/srv/irclogs.ubuntu.com/2012/12/17/#ubuntu-server.txt

anepanal1ptosomg ipv6 is so hard00:32
joe_VitelHello. I'm trying to set up a test MAAS/Juju/openstack environment. I've got every node running, and according to juju status they are all setup corrently as far as I can tell. The big issue is that I cannot log into the Openstack Dashboard using admin and the admin-password provided in the keystone config file when deploying keystone. Any ideas?00:41
=== pug is now known as Guest11967
=== Guest11967 is now known as DaveR
=== acidflash_ is now known as acidflash
waspinatorhow would I auto start an openvpn client? I can connect using sudo openvpn client.ovpn but not with service openvpn start04:17
=== cpg is now known as cpg|away
=== ibiris|afk is now known as ibiris
=== cpg|away is now known as cpg
=== ibiris is now known as ibiris|afk
=== ibiris|afk is now known as ibiris
BroodoobobI have a question about software raid on server 12.0408:06
BroodoobobI have ext4 with journaling on top of raid1 using mdadm08:06
Broodoobobwhen the array re-syncs, the ext4 journaler hangs for LONG periods of time and locks up the kernel08:07
Broodoobobhas anyone else experienced this? any ideas? it's a serious problem.08:08
BroodoobobI'm seeing bug reports on the issue from 2010, but it seems like the devs could never track it down08:12
uvirtbotNew bug: #1091114 in checksecurity (main) "fuse mount cause problem to find -xdev" [Undecided,New] https://launchpad.net/bugs/109111408:26
uvirtbotNew bug: #1089711 in nova (main) "nova.conf unreadable is hard to diagnose" [Undecided,New] https://launchpad.net/bugs/108971108:37
jstephanhey, guys short question, how can i see the reason for an security update via console?08:59
xnoxTheLordOfTime: yes.09:10
rbasakjstephan: you could do something like "apt-get changelog <package>/precise-security"09:31
jstephanah, okay, thx09:31
=== alaing_ is now known as alaing
=== alaing_ is now known as alaing
=== cpg is now known as cpg|away
=== alaing_ is now known as alaing
yaboohi all, got a issue with mdadm, taken the disks from one server installed them in another server, but they will not reassemble.10:58
yaboohow can I reassemble them10:58
xnoxthe homehost will not match, so you either assemble them by hand, override their hostname to match, or make it ignore homehost setting.11:01
=== asac is now known as asac_the_hacker
=== mcclurmc_away is now known as mcclurmc
=== asac_the_hacker is now known as asac
=== alaing_ is now known as alaing
Jeverhi.14:26
Jeverjust tried to install php5-mysqlnd this would remove phpmyadmin14:26
Jeveras far as i read this is considered to be a bug14:26
Jeverbecause phpmyadmin depends on php5-mysql14:27
rbasakphpmyadmin depends on: php5-mysql | php5-mysqli | php5-mysqlnd14:28
rbasakSo it should accept any one of those14:28
rbasakJever: ^^14:29
Jeveri'l14:29
Jeveri'll try14:29
Jeverdoesn't work14:30
Jeverif i install php5-mysqlnd it removes phpmyadmin and php5-mysql14:30
Jeverif i try to install phpmyadmin afterwards it will remove php5-mysqlnd again and install php5-mysql14:31
rbasakTry requesting both at once. Hopefully it'll tell you why it can't fulfill thta14:31
rbasakAh14:32
rbasakLooks like php5-mysqlnd was added as an option after precise. It's present in raring.14:32
Jevernope can't install both14:32
Jeverso what does that mean for me14:32
rbasakAssuming that the packages will work together, it sounds like an acceptable bug as you described. I'm not sure if a dependency change would be acceptable for a stable release update though.14:34
Jeverhttps://bugs.launchpad.net/ubuntu/+source/phpmyadmin/+bug/101267014:35
uvirtbotLaunchpad bug 1012670 in phpmyadmin "Dependency on php5-mysqli" [Undecided,Confirmed]14:35
rbasakSo a bug would be marked as fix released as it's fixed in the current development version, and somebody would have to ack it for an update to 12.04 if it is acceptable (I'm not sure if it is)14:35
Jeverthis was 6 months ago14:35
patdk-wkare we sure phpmyadmin works with mysqlnd?14:35
Jeverokay but is there a quick fix for me to install it anyway?14:35
rbasakIn the meantime, you could override the dependency, or use a more recent release14:35
Jeveri would like to override it to test if it works for me14:36
rbasakpatdk-wk: I'm not sure, so this is all assuming that it is. However the latest php5 package in raring seems to allow it.14:36
rbasakLooks like it works in 12.10.14:37
Jevercan't update though. any way to ignore dependencies without using dpkg manually?14:38
rbasakI think you have to use dpkg manually14:38
Jeverwhich means that i won't get updates?14:39
rbasakEasiest hack would be to install both using apt-get, then you'll have the right package in /var/cache/apt/archives to install with an override using dpkg14:39
rbasakThings will break if you use updates14:39
Jeverhmpf. i'll stay with php5-mysql14:39
Jeverthanks for your help14:39
rbasakYou could rebuild phpmyadmin in a PPA if you're feeling adventurous14:41
rbasakSorry I can't give you a better option! Thanks for bringing it up and finding the bug. I've updated the bug.14:41
Jeverno problem. just wanted to test it and found out that it doesn't work yet14:43
patdk-wkrbasak, same issue for php-mdb2-driver-mysql14:44
patdk-wkguess a bunch of packages need to be updated14:45
rbasakYes. Or the different drivers should all provide a virtual package and consumers like phpmyadmin could just depend on that14:45
patdk-wkhell, I would likely opt to maky php5-mysql a meta package that installs php5-mysqlnd by default14:45
rbasakHow many are there?14:45
patdk-wk314:46
patdk-wkmysql mysqli mysqlnd, though mysql and mysqlnd are *compatable*14:46
patdk-wkcurrently atleast14:46
rbasakphp-mdb2-driver-mysql doesn't seem to conflict with anything though, so phpmyadmin can be installed with it14:48
rbasakI don't know whether it would use it or not14:48
patdk-wkhmm?14:48
rbasakYou said same issue with php-mdb2-driver-mysql?14:48
patdk-wkyes14:48
patdk-wkit depends on php5-mysql14:48
rbasakOh, I see.14:48
patdk-wkinstall php5-mysqlnd wipes it :)14:48
patdk-wkoh, it's universe14:49
rbasakSo is phpmyadmin14:49
patdk-wkguess I can just use pear instead for that14:50
rbasakThe rdepends list for php5-mysql is quite large14:52
uvirtbotNew bug: #1000175 in openssh (main) "Unable to copy id to a server that is listening on non-default port (dup-of: 518883)" [Wishlist,Confirmed] https://launchpad.net/bugs/100017515:06
rbasaksmoser: ahem. Oops. Fixed. I did wonder why the cloud-init maintainers team was going to review it!15:31
rbasaksmoser: btw, I couldn't figure out what was going on with the packaging, so I left it. debian/control exists in both trunk and the packaging branch for example, and are different.15:33
smoserrbasak, its just an upstream that has its own debian/15:34
rnbradyhi folks15:50
rnbradyany maas peeps around?15:50
rnbrady…tumbleweed......15:52
smoserrbasak, did you know that cloud-init probalby as of precise will output the full fingerprint to the console ?15:53
smoserer... the full key15:53
smoserso you dont have to do the fingerprint and ssh-keygen check.15:53
* rbasak looks15:54
rbasaksmoser: I see. That's useful!15:54
pmatulisrnbrady: maybe try the #maas channel15:54
rbasaksmoser: still need to support the old method though, do you think? Or forget about it if precise supports it?15:55
smoseri think it'd be nice to support the old method.15:55
rnbradypmatulis: ah yes, thanks!15:55
smosermagically fall back to it if only that form is found.15:55
rbasakOK. I'll have to rethink the CLI a bit though15:56
rbasakI guess I need to make it grep-fingerprint and grep-public-key, import-fingerprint and import-public-key, and fix will dtrt.15:56
smoserthat is https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/89340015:58
uvirtbotLaunchpad bug 893400 in cloud-init "cloud-init: Output public ssh host key (for known_hosts)" [Low,Fix released]15:58
smoserjust for reference15:58
rbasakThanks!15:58
savrI've installed MAAS. I only have one server (acting as master) now that I wish to install openstack. In about two weeks I'm adding another node. Am I suppose to add my master server as a node to maas?16:36
savrI've installed MAAS. I only have one server (acting as master) now that I wish to install openstack. In about two weeks I'm adding another node. Am I suppose to add my master server as a node to maas?16:43
RoyK!patience16:44
ubottuDon't feel ignored and repeat your question quickly; if nobody knows your answer, nobody will answer you. While you wait, try searching https://help.ubuntu.com or http://ubuntuforums.org or http://askubuntu.com/16:44
smosersavr, you can askin #maas, fwiw.16:44
fij0hello16:45
smosersavr, the maas server is not a node in maas. is that what you were asking ?16:45
RoyKhi all. my brother has a RAID-5 on three 2TB drives and want to add another three drives to make it a 6-drive RAID-6. Anyone here that knows if this can this be done in a single operation, or will he have to add a single drive at a time? also, he's currently on Lucid, kernel 2.6.32 and IIRC that doesn't support migrating to RAID-6, is this right? I guess an upgrade to Ubuntu Precise shouldn't be too hard...16:45
savrsmoser: currently maas is telling me I have 0 nodes16:45
smoserright.16:45
smoseryou have 0 nodes.16:45
savram I suppose to add the master as a node?16:45
smoseryou really ahve to add other nodes.16:46
smoserthe maas master is not a node in itself.16:46
smoser(if it was, and it could manage, that would then force itself to re-install itself)16:46
savrI shouldn't really be using maas then?16:46
smosermaas allows you to treat a group of hardware as provisionable like a cloud (which juju uses to install openstack). juju install of openstack is several nodes (glance, compute, swift...)16:47
smoserso with just 1 node, maas is not terribly useful.16:47
savrI don't really know why I installed maas. I'm following the guide to use juju to install openstack16:47
smosersavr, for a single "all in one openstack", the best solution that i'm familiar with is devstack.16:48
savrthe reason why I'm installing openstack is because I intend to have a few servers and want the ease of being able to move services around16:48
smoserbut that wont allow ubut that will not give you any real path to grow16:48
savrfor some reason I think it is a billion times easier to do all this manually16:49
savras that is what I'm use to and all these new tools seem a lot more complicated than editing a few config files16:49
rbasakPerhaps one needs to suffer the pain of doing all this manually before one accepts the usefulness of having automated tools for all of it :)16:49
savrrbasak: I've done all this manually many times16:50
rbasakFor a single server, it's probably not worth it16:50
savrI know how to do it manually16:50
rbasakWhat you have is a server, not a cloud!16:50
savrI'm going to have 4 servers and maybe 5 services running inbetween them all16:51
savrI want them to failover and load balance16:51
savrto set this up manually is like 1 hour work for me16:51
rbasakSounds like that's your best bet then16:51
savrto understand maas juju openstack cloud foundry etc is much more difficult16:51
savrok then16:52
savrtime to nuke this maas install16:52
savrdoes juju make any sense for me?16:52
savror cloud foundry or open stack?16:52
pmatulissavr: if you intend to have a smallish static environment, i don't think so16:54
smoseri would say that if you're comfortable managing virtual systems in some other way, 4 servers and 5 services is a small number and you will incur significant overhead in openstack. but having a system like openstack in place will help you to grow.16:54
savrthanks!16:54
savrshould I be using vps?16:55
rbasakIf you can do everything you want in one hour's admin time, then I don't think there's any other solution that makes sense for you. But when you find yourself trying to do something that will take many hours or days of admin time, or you find yourself writing tools for these tasks, or you need to study services in detail to learn how to use them, then come back and take a look at juju :)16:55
smoserjuju would be useful to you as it would enable you to provision codify your installation of your services.16:55
smoserbut juju needs a provider, and there is only the "local provider" which uses lxc that would really help you.16:55
savrjuju is a massive learning curve for me right now16:56
savrI tried using the local provider16:56
savrfull of issues16:56
jcastro_the local provider is for like your laptop, you wouldn't run it on your servers17:00
savrso does it make sense to virtualize17:01
savrone of the services is wordpress17:01
savranother is virtual desktop17:01
savrthen some in house web software we use17:02
savretc17:02
Davieyjamespage: Sigh, powerpc & armhf are so slow17:05
* TheLordOfTime was whining about powerpc last week when it took 3 days for a package sync to actually reach raring and get out of raring-proposed.17:06
TheLordOfTimepowerpc's... not fun.17:06
savrrbasak: smoser: would you virtualize in this instance?17:07
smoseri'd probably lean towards virtualization and some configuration management solution17:08
rbasakIf you can reinstall it all in an hour then I don't think it matters what you do. Just reinstall when you want to move something.17:09
savrI'm with a great provider so reinstalls are super ease. normally takes 5 minutes. Installed with ssh keys and can auto run post install bash script.17:11
savrsmoser: like what software?17:12
* maswan is using ganeti to handle a bunch of service VMs on a few hosts17:12
smoserpuppet and chef are configuration management system.s17:13
DavieyCVE-2012-5642 is awesome.17:28
uvirtbotDaviey: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5642)17:28
uvirtbotNew bug: #1080841 in cloud-init "should reload configuration if an upstart job is added" [Medium,Fix committed] https://launchpad.net/bugs/108084117:37
macomysql keeps disappearing on my 12.04 ubuntu server. i see no record of either an oomkill or a segfault in /var/log/syslog  any ideas what else to look for to see why it keeps disappearing?17:39
sarnoldmaco: is there anything in the mysql logs?17:40
macosarnold: /var/log/mysql.err is blank and /var/log/mysql/ is empty and /var/log/mysql.log is a 0byte file17:41
sarnoldmaco: very curious. )17:41
sarnoldmaco: does df show you have adequate storage space available?17:41
macosarnold: bout 15gb free17:42
macozless /var/log/mysql.log.1.gz says it's a binary file, 20bytes17:42
maconothing legible in there17:42
macoas a stopgap i modified the /etc/init/mysql.conf to retry 10 times instead of only 2, over the course of 90 seconds instead of 10, which has slowed down the rate at which i suddenly discover my sites are offline, but...17:43
sarnoldis it too-open? MySQL seems to be a walking pile of CVE generators, maybe someone is having fun with you..17:43
TheLordOfTimelast i checked, PHP's more evil than that, sarnold.17:43
sarnoldTheLordOfTime: no argument there, php is also a giant pile.17:44
macoand wordpress even more so ;) all of which are on my server, but i have htaccess-locked the wp admin pages for safety there17:44
TheLordOfTimedon't get me started on other stuff in Universe...17:44
macodont think universe has wp updates fast enough17:45
macoall of the mysql.log.[0-9].gz's are 20bytes17:45
sarnoldI think 20 bytes is the usual size of zero-byte-files that gzip compresses...17:46
macoah17:46
macoas to "too-open" the my.cnf is set to only listen on localhost (that's the default) so outsiders shouldnt be talking to the process17:47
macohah im amused that in addition to TheLordOfTime there's also TheDrums17:48
TheLordOfTimei think that was spawned by my taking this nick :p17:48
savrthanks all!17:49
macooooh wait it is oom. shouldve done a case-insensitive grep17:51
macohrmph. time to tune apache so it stops eating half the ram17:51
* TheLordOfTime blurts out "NGINX RULZ" then facedesks hard for being biased.17:52
=== mcclurmc is now known as mcclurmc_away
oVeRMiNDhello world!19:00
savrhi proxmox or ganeti? or makes no difference/19:00
savrthink I'm going with proxmox as it can be installed by the datacentre19:04
tgm4883savr, KVM?19:09
savryep19:09
tgm4883I've not looked at ganeti for a few months, but it didn't make sense for us here19:10
tgm4883I ran proxmox 2.1/2.2 for awhile on a test cluster, but it kept forgetting what my machines were named19:10
savrtgm4883: what are you using?19:10
tgm4883savr, KVM19:11
tgm4883well, kvm with libvirt I suppose19:11
savrno management software?19:11
tgm4883on our production cluster we run ESX19:11
tgm4883savr, nope, we just run these 4 servers when we need to setup some test stuff19:12
tgm4883nothing that we are super worried about19:12
tgm4883MaaS and Ubuntu Cloud don't make sense for us either it seems19:12
=== ibiris is now known as ibiris|afk
=== yofel_ is now known as yofel
m4rku5I have a question relating to kerberized nfs: how would I enable a service (say apache) to access a kerberized nfs mount (e.g. a users home/public_html)? is there a "standard" solution to this problem?20:42
uvirtbotNew bug: #811417 in apache2 (main) "Apache httpd local DOS when serving pipes due to TOCTOU" [Low,Incomplete] https://launchpad.net/bugs/81141720:46
mikeeyGood evening. We just got hit by some weird attack/exploit/something which brought our machine to it's knees. Somehow, it managed to hold up and I got this screenshot before it went down: http://puu.sh/1C3Sb/e7bb806225aedbd720508e27d1261d6d20:49
mikeeyDoes anyone have any idea what this is?20:49
mikeeyIt's also spamming the syslog with out of memory, too many open files20:49
mikeeyetc20:50
RoyKit doesn't need to be a DoS - it can just be I/O hanging20:50
RoyKbut the load is pretty high :P20:50
mikeeyit happens on two machines20:50
mikeeyat the exact same time20:51
mikeey(couple seconds in between)20:51
RoyKsounds like a ddos20:51
mikeeyyeah, but it's not a BW related one20:51
mikeeythe network traffic is normal20:51
mikeeyas far as we know anyway20:51
RoyKtried to sniff it with tshark/tcpdump?20:51
mikeeyit goes down, so we're unable to20:52
mikeeyI was going to attempt using a kvm to login, but it just crashed when i tried :/20:52
RoyK10-20k load is pretty amazingly ugly :(20:52
RoyKmikeey: try enabling netconsole - you might get some output from that that may be drowned because of memory shortcomings20:54
uvirtbotNew bug: #1091430 in qemu-kvm (main) "9p fails with readonly+non-root due to O_NOATIME" [Undecided,New] https://launchpad.net/bugs/109143021:36
DavieySounds awesome, http://bugs.debian.org/69619522:17

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!