills to pick up the slack.
[19:53] <henkjan> maybe...
[19:53] <henkjan> ik took long enough for 5.5 to become packaged for debian/ubuntu
[19:54] <SpamapS> henkjan: only because the Debian maintainer was transitioning out of his old role, so it took a while for us to get it going
[19:54] <henkjan> ah, okay
[19:54] <SpamapS> henkjan: I expect 5.6 to land very quickly after it goes GA
[19:54] <ScottK> SpamapS: Is that expected for raring?
[19:55] <SpamapS> no
[19:55] <SpamapS> definitely no
[19:55] <ScottK> Oh good.
[19:55] <henkjan> ScottK: afaik there is no public announced date for 5.6GA
[19:55] <SpamapS> ScottK: they always need 1 or 2 point releases to shake out the final GA stuff
[19:55] <SpamapS> as in, you wait for GA, then you *try it*.. then you wait for the next 2 patches, then you deploy it.
[19:55] <henkjan> SpamapS: did you manage to get one of the codership guys to UDS Kopenhagen?
[19:55] <simen> SpamapS: You are a legend. Thank you for connecting load with ms for me. Also, I'm quickly doing some request logging in Nginx, will post an example in a minute. Thanks
[19:55] <SpamapS> It will definitely be in 14.04 unless Oracle implodes or something
[19:56] <SpamapS> henkjan: they were busy.. but Stewart Smith from Percona had enough info to be helpful.
[19:57] <SpamapS> henkjan: the problem with Galera at the moment is that it is somewhat invasive as a patch to MySQL, so its really like another derivative.
[19:57] <henkjan> ah, would be nice to get xtradb-cluster or mysql + galera in main
[19:57] <SpamapS> The plan is to do xtradb-cluster
[19:58] <SpamapS> Percona's going to work on it.
[19:58] <henkjan> cool
[19:58] <SpamapS> And I may even still work on it.
[19:58] <henkjan> i'll ask the percona guys next week :)
[19:59] <SpamapS> Reminds me I need to see about going to Percona Live again. Would be 4 years in a row
[19:59] <henkjan> 2nd time for me
[19:59] <henkjan> got free tickets this year :)
[20:01] <henkjan> SpamapS: are you next week in London @ percona live?
[20:01] <SpamapS> no
[20:01] <SpamapS> the US shone
[20:01] <SpamapS> one
[20:01] <henkjan> the big one :)
[20:01] <hallyn> jdstrand: sigh, it looks like virSecurityManagerGenLabel is called too early for either hugepage backign info or vnc socket path info
[20:05] <hallyn> all right guess i'll need to add fns...
[20:43] <hallyn> aha, the mem info may be fine.  the vnc - i may just not be setting up an appropriate test case.  sigh
[20:53] <kirkland> hallyn: howdy!
[20:54] <kirkland> hallyn: have you ever used kexec in ubuntu?
[20:57] <hallyn> kirkland: nope
[20:57] <hallyn> well, only to test whether you cando it from a container :)
[20:57] <kirkland> hallyn: and?
[20:57] <hallyn> looking to do some ksplicing?
[20:57] <kirkland> hallyn: no not really
[20:57] <hallyn> and it needed a patch to prevent it
[20:58] <kirkland> hallyn: trying to support reboots of encrypted overayroot
[20:59] <hallyn> kirkland: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1034125
[21:00] <sarnold> teehee
[21:00] <hallyn> sar	:)
[21:00] <hallyn> hm
[21:01] <hallyn> that was weird
[21:01] <sarnold> laggy ssh to your irc client?
[21:02] <hallyn> very
[21:02] <kirkland> hallyn: i'm failing to kexec load
[21:02] <kirkland> kexec_load failed: Device or resource busy
[21:06] <hallyn> kirkland: can you strace that?
[21:06] <hallyn> in kernel all i see is two EBUSYs on mutex load and one if htere are frozen processes
[21:07] <hallyn> (well, if freeze_processes() fails)
[21:07] <kirkland> hallyn: http://paste.ubuntu.com/1400579/
[21:08] <kirkland> openat(AT_FDCWD, "/sys/firmware/edd", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[21:08] <kirkland> interesting
[21:08] <hallyn> well doing openat and giving a full pathname is interesting :)
[21:08] <hallyn> is that the lst failure though?
[21:09] <hallyn> oh nm.  it's kexec_load itself
[21:10] <kirkland> hallyn: yeah
[21:10] <kirkland> hallyn: what is supposed to populate edd?
[21:10] <hallyn> my guess is machine_kexec_prepare() is failing.  dunno why
[21:10] <hallyn> apw might have an idea
[21:10] <kirkland> apw: howdy :-)
[21:11] <kirkland> apw: I reckon it's late on a friday night for you