/srv/irclogs.ubuntu.com/2012/12/11/#ubuntu-server.txt

uvirtbotNew bug: #1088720 in facter (main) "facter virtual runs lspci unconditionally" [Undecided,New] https://launchpad.net/bugs/108872000:16
demonaIs there a definitive list of all the kernel boot parameters for Ubuntu Server? And yes, pointing me to source code is an acceptable answer.01:50
demonaAfter doing a mountain of PXE installs the last few days I figure it's time to learn more about boot options and preseed files01:51
scalability-junkhey I'm looking into preseed files and think I got the hang with setting up raid1 and lvm, but now I wanna encrypt the lvm how can I do that?02:33
scalability-junkI couldn't find any documentation...02:33
=== NomadJim_ is now known as NomadJim
lvmersarnold, Hellowwwwzz  :)03:48
scalability-junkhey I'm using preseed files and wanted to set the hostname, but I still get prompted when specifying get_hostname. I have dhcp enabled, but I sort of think dhcp should be enabled and the hostname should be set anyway...03:52
=== Ursinha is now known as Ursinha-afk
oneseventeenis it possible to change the order apache modules get loaded?05:01
oneseventeenI'm trying to use rewrite & vhost_alias, but rewrite appears to functioning based on /var/www/ being the document root, rather than the automagically created /var/www/%1/public document root.05:03
=== Gallomimia_ is now known as Gallomimia
oneseventeennevermind, I just changed the redirect in my .htaccess, which I don't like but I'll just live with until I can find a way to make Apache generate a more accurate document root05:14
oneseventeenlooks like the issue with vhost_alias was fixed in apache 2.4, I'll just mess with my .htaccess files until apache 2.4 is integrated into ubuntu-server05:26
oneseventeen(I realize that is not a small task)05:26
=== cpg is now known as cpg|away
=== ibiris|afk is now known as ibiris
cloudmanlot of mysql updates today, anyone had problems after upgrade??06:53
=== cpg|away is now known as cpg
=== soren_ is now known as soren
=== RaringOne is now known as IdleOne
=== smb` is now known as smb
=== tspxx is now known as tspx
Adri2000zul or anyone familiar with openstack packages: why does nova-api-metadata breaks: nova-api?10:26
=== mcclurmc_away is now known as mcclurmc
sorenAdri2000: nova-api provides all the various api frontends.10:38
sorenAdri2000: nova-api-metadata provides only the metadata frontend, so the two would conflict (each trying to grab the metadata port) if installed at the same time10:39
Adri2000soren: ok. then do you know what's the use case of having a separate -metadata package? is -metadata supposed to be installed on all compute nodes? (in all/some network configurations?)10:52
jamespageAdri2000, co-incidentally I was just looking into this11:20
jamespageAdri2000, soren: I really think that should be some sort of Conflicts/Provides rather than a Breaks bearing in mind what that relationship is trying todo11:29
jamespagei.e. prevent installation of nova-api + any of the other subpackages.11:29
sorenjamespage: How come?11:47
sorenAdri2000: Well, you just have the option of running the metadata server independently of the api servers. Whichever way you choose to do so is up to you.11:48
jamespagesoren, well Breaks is not quite as strong as Conflicts; a Conflicts relation ensures that the packages cannot be installed/unpacked at the same time11:48
sorenAdri2000: On each compute host is a good idea, but not required by any means.11:48
sorenjamespage: And what does Breaks prevent and why don't you think that's sufficient?11:49
sorenjamespage: There are no files in conflict. Only ports.11:50
jamespagesoren: I understand that;11:52
jamespagesoren: say I install nova-api and then I install nova-api-os-compute; I think this will force a deconfigure of nova-api prior to install on nova-api-os-compute11:53
jamespagebut not a removal...11:53
jamespagewhich is what I think the behaviour should be11:53
sorenjamespage: Why?11:54
sorenI mean... dpkg doesn't just leave it there unconfigured. It'll get removed.11:54
jamespagesoren, will it?11:54
jamespagei think it will just not let it be reconfigured11:54
* jamespage goes to try this11:55
jamespagesoren, OK - I'm wrong11:56
jamespageit works just fine11:56
* jamespage scopes that11:57
jamespage*wrong in the context of "i think it will just not let it be reconfigured"11:57
sorenYeah. Installed, but not configured is a transitional state.11:58
sorenHrm... Terminology fail there.11:59
soren"Unpacked, but not configured" is what I meant.11:59
soren"Installed" specifically means that it's unpacked and configured.12:00
sorenbrb12:00
jamespagesoren, well whatever - its sufficient to ensure that the nova-api and nova-api-* packages don't get installed together12:00
=== niemeyer_ is now known as niemeyer
sorenjamespage: indeed12:13
jamespagesoren, I still think Conflicts is the correct approach even though Breaks does the job12:19
jamespageI normally use Breaks with Replaces (both versioned) when move files between packages.12:19
jdstrandhallyn: re netcf, could it be the testsuite?13:36
VSpikeHi. I just upgraded mysql-server (5.1) on my 10.04 server and it wont start because of missing /etc/init/mysql.conf ... that seems owned by mysql-server-5.1 according to dpkg -S and dpkg -L13:47
VSpikeA reinstall of mysql-server-5.1 doesn't fix it. Also strangely "debsums mysql-server-5.1" doesn't even list that file13:47
VSpikeWhat am I doing wrong here?13:47
=== frankban_ is now known as frankban
=== cpg is now known as cpg|away
vezqVSpike: could try to purge the package, note it might remove databases too so make backup first13:50
vezqso take a copy of /var/lib/mysql before purge13:50
VSpikethat sounds a bit harsh13:51
VSpikeIs there a way I can extract that specific file from the package and copy it into place?14:01
VSpikeYep, that works :)14:03
sebastian__Hi anyone knows an extreamly simple server management tool? something like a script on each server, that tells it's ip address and other infos to a master server?14:08
=== niemeyer_ is now known as niemeyer
Picisebastian__: as a one-time thing?14:14
sebastian__maybe a cron job every hour or so14:14
sebastian__should work on linux & mac os x14:15
Picisebastian__: There are a few ssh clients that will do simultaeneous connections to remote servers that you might be able to script to acheive that.  mssh, mussh, pssh, taktuk, clusterssh seem to fit the bill (from apt-cache search multi ssh)14:16
PiciOf course, there might be a better tool that does that out-of-the-box, but I don't know of any off the top of my head.14:17
sebastian__well, to execute somthing wih mssh for example, I need a list of all servers. I would need my server to add itself to the master server14:20
hallynjdstrand: no, wasn't that (testsuite not runnable on buildds, netlink))14:28
jdstrandI thought there might have been progress on that front, but I'll take your word for it14:30
hallynstgraber: jinkeys that guido guy is hard to parse14:40
hallynjdstrand: i'll kick off a test in ppa to make sure14:40
stgraberhallyn: hehe, yeah. I think I vaguely understood what he wants, but I'm not planning to spend any time actually making that happen myself ;)14:43
zuljamespage: ill trade you one14:46
jamespagezul, sure14:46
zuljamespage: https://code.launchpad.net/~zulcss/keystone/buh-bye-dbconfig/+merge/13921514:46
hallynkees: stgraber: ok, i see libseccomp 1.0.1 is in raring-proposed.  i'll fix up lxc to make it work with it, but are there other packages depending on libseccomp which will need updates?14:50
stgraberhallyn: according to apt-cache, no14:51
hallynk14:51
stgraberand reverse-depends seems to confirm that only lxc build-depends on it (reverse-depends -b libseccomp-dev)14:52
zulhallyn: ping netdev right?14:52
hallynzul: ?14:53
zulhallyn: the sync you asked me to do last night14:53
hallynzul: netcf, yeah14:54
=== nveitch is now known as evilnickveitch
hallynzul: (i'm doing a test run in ppa with tests enabled, but i expect those to still fail in buildds)14:56
hallynstgraber: the proper seccomp fix for lxc will require some autoconf.  do you object to an autoconf-free fix in raring package, expecting the nicer fix to come with the 0.9.0-alpha1 merge?15:19
hallyni'm fine doing it the other way, only downside is libseccomp 1.0.1 sits in -proposed longer15:19
* hallyn is torn15:20
hallynwill do quick fix first locally to make sure it even works :)15:20
hallynoh, haha15:21
hallynactually all of the seccomp code is autoconf-free in the package.  never mind.15:21
stgraberok :)15:23
jamespagezul: see mp - one minor problem15:27
zuljamespage: k thanks15:28
=== jcastro__ is now known as jcastro_
=== acidflash_ is now known as acidflash
paco1hello masters!15:41
paco1i have a problem on my server....from time to time, my server start a 'dhclient' and i loose my ip fix address....15:43
paco1how can i fix that?15:43
paco1thanks!15:43
binaryhatim trying to disaBle virbr0.  i dont need it plus its flooding dmesg--->http://fpaste.org/7kZO/15:47
zuljamespage: fixed up the comments16:13
=== matsubara is now known as matsubara-lunch
hallynstgraber: so do i just upload a new lxc it'll build against the new seccomp, and both automatically get promoted?  or is there a different workflow?16:19
=== phunyguy_ is now known as phunyguy_t430s
jamespageivoks, do you fancy finishing off bug 671065?16:23
uvirtbotLaunchpad bug 671065 in dovecot "deliver broken because dovecot.conf uses !include_try" [Medium,In progress] https://launchpad.net/bugs/67106516:23
ivoksjamespage: i might16:26
jamespageivoks, I'll barter with you for a final review of the mail-delivery charm16:27
jamespage:-)16:27
ivoksheh16:28
ivoksi need to take a vacation to actually finish the work on ubuntu stuff :)16:28
jamespageivoks, lol16:32
smoserhallyn, ping.16:32
smoserrandom curiosity. i think that i can attach disk images to lxc containers now ?16:33
jamespagezul, sorry - more comments16:34
=== Ursinha-afk is now known as Ursinha
stgraberhallyn: that should just work, yes16:35
zuljamespage: argh16:36
CaptSammyStoopid question. How safe is it to upgrade an 11 server up to 12 that is running on mdadm?16:47
CaptSammyI dont exactly have a place to backup my data16:47
scalability-junkhey is there ANY documentation about how to configure raid1 + encrypted lvm at all for preseed files?16:47
xnoxscalability-junk: it's possible to do raid1+lvm and ecrypted+lvm via preseed, easily. I am trying to make all three, but failing so far.16:48
scalability-junkxnox, yeah we talked a few days ago and I fail too.16:49
scalability-junkthought doing a manual config and then make the configs into a preseed file, but that fails :P16:49
scalability-junkonly tab tab etc. choices... not really helping.16:50
xnoxyeah....16:50
scalability-junkxnox, give me a shot if you figure it out :P16:52
ejvCaptSammy: be very careful16:55
ejvCaptSammy: first off, make sure you're using 12.04.1, 12.04.0 shipped with a particularly nasty mdraid bug16:55
smoserrbasak, no -proposed cloud-imags. what i'd likely to do test this stuff is boot existing image, add proposed, update && upgrade, rm -Rf /var/lib/cloud /var/log/cloud && reboot16:55
rbasakOK16:55
CaptSammyACK! Good to know16:56
ejvCaptSammy: save all pertinent data about the array itself, /proc/mdstat, mdadm -D /dev/mdX, mdadm -E /dev/DEVICES, save it all into a notepad file somewhere, in case it melts down16:56
CaptSammyIf I am using the automated upgrade, how do you know what ver you are going to?16:56
ejvif you're jumping to the most recent 12.04.1 you'll be using mdadm 3.2.516:57
CaptSammymayube I dont NEED to upgrade :)16:57
ejvunless its absolutely necessary, i really wouldn't, ask yourself why you need to upgrade to begin with16:57
demonaGotta keep up with the Joneses!16:58
scalability-junkxnox, that's my raid1 lvm setup not sure yet if it works... now trying to figure out how to merge it with my encrypted lvm setup...16:58
scalability-junkhttp://pastebin.com/KsbYyhrY16:58
CaptSammyI was going tro install newznab and figured it might be a good time to upgrade the system at the same time16:58
ejv11.04/11.10 are showing it's age, i think if you are simply prepared, you'll be fine16:59
ejvif, after the upgrade, your array won't assemble, just don't panic, come to irc or email the linux-raid list for assistance16:59
CaptSammymaybe I should grab an external 2T drive and backup first17:00
CaptSammyThe array is my big fear, I am not raid savvy17:01
CaptSammyand I got the entire machine booting and running on that mdadm array17:01
scalability-junkxnox, refined one: http://pastebin.com/BXGr6bZp I'll test it now and wish me luck.17:02
ejvraid isn't a backup, so yes, you should have a backup17:03
CaptSammyWhats a good app for backing up my server to an external nightly?17:03
ejvcron + rsync17:03
CaptSammydrives are cheap enough, might as well do things right17:03
* RoyK uses bacula17:04
CaptSammybacula might be more "user friendly"?17:04
RoyKrsync won't keep old versions17:04
RoyKbacula is a bit hard to setup at first, but working with it (with bat etc) is rather user-friendly17:05
* qhartman uses dirvish17:05
qhartmanall the benefits of rsync, but with historical snapshots and a really robust expiration policy manager17:06
RoyKdirvish is a good alternative too17:06
CaptSammyis it command line friendly?17:06
RoyKafaik dirvish is only commandline ;)17:06
qhartmanDirvish is really command-line only17:06
qhartmanno gui at all17:07
ejvthat's totally not true, you need to script rsync to properly handle versioning.17:07
CaptSammyMy system is of course headless and not GUI17:07
qhartmanyeah, I use dirvish to backup a server in Denver to a server in Eugene every day17:07
qhartmanhave been for years, and it's been totally bullet proof17:07
RoyKCaptSammy: my server is headless as well, but running bat from it over ssh is quite easy with x11 forwarding17:07
* RoyK usually have x libs installed on his servers17:08
RoyKsome software is easier to use with a GUI, after all17:08
RoyKsome software have a small webserver for local administration, usually listening to localhost only - running firefox http://localhost:something is way more userfriendly than using lynx or similar text mode browsers, and it doesn't make the system more insecure17:11
CaptSammydoes dirvish or bacula have web front ends?17:12
qhartmandirvish does not. You basically build a config that defines your backup policy, set a cronjob to run the backup, and that's it17:13
qhartmanto get files or whatever, you just browse the file system17:13
qhartmanuse normal commands to copy files back or whatever you need17:13
RoyKCaptSammy: bacula has webacula, but like the rest of bacula, it's got a bit steep learning curve to get it installed - works well when it's installed, though17:15
jribI'll throw in another suggestion: rsnapshot17:15
RoyKthat is, you have webacula and a few others17:15
qhartmanjrib, I also use rsnapshot in a few places, and it also works well.17:15
qhartmanReally any of the mature tools are arguably good choices17:15
qhartmanyou just need to decide which one fits your use case best17:16
RoyKit's all a discussion between whatever fits or what you like17:16
RoyKI've gotten used to how bacula works, so I use that...17:16
qhartmanindeed17:16
CaptSammyOn bacula.org they show the web front end, looks nice17:16
RoyKurl?17:17
CaptSammyshould be relativily easy since I am only backing the one machine up?17:17
CaptSammyhttp://www.bacula.org/images/bweb1.png17:17
qhartmanCaptSammy, it really feels like you're overthinking this. Pick one, try it out, if you don;t like it, try something else.17:18
CaptSammytru17:18
RoyKCaptSammy: setting up bacula is a bit hard anyway, since it's an enterprise system, really - it makes little difference in setting up bacula for one or fifty servers, somehow17:18
RoyKCaptSammy: with bacula, you have to setup retention policies and virtual tapes, not quite like the others mentioned here17:18
qhartmanBacula probably is overkill, RoyK is not kidding when he says it's got a learning curve. I've looked at it a couple times, and decided against it every time,.17:18
RoyKqhartman: I originally set it up for a five-site backup with some 200 machines17:19
qhartmanthe tape thing is the killer for me, it's designed to work with legacy tape library semantics, which is extra complexity I don't need, and am not used to.17:19
RoyKqhartman: now I'm using it for 7 machines or so, single site17:19
qhartmanRoyK, right, and for that environment it probably made a lot of sense, and since it's still owkring, no point in changing.17:19
RoyKbut then, I've learned how to work with it :P17:19
CaptSammybummer, I like the web control17:20
RoyKCaptSammy: spend an hour with the bacula config - it's a good howto on their sites - and bweb or webacula or something else can do fine17:21
RoyKCaptSammy: there's also #bacula17:21
RoyKon their *site* even17:22
* RoyK just uses bat17:22
=== matsubara-lunch is now known as matsubara
RoyKthat's the bacula X interface17:22
CaptSammyThanks for all the insight17:31
CaptSammyI am going to install a 3T drive and backup before trying an upgrade17:37
CaptSammyAmazon has a 3T drive for 150 bucks17:38
CaptSammyI remember when a ten meg drive was around six hundred bucks17:38
CaptSammyand thought "who could ever fill this thing"?17:39
RoyKCaptSammy: we've all thought that way ;)17:40
RoyKCaptSammy: keep in mind that that single 3TB drive may just die one day without giving you a warning17:40
CaptSammyIs there a way to spin down a drive when not used for an active backup?17:41
RoyKCaptSammy: better get some cheap 1TB drives and setup a NAS (or a DIY-NAS with an old PC)17:41
RoyKCaptSammy: yes, you can do that, but normally the best a drive can have, is a stable atmosphere with stable temperature17:41
CaptSammyIf that 3T dies the only way I could lose data is if my Raid5 dies atr the same time though17:42
RoyKman hdparm17:42
paco1It exists a ubuntu dnssec doc?17:42
RoyKthere's an "auto spindown" there iirc17:42
CaptSammyThanks again!17:44
CaptSammyany of you run newznab?17:46
* RoyK doesn't17:48
=== shadeslayer is now known as buildslayer
=== mcclurmc is now known as mcclurmc_away
=== ibiris is now known as ibiris|afk
zulim surpised no one has asked for samba 4 yet19:43
SpamapSzul: its been in Ubuntu/Debian for a long time as a beta/alpha19:44
blkperlzul: why would I want to ask for it, my current samba server work just fine :)19:45
zulSpamapS:  yeah but its no longer beta/alpha19:45
SpamapSI know19:45
Piciit looks like the RC is in raring19:46
SpamapSI'm sure the final will ship19:46
stgraberhallyn: https://bugs.launchpad.net/ubuntu/+source/ifupdown/+bug/1065684 is quite a pain to fix ;)19:54
uvirtbotLaunchpad bug 1065684 in ifupdown "network-interface-security.conf needs to go away when the interface does." [Medium,Confirmed]19:54
stgraberhallyn: I managed to decrease the number of -security devices by half at least19:54
stgraberhallyn: the problem we still end up with is that upstart doesn't get any event when a device is moved to another namespace...19:55
stgraberhallyn: so on a veth pair, we can only properly flush the host device but not the container device19:56
stgraberhallyn: I think we already discussed this but I'm seeing a few options to make the problem completely go away, not sure if you have any preference19:57
stgraberhallyn: 1) Get the kernel to emit net-device-removed + net-device-added when a device is moved between netns19:57
stgraberhallyn: 2) Have lxc store the original name of the device and instead of destroying it in the netns, move it back to the host with its original name, then destroy it19:57
stgraberhallyn: 3) Introduce some kind of net-device-moved kind of event we could use to stop the various jobs (though that's a bit tricky as we'd need to detect the case where a device is moved back to the host)19:59
stgraberhallyn: 1 or 2 would fix a whole bunch of bugs we're getting at the moment where various piece of software try to do state tracking of net devices and fail with containers20:02
stgraberhallyn: I actually believe that's the source of the memory leak I've seen in network-manager here as it's getting net-device-added events but no net-device-removed, it's still storing data as if it still existed20:03
stgraberhallyn: which considering I created around a thousand veth devices since yesterday, wastes a fair bit of memory :P20:03
hallynjinkeys - now that's a backlog20:07
hallynstgraber: there is a kernel patch for sending event when dev is moved to another ns20:08
hallynit's in net-next20:08
hallynwe could ask rtg to pull it into raring20:08
hallynin other words, option (1) is done in net-next20:09
stgraberhallyn: can you point me to the commit and I'll e-mail ubuntu-kernel about it for inclusion so I can close that bug for good ;)20:10
hallynthat's a problem :)20:10
hallyncause i can never find that tree.  lemme check linux-next20:10
hallynstgraber: http://git.kernel.org/?p=linux/kernel/git/next/linux-next.git;a=commitdiff;h=4e66ae2ea371cf431283e2cb95480eb86043285620:11
hallynstgraber: thanks for pursuing that :)20:11
* hallyn goes to finish this pair of libvirt bugs finally20:12
stgraberhallyn: thanks! I was just going to tell you to that net-next is owned by David Miller but you were too quick to find the commit in -next ;)20:13
hallynhah - i know it's *owned* by dmiller, but i never know where to find it.  it's not on kernel.org lasti i knew20:14
hallynso i every time i want to do something based on net-next...  i end up stalling20:14
hallyn:)20:14
hallynstgraber: feh.  i sent seccomp patches to the mailing list from hallyn.com.  lxc-devel is holding them.  i forgot the list admin password (or dlezcano changed it).  so i'm just going to push to staging...20:18
hallynstgraber: if you want to look first, it's github.com/hallyn/lxc.git #staging.dec11.1.seccomp.220:19
stgraberhallyn: can you hold on posting to staging? I'd actually prefer to have what's currently in staging be released as 0.9.0~alpha1 (so it matches my pull request)20:20
stgraberhallyn: I'm trying to get Daniel to do the release ASAP so we can start pushing stuff to it again20:20
hallynstgraber: actually this might ought to go to alpha, bc otherwise it will FTBFS on debian20:21
stgraber(I should have branched to 0.9.alpha1 on github and use that for the pull-request, but only thought of it after sending the e-mail...)20:21
stgraberhmm, fair enough, push it then :)20:21
hallynstgraber: ok20:22
hallynpushed.  thx.  i likely won't touch the tree again until next year.20:24
hallynstgraber: heh 'hello *kernel*people*'20:26
paco1Here can i take advantage to have any help about dnssec on ubuntu?20:26
stgraberhallyn: :)20:27
hallynstgraber: no ':)' to the last paragraph though.  Y I K E S20:28
stgraberhallyn: just took a look at the seccomp patch, looks good. I assume you did a test build with/without seccomp to make sure nothing blows up?20:28
hallynyup, and with old+new api20:31
=== cpg|away is now known as cpg
paco1anybody can help me on dnssec?20:44
_KaszpiR_question21:17
_KaszpiR_i've got server on some old motherboard with e6550, its on bios21:17
_KaszpiR_now I'd like to move the ssytem to moterboard with UEFI - any ideas what to do/avoid etc?21:17
=== SJrX is now known as SJr
axisyshow do I check if network is the bottleneck? I have a tacacs+ daemon which intermittenly do not respond to router21:56
axisysrunning on ubuntu-server21:56
axisysnetstat -ni shows TX-ERR 4304824 and TX-OK 122892254621:57
axisysno RX-ERR21:57
=== niemeyer_ is now known as niemeyer
=== matsubara is now known as matsubara-afk
zasternI'm having a weird issue - I have the resolvconf package installed, but nothing i put in /etc/resolvconf/resolv.conf.d/tail or /base has any effect22:21
_KaszpiR_axisys depend on the card, on the wifi this can be ok, but on wired link you got serious issue22:35
Kartagishi22:47
KartagisI need help with http://232aae397ea4bcf2.paste.se/22:47
Kartagiscan you help me?22:48
hallynjdstrand: fwiw the netcf tests still fail on buildds :(23:14
hallynzul: jamespage: smoser: do you have any comments on the documentation/note in http://people.canonical.com/~serge/qemu-kvm-sysctl.debdiff ?23:20
hallynjdstrand: as the patches have been acked upstream, i'm going to push lp:~serge-hallyn/ubuntu/raring/libvirt/libvirt-hugepages to the archive.23:31
=== acidflash_ is now known as acidflash
hallyn(that is, if i don't see an objection before tonight :)23:38
* hallyn bbl23:38
jdstrandhallyn: ack, I saw that. I clanced at them and they seemed reasonable23:40
demonaEven as Ubuntu's desktop flavor annoys me more, I keep finding new things to like about the server version23:40
jdstrandhallyn: thanks for that :)23:40

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!