/srv/irclogs.ubuntu.com/2013/01/30/#ubuntu-server.txt

ChriysOk thanks for your help guys00:02
Chriystonyyarusso i will be back in 10min and i will mp you to get that00:03
=== slank is now known as slank_away
adam_gzul: Daviey jamespage http://people.canonical.com/~agandelman/folsom/glance/ + http://people.canonical.com/~agandelman/nova/ . need a +1 so we can get to staging and fast tracked out to -updates. both security updates00:44
jdstrandadam_g: do those correspond to: http://www.ubuntu.com/usn/usn-1710-1/ and http://www.ubuntu.com/usn/usn-1709-1/ ?00:48
jdstrandadam_g: well, I'm eod, but I did updates for those already00:50
adam_gjdstrand: yes this are precise rebuilds of your updates for the ubuntu cloud archive00:51
Chriystonyarusso you still there ?01:03
Chriystonyyarusso you still there ?01:05
TheLordOfTimehe shows up as away01:06
Chriysok because he said that he got some config about the postfix01:12
TheLordOfTimedoesn't mean he's here though :p01:12
ChriysTheLordOfTime can you help me with.01:22
Chriysyou seem to be very good with postfix01:22
zuladam_g: looks good01:23
sarnoldChriys: irc tends to work best if you ask specific questions rather than asking people if they will help you :)01:24
sarnold.. afterall, there are ~360 others here, someone's liable ot be awake..01:25
Chriysok thanks sarnold. basically i want to tell to my server to user my gmail account to send email. on web application hosted on my server01:27
Chriysand i also want gmail to receive email from info@ahidjodesign.com01:28
sarnoldChriys: you may wish to look at 'msmtp', I use it to have a /usr/bin/sendmail program that sends From my address01:31
sarnoldChriys: setting up receiving is slightly differen,t you'll need to look into google services for domains or something..01:32
Chriysit will gona work if i use mail() on a php page on my server.01:32
sarnoldChriys: it should, if the mail() routine uses /usr/sbin/sendmail. if it connects to smtp servers itself, no. (I seem to recall that both behaviors are available with various php modules..)01:34
Chriysok. so i use what will be the sender address in the email01:36
sarnoldyour gmail address01:37
Chriysand about redirecting info@mydomain.com to gmail.com01:40
sarnoldChriys: http://www.google.com/enterprise/apps/business/pricing.html01:43
Chriysi think it will be better to have my own fix ip address01:45
Chriysthanks again for your help01:45
sarnoldChriys: another option is to pick another smtp host, e.g. sendgrid01:46
Chriysok. sarnold do you think that if i use different port like 1234 it work ?01:49
sarnoldChriys: probably; or you could set up a vpn between your host and your smtp host..01:49
Chriyssarnold what do you mean ?01:49
sarnoldChriys: from what I vaguely recall of your problem, you've got a web host and you've got an smtp host, and your web host can't contact your smtp host, right?01:51
Chriysbecause the most important for me is to being able to send email from my domain with web app on my server01:51
Chriyssarnold if i send an email to info@mydomain.com it doesn't work. and if i send an email from my server it still doesn't work except if i send it to another user on my server.01:59
Chriysi tried to use mail() on phpscript same issue. and i cant connect to the server using a mail client. but all of my website hosted on the server work02:01
Chriysi tried telnet gmail 465 and telnet gmail.com 25 it says unable to connect to remote host: Network is unreacable02:03
zulhallyn: yeah i need to understand whats going on first02:11
jdstrandadam_g: ah, I thought you were wanting to provide those updates for the archive :)02:27
dragoonisCan someone help me? "sudo apt-get update" -- every line returns 40402:31
dragoonisErr http://archive.ubuntu.com maverick-updates/universe amd64 Packages  404  Not Found [IP: 91.189.92.200 80]02:31
dragoonisor02:31
dragoonisW: Failed to fetch http://security.ubuntu.com/ubuntu/dists/maverick-security/restricted/source/Sources.gz  404  Not Found [IP: 91.189.92.200 80]02:31
patdk-lapwell, what did you expect?02:31
patdk-lapsomething besides 404?02:32
patdk-lapsupport for maverick ended a long time ago02:32
dragoonispatdk-lap: i see02:32
dragoonisare you saying my distro version is no longer supported? :)02:32
patdk-lapI'm saying your using something that is only supported for 18months02:32
patdk-lapand it came out in 10.1002:33
patdk-lapwell, october 201002:33
patdk-lapswitch to using the old repo's archive02:33
sarnolddragoonis: probably best to run a do-release-upgrade to upgrade to a supported distribution02:34
dragoonissarnold: thanks for the suggestion. this is a production box so I can't do anything drastic right now02:38
dragoonisis there a workaround to let me run apt-get update against my distro version ?02:38
bradmdragoonis: use old-releases.ubuntu.com02:44
bradmdragoonis: but, really, you need to upgrade to a LTS - maverick isn't supported anymore02:45
dragoonisbradm: i understand i actually just need to use apt-get to install "tcl8.5" package02:45
bradmdragoonis: right02:46
dragoonisit's stopping my redis-server's "make test" from being successful02:46
bradmdragoonis: well, its been answered twice now02:46
dragoonisok thanks.02:49
dragoonisbradm: did you mean to update my apt-get sources.list file with "old-releases.ubuntu.com"02:50
bradmyou'll have to remove the security deb lines too02:50
bradmdragoonis: yes02:50
dragoonisbradm: it seems to be doing something :)02:52
dragoonisyay \o/02:52
bradmexcellent02:53
dragoonis'make test' on redis passed.02:53
Chriyssarnold i'm going to reinstall postfix what config do i need to send email throught my isp smtp server03:00
dragoonisI have a binary at "/home/paul/redis-stable/src/redis-cli"03:08
dragoonisi'd like this to just execute by running 'redis-cli'03:08
dragoonisi tried the 'alias' command, but when i run my shell script it says 'command not found'03:08
SpamapSdragoonis: mkdir /home/paul/bin ; ln -s /home/paul/redis-stable/src/redis-cli /home/paul/bin/redis-cli03:10
Chriysi'm going to reinstall postfix what config do i need to send email throught my isp smtp server03:10
SpamapSdragoonis: when you have a ~/bin , it will be added to the path (you have to logout and back in, or re-source your bashrc)03:10
SpamapSChriys: postfix will ask you for those settings on installation03:11
SpamapSChriys: or just 'dpkg-reconfigure postfix'03:11
Chriysoh good thanks :p03:11
dragoonisSpamapS: i didn't know ~/bin was magic03:13
dragoonisSpamapS: apache is going to execute this shell script so that might be problematic03:13
azbyinhi all..03:13
SpamapSdragoonis: indeed it will be problematic03:13
SpamapSdragoonis: why don't you install it in a system location like /usr/local/bin ?03:14
azbyindo you guys know how i can identify the processes that are eating up my memory?03:14
patdk-lapps axl03:14
patdk-lapsmem?03:14
dragoonisSpamapS: that sounds better03:14
dragoonisusr/local/bin/redis-cli ?03:14
azbyini allocated 1GB to a virtual machine and installed spamd+postfix+courier+mysql and have gitlab running03:14
patdk-lapwell, spamd is going eat 100-500megs03:15
SpamapSI use 'ps auxw O r' to see the biggest process at the bottom03:15
azbyinso it ended up eating almost all of that 1GB. So I thought this is not very good and decided to allocate an additional 1GB03:15
patdk-lapsmem is nicer cause it takes shared ram into account03:15
patdk-lapazbyin, how do you define, EATING RAM?03:15
azbyineverything was peachy for a while, now everything has been eaten up again.. 17BM free memory03:15
patdk-lapah, so you have no idea03:16
azbyin             total       used       free     shared    buffers     cached03:16
azbyinMem:       2041028    2022876      18152          0      58896    101027203:16
patdk-lapand the next line?03:16
azbyin-/+ buffers/cache:     953708    108732003:16
patdk-lap1087MB free03:16
patdk-lapnice03:16
patdk-laphow did you figure 17MB?03:16
azbyinfirst line.. col 3 (free)03:17
patdk-lapya, that is how much WASTED RAM you have03:17
patdk-lapit is only use for interrupt processing and stuff in the kernel03:17
patdk-lapthat is not how much FREE PROGRAM ram you have03:18
patdk-lapplease read the free program manual next time03:18
azbyinSpamapS, ps auxw O r   shows gitlab    3180  0.1  6.3 2959144 129304 ?  ... right at the bottom03:19
azbyinis this VSZ being reported in KB ?03:19
patdk-lapvsz is how much the program asked for, not how much it's using03:19
dragoonisSpamapS: that helped a lot :)03:19
dragoonisgood night03:20
patdk-lapit's actually only using 129MB03:20
azbyinbut it actually asked for 2GB ?03:20
patdk-lap3GB03:20
patdk-lapthat is normal03:20
patdk-laplots of programs do that03:20
azbyinok03:20
patdk-laphappens a lot with memmap files03:21
red82I am trying to optimize the performance of a magento installation on an ubuntu server.  can anyone suggest a good link for me to read?04:43
red82there's tons of stuff online, but I don't knwo whats good advice and what isn't04:43
qman__red82, the important question to ask is, why?05:01
qman__are you experiencing slowness? are you hitting a hardware bottleneck, or is the software not utilizing your hardware to keep up with requests?05:02
red82oh, I see05:02
red82I am hosting with a vert. on media temple, and was running out of memory with just a couple of test users.  this seemed bad05:03
qman__if you used built in packages, it's already set up for the way most people will use it05:03
qman__ok05:03
red82http://mediatemple.net/webhosting/ve/pricing.php <- the lowest priced one there.  seems to me that 1GB should be fine05:03
red82I upgraded to the 2GB one, and that helped my memory problems (at various points I couldn't even ssh into the box because it couldn't get mem )05:04
Coreyred82: There are magento specific hosting places.05:04
CoreyThey earn their money. :-)05:04
qman__red82, while I'm not experienced with magento, from what I'm reading, it's a resource heavy application, and that doesn't surprise me05:04
Coreyred82: It's worth mentioning that Mediatemple runs Virtuozzo, which is a chroot on steroids; it tends not to play well with Magento.05:04
red82Corey: thats very interesting05:05
red82do you have a recommended host for future reference ?05:05
red82qman__: it does seem heavy and slow, but you'd think it could handle one user.05:06
qman__red82, from one article, it's recommended that in order to run magento, PHP's maximum memory per-process should be adjusted to 512MB05:06
qman__common defaults are 8MB or 16MB05:07
qman__just to give you an idea05:07
red82thats astounding05:07
qman__not that it will use that much on every process, but because of that, it doesn't surprise me that 1GB was not enough for more than a couple users05:08
red82that seems crazy high05:10
qman__there's probably a big initial investment, with better scaling05:11
qman__as in, 4GB would serve a lot more than 4 users, probably more like 5005:11
qman__that's just a guess though05:12
adam_ghi, is there an alternative to 'ctrl-middle click'  to select the 'Operate Controller now' option on a fader or button, to select midi control?05:37
linocisco I want network monitoring tool like PRTG but should be free of charge and full version08:14
=== smb` is now known as smb
greppylinocisco: you are certainly welcome to build one.09:04
yolandahi, i'm receiving that error trying to boot a nova instance: ProcessExecutionError_Remote09:19
yolandaany idea?09:19
linociscogreppy, what do you mean to build one?09:36
RoyKlinocisco: have you tried munin?09:41
RoyKthere are several monitoring tools around, and some are highly configurable, or you can script up something yourself with rrdtool or similar09:42
=== yofel_ is now known as yofel
linociscoRoyK, not yet09:51
linociscoRoyK, is it good?09:52
RoyKlinocisco: http://munin.karlsbakk.net/munin/10:04
greppylinocisco: I mean that someone built/wrote PRTG, you are welcome to build/write your own.10:09
JonEdneyI created a user on Ubuntu Server 12.10, and added that user to the sudoers file as username ALL=(ALL) NOPASSWD: ALL10:19
JonEdneyI'm still prompted for a password when I sudo with the username, in addition to I can't run apt-get upgrade, as it says I dont have permission.10:20
RoyKJonEdney: perhaps that user is part of a group with sudo access, parsed before the line you added10:20
linociscogreppy, if I knew programming, I would not ask here and started writing code10:21
JonEdneyRoyK, thanks for the tip, still learning the ropes.10:23
RoyKlinocisco: did you check out munin?10:23
linociscoRoyK, still checking10:24
=== matsubara-afk is now known as matsubara
=== th0mz_ is now known as th0mz
=== railsraider_ is now known as railsraider
freakynlhi, i'm trying to install ubuntu 12.10 server on a pre-existing hardware12:47
freakynlit has several md raid sets, 12 disks in total, I only want to recreate the OS partitions on the first 2 disks12:47
freakynlI can see it on the cli, but since that has no fdisk/cfdisk/gdisk/parted I can't do much there either12:47
freakynl<insert above last line> The problem is, it doesn't show sda in the partition toolie12:47
freakynlany ideas?12:47
xnoxadvanced partitioning -> activate raid volumes should tell you which md devices you have made up of which disks12:48
xnoxas well as to [dis]assemble them.12:49
freakynlhmm can I see what /dev/sda is?12:51
freakynlbooted ubuntu from cd mounted through impi (like drac/ilo), there's no less on the console :(12:51
freakynlnvm it has more there's a virtual disk presented by the ipmi, besides a cdrom, dunno why it does that12:53
freakynlcan the installer use/recognize gpt? It says sdc has no partitions, but it has 4 - all 4 part of md sets which it did start (well kernel auto detect probably did (.9 superblock))12:55
RoyKfreakynl: unplug all non-root drives :P12:55
RoyKfreakynl: that's pretty safe12:55
freakynlsdc is a root drive12:56
freakynland it has partitions ... the partitioning tool however says it wants to create a new one (now I only care about the last partition not dying :))12:56
RoyKfreakynl: with 12.04 (which I would *really* recommend for servers, since it's the latest LTS), the installer screen turns up in b&w if gpt is detected12:57
freakynloddly enough it seems to recognize the partitions made by windows on one of the raid sets just fine (which are gpt (8TB vol))12:57
RoyKfreakynl: if you want that thing stable over time, use lts12:57
RoyKif it's a toy, well, do as you please ;)12:57
freakynlRoyK: It'll only do iSCSI and LIO with 3.5 is much much MUCH better than 3.2 with iet ever will be :)12:58
RoyKah12:58
RoyKic12:58
freakynlcan I partition myself on the cli, mount them somewhere and continue with the installer?12:58
RoyKyou can partition manually from the installer12:59
freakynlthe installer doesn't recognize the current partitions on sdc13:00
RoyKcan you nuke it?13:00
freakynlno the last partition needs to be safe only want to repartition cuz ubuntu hogs /boot like crazy and doesn't clean it up13:01
RoyKoh, why? don't you have a raid for your data?13:01
freakynlmy gentoo install has a 50M /boot with 12 kernels on it, and free space, this install has a 66M /boot partition with 2 kernels and craps out on regenerating initramfs every time13:01
freakynlRoyK: Yea I do, since they're 2 TB disks however and the OS is quite small the majority of the disk is still exported through iscsi13:02
freakynlin ubuntu's defense btw - I don't use initramfs on gentoo so that saves quite a bit13:02
freakynlI just want to make /boot and / 1 partition now and save me the hassle of having to clean up /boot all the time :)13:03
* RoyK usually uses a 1GB /boot13:03
freakynlI'll see if I can create the partitions / raid with parted magic and see if the installer picks those up - it sees the existing raid sets just fine (which is funny since several of them use partitions from sdc which it doesn't see but are part of the raid)13:05
freakynlit's a replacement disk too - probably just used sfdisk -d /dev/sda | sfdisk /dev/sdb13:07
xnoxfreakynl: have you read ubuntu server - advanced installation - raid setup documentation?13:08
xnoxhttps://help.ubuntu.com/12.04/serverguide/advanced-installation.html#software-raid13:09
freakynlNope, don't quite see how that'll make the installer recognize the partitions either :)13:11
freakynlwhilst on the subject of raid, would you recommend swap on raid 1 or just add 2 swap partitions?13:18
freakynlThe latter is often advised, but they don't seem to take into consideration if 1 disk dies, so does 1 swap part (and thus potentially you loose a piece of memory and that's pretty bad)13:19
freakynlthen again, usually it doesn't use swap :D13:19
xiaoyWhich is the ubuntu equivalent for  perl-Net-SSLeay.i686 perl-IO-Socket-SSL pkgs?13:36
xiaoyWhich is the ubuntu equivalent for  perl-Net-SSLeay.i686 perl-IO-Socket-SSL pkgs?13:37
xiaoythose should be perl SSL auth modules... i guess it's possible to use cpan, but i don't know which modules to install13:38
jamespagexiaoy, libnet-ssleay-perl and libio-socket-ssl-perl13:51
freakynlxnox: gparted complains on the disk too - kernel sees the partitions fine, fdisk lists them (but claims there's gpt on it - normally it doesn't list anything then)13:51
jamespagexiaoy: you can probably see a pattern :-)13:51
freakynlgparted says a fake msdos partition doesn't exist, but there's no backup gpt header either13:51
freakynlnow the big q will be, is that gpt partition it thinks it sees data from one of the raid sets? :D13:52
xiaoyjamespage, tahnk you. I'm tring to use my gmail account with sendEmail... but gives me some errors13:53
jamespagexiaoy, np13:54
xiaoyauth with gmail smtp srv it's a bit tricky :)13:55
=== slank_away is now known as slank
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/cinder/cinder-failed-tests/+merge/14561414:25
zuladam_g: +114:25
yolandalet me take a look14:26
=== slank is now known as slank_away
Linuks83good morning all. i've got a rosewill SATA card with a Silicon Image chip model of Sil3114CTU. the 64bit server installer sees it and all the drives on it, but the 32 bit installer does not. any ideas?14:33
Linuks83the system is a 32 bit machine, otherwise i'd just roll with 64.14:33
patdk-wkLinuks83, why bother with 32bit installs?14:38
dragoniousgood morning everyone14:38
dragoniousI have a few questions if anyone has time14:38
Linuks83patdk-wk, the machine i have on hand is a 32 bit machine. further, why would the 64 bit install detect the card and not the 32 bit install of the same release??14:39
patdk-wkwell, the driver might not be pae compatable, and since the non-pae kernel was dropped14:40
patdk-wkonly thing I can think of14:40
dragoniousI have Ubuntu server 12.04 /w kubuntu desktop installed onit, what I want to know is how to create a user and give him only access to 3 folders on the server , his home folder nad 2 folders in www?14:41
dragoniousI have sufed the firums but I can only find help on giving user full control of server and that wont work in this case14:43
Linuks83patdk-wk, when was the non-pae kernel dropped, becuase it doesnt get detected with either of the 12.04.1 disks either14:43
patdk-wk11.10 I believe, maybe 11.0414:43
Linuks83patdk-wk, ok. going out on a limb here...  do you know if it is still supported by Debian proper?14:44
patdk-wkactually, I don't think that should make a difference14:44
patdk-wkthe sill3114 should be using the normal AHCI driver14:44
patdk-wknot a special driver, and that is supported fine14:45
Linuks83so is there a boot string i can add to the 32 bit installer to get it detected?14:45
patdk-wkit's already added if 64bit sees it14:46
Linuks83i checked the ubuntuforums, but dont see anything on this particular issue.14:46
Linuks83the boot string should be the same between the 32 and 64 right?14:46
dragoniouscan anyone assist me with giving user only access to specified folders on the server ?14:49
freakynldragonious: the specified folders being?14:50
patdk-wklunuks, it's suppost to use the sata_sil module14:50
dragoniousfrakyni: his Home, and 2 folders in www14:50
dragoniousfreakyni: sorry his home and 2 folders in www14:51
dragoniousI can not type today im sorry14:51
freakynldragonious: hmm that's scattered over the file system... I don't use ubuntu much, but you might want to look into mounting (-o bind) the folders on his home folder and chroot'ing it14:51
freakynldragonious: fr<tab> if you have a descent client :)14:51
dragoniousfreakynl: Im very new to ubuntu still getting used to the commands14:52
Linuks83patdk-wk, is there a way i can specify to load that at boot to be sure?14:52
patdk-wkmodprobe14:53
freakynldragonious: I'm not used to the ubuntu 'way' of things. Root jail is probably the easiest (chroot) in combination with mount -o bind14:53
dragoniousfreakynl: do you know of any walkthroughs available for this procedure14:53
dragoniousfreakynl: thanks for the tab tip ;014:54
freakynlmount -o bind being for the www folders. Don't know what your permissions are though, you might need extended acl's (beyond user/group/other)14:54
freakynldragonious: https://help.ubuntu.com/community/BasicChroot14:54
dragoniousfreakynl:  ty very much14:54
freakynlnp14:55
dragoniousfreakynl: im going to check that out on my pc thanks again, I may be back ;)14:55
zuljamespage/yolanda: one more https://code.launchpad.net/~zulcss/nova/nova-fixes/+merge/14562414:58
yolandazul, i'll take a look15:05
freakynlI get a blank screen after grub, editing (e) in grub and adding nomodeset doesn't help15:07
Linuks83patdk-wk, how do you pass modprobe to text mode the installer?15:07
freakynlit doesn't have the splash nor quiet options, any ideas?15:07
patdk-wkrun it in the shell15:08
Linuks83i understand running it from the shell 'modprobe sata_sil' but how do i get shell during the actual installation. i'm trying to use a drive which is on that controller to install to.15:11
Linuks83patdk-wk, i understand running it from the shell 'modprobe sata_sil' but how do i get shell during the actual installation. i'm trying to use a drive which is on that controller to install to.15:18
patdk-wkselect shell from the install menu15:19
Linuks83patdk-wk, oh! ok, so when i use the 'go back' option and am presented with the menu, it will be there? gotcha.15:19
patdk-wkya15:19
Linuks83patdk-wk, thanks!! i will try that!15:20
freakynlHmm oddly enough ubuntu desktop boots just fine (also 12.10) from live cd (parted magic cd's have same issues - nomodeset doesn't help there either)15:20
zulhallyn: pinger15:30
hallynzul: hey15:34
hallynsorry had rackspace host issues last night, got disconnected :)15:34
zulhallyn: just getting libvirt 1.0.2 ready...still need to look at the qemu stuff fyi15:35
hallyn(didn't feel like xferring to local)15:35
hallynwhich qemu stuff?15:35
zulthe qemu-nbd stuff i am having problems with15:35
hallynoh right15:35
hallyn(thought you menat something related to libvirt version)15:35
zulhallyn: nope :)15:36
hallynzul: cool.  do note i pushed a libvirt to raring yesterday, trivial but please don't lose that debdiff :)15:37
hallynzul: shall i try to reproduce the nbd bug?15:38
hallyni've got to change locales, but will try when i'm settled15:38
zulhallyn: not yet i think openstack might something stupid so ill let you know when i get stuck15:39
hallynok15:39
hallyni've gotta follow up on some tests about /dev/kvm+udev15:39
hallynbut, if you want me to run a qa-regression-test today lemme know.  (i'll be out tomorrow)15:40
hallynbiab15:40
zulhallyn:  ack15:44
Demosthenexso i'm relocating my root filesystem to a new drive. I've already got the copy in place, but each time i reboot it goes to the old one. I've manually updated /etc/fstab and /boot/grub/grub.cfg, and the grub menu at boot uses root=new so... where am i missing the reference to the old?15:51
freakynlJust installed ubuntu 12.10 server. The installer is fine, 12.10 desktop live (running from cd is fine), the just installed 12.10 server however goes black after grub15:55
freakynladding nomodeset in grub doesn't make a difference, it's a matrox vga card. Any ideas?15:56
freakynlhmm it's initramfs16:10
jamespageadam_g, nova and glance copied to proposed for the folsom CA16:15
jamespageadam_g, do you want todo a test run prior to -updates?16:15
=== matsubara is now known as matsubara-lunch
=== megha is now known as firewall
=== sauce_ is now known as sauce
dragonious ok guys I was in here earlier and I think I was asking the wrong questions16:38
dragoniousI want to host websites from my ubuntu server but I want to make sure that as I add users that they can not get into root or modify other usres data. How would I go about doing that is there an app or software that would do this ? I also have Kubuntu desktop installed . thank you in advance for any assistance16:40
qhartmandragonious, there are a lot of different ways to do this16:40
dragoniousqhartman: Im looking for the eisiest way to do this as I am very new to linux/ubuntu16:41
dragoniousqhartman: although im not afraid to learn ;)16:41
qhartmandragonious, one of the simplest ways is to set the user's home directory to be the webroot of their site, and then make it so that all the user's home directories are set so only the user has access16:41
qhartmandragonious, something like mode 0700 on them would do the trick16:42
dragoniousqhartman: could you explain further pls16:42
qhartmandragonious, what web server are you using?16:42
dragoniousqhartman: ubuntu server 12.04 ls16:43
dragoniousqhartman: I have Kubuntu desktop installed as well16:43
qhartmandragonious, That's the distro on the server itself, but what web server program? Apache2? nginx?16:43
dragoniousqhartman: sorry it is a Lamp environment16:44
qhartmandragonious, ok, then you are using apache216:44
qhartmanThat's the "a" in lamp16:44
dragoniousqhartman: I will be using ssh to give users sftp access16:44
qhartmangood16:44
qhartmanI don't have time to give you more direct help right now, but googling around for "multi user apache web hosting config" and similar things will probably get you what you need.16:45
dragoniousqhartman: I think you may have helpped me more then you realize thank you ! :)16:45
qhartmansure thing, I was hoping I could just point you down the right road16:46
qhartmanalso, this will be useful: http://httpd.apache.org/docs/2.2/howto/public_html.html16:46
dragoniousqhartman: thanks again will look that stuff up. Might be back :)16:48
qhartmanYou may end up not wanting to use that setup, but it's a good starting point, and it will be conceptually important to understand what's going on there for what you are doing.16:48
freakynlqhartman: didn't read the whole thing, but 700 on your web directory will make apache unable to access it, unless you run mod_ruid2 or mpm-itk so the vhost runs as the user (or some really fancy reverse proxy thing with a shitload of of webservers on different ports (at least 1 for every vhost)17:16
qhartmanfreakynl, true17:19
* qhartman didn't account for that17:19
=== matsubara_ is now known as matsubara
Demosthenexso i've got a system with encrypted lvm for root, and an unencrypted /boot. i've run update-grub2 and update-initramfs and now booting just hangs18:14
Demosthenexwow, it appears my crypttab is not in the initramfs (i'm at busybox)18:15
Demosthenexwtf.18:15
paco1hello masters!18:30
paco1i have a warning message in my log > snmpd: error on subcontainer 'ia_addr' insert (-1)18:30
paco1what does it mean?18:30
paco1thanks!18:30
chriyspaco1 give more info on your system18:35
paco1ubuntu-server 12.04 | 3.2.0-35-generic | 8Go ram | it's the host for VM by kvm18:37
chriyspaco1: i'm not expert on KVM but this what i found on google hope it might http://www.novell.com/support/kb/doc.php?id=7005030   help http://sourceforge.net/p/net-snmp/bugs/1807/18:46
paco1chriys: ok, thanks. The second one already i read. But the first one not yet.18:47
chriysyour are welcone :)18:48
chriyswelcome*18:48
=== matsubara is now known as matsubara-afk
chriyshow to verify opened port on my network and the one that my ISP blocked ?19:11
Demosthenexso after running update-initramfs i am no longer prompted for password (cryptsetup), and manually setting up raid, crypto, then lvm, it stays hung when i exit busybox.19:12
sweetteaHi guys, long time centos user here. Pondering migration to ubuntu server. Can anyone advise on 12.04 vs 12.10?19:12
sweetteaThe primary use will be as a virtd host on amd abu dhabi procs19:12
mysteriousdarrensweettea: i'm running 12.10, I also run 12.04 LTS on a server that needs that stability. What are you looking for?19:19
sweetteamysteriousdarren: I really want to do live archive of running virtd guests19:22
sweetteadont know if thats even possible19:22
sweettea12.10 is unstable? I was leaning towards using it19:23
Demosthenexsweettea: i think he means the long term patchign support19:23
sweetteaah19:23
mysteriousdarrenyes I mean that, thanks Demosthenex19:24
sweetteaI feel like I am picking blind, and would like to educate myself more :)19:26
mysteriousdarrenchriys: https://www.grc.com/x/ne.dll?bh0bkyd219:26
sweetteaive used ubuntu on my laptop for years but never really administered much on it19:26
mysteriousdarrenjust install webmin or something similar and it will work well. Or without a gui works too19:27
chriysmysteriousdarren: i didn't well understood19:30
Demosthenexso the initramfs isn't even trying to decrypt. i've unpacked the initramfs cpio archive and crypttab isn't even copied onto it, though several of the crypt scripts are19:30
chriysCTCP: mysteriousdarren: you lost me19:33
mysteriousdarrenchriys: were you not trying to test a port?19:33
chriysi was try to19:34
chriysmysteriousdarren: but i didn't understood the link you provided me, i just need little explanation19:35
dragoniousok guys I could use a lil input here19:37
mysteriousdarrenoh shields up scans ports and does other things on checking for security19:37
mysteriousdarrendragonious: with what? explain your problem please19:37
dragoniousI have added a user via kuser, I then set his home directory to his main sie folder inside /var/www/"hisfolder"19:38
chriysok thanks mysteriousdarren19:38
dragoniousbut when I log in through sftp to see if he can get at any other folders it apears as if the whole server is open to him ?19:38
dragoniousthe new user is only a member of his group which was created upon creating the user19:39
dragoniousI want to "lock" him into his own site folder so he can not get at any other folders19:40
sarnolddragonious: if your directory permissions are world read and execute, he can traverse them.19:40
dragoniousbut can he "break" my server by doing so ?19:41
sarnolddragonious: if you want to further confine your user, you'll need to use a tool such as apparmor19:41
dragonioussarnold: can you elaborate for me?19:41
sarnolddragonious: depends; if you've granted more read access than you should have, he might read secrets that allow him to do more dangerous things. if you've granted write accesses more than you should have, he might be able to do things more directly...19:41
sarnoldthe standard unix permissions are a bit difficult to have widely-different levels of trusted usrs on a machine...19:42
dragonioussarnold: Im very new to this server , and ubuntu so bear with me please19:42
sarnolddragonious: apparmor allows you to apply permissions on a per-program basis. you could either give this user a unique login shell and confine that shell, or you could use the full-blown apparmor PAM support: http://wiki.apparmor.net/index.php/Pam_apparmor_example19:43
dragonioussarnold: I want the user to be able to work in just one folder, so say hes building a joomla site it works but he can get out side of the folder I assign him to , also I gave the user no shell abilities19:44
dragonioussarnold: apparmor sounds like it will lock down the progams he will need for say Joomla! builds19:46
=== guampa_ is now known as guampa
=== Amoz_ is now known as Amoz
sarnolddragonious: you can either allow those to execute unconfined (alright, if you trust this guy), confine them themselves (good if you don't trust the joomla programs to execute "sanely" in the face of adversity), or allow him to run them while still confined ("inherit" his permissions -- probably the best fit for what it sounds like you want)19:48
chriysmysteriousdarren: the port 993 doesn't even appear in the test but the 143 is closed even if i opened it on my router19:50
chriysand what does mean stealth in the result test from grc.com19:51
escotthttp://serverfault.com/questions/18324/stealthed-vs-closed-port19:53
dragonioussarnold: sorry I step away for a sec inherit sounds like what I want19:54
dragonioussarnold: I know the guy ,and know him to be a tinkerer, he will get into it and break it lol :)19:55
sarnoldhehe19:55
jribdragonious: you can just use the chroot feature in sshd_config19:56
dragonioussarnold: also as this is a "server" tower and not just a old bow runing a server os I may try to offer small scale hosting to some of my cutomers if I can figure out how to keep them out of things they dont need to see ;)19:57
dragoniousjrib: I printed out some info on chroot, but didnt fully understand it, not realy good with all the sytax as I am a newb to ubuntu server19:59
sarnolddragonious: indeed :) one apparmor contributor has a few thousand customers, with their separation enforced by apparmor :)19:59
dragonioussarnold: is apparmor used via a gui or through shell20:00
sarnolddragonious: shell20:00
dragonioussarnold: terminal may be the right word sorry my newbness is shining through20:01
jribdragonious: you just specify the directory with ChrootDirectory and you can restrict the line to affect only one user20:02
sarnolddragonious: hehe :) there's not much point quibbling over the little bits like shell vs terminal in this case -- the tools aren't gui. :) (SUSE ships a GUI front-end to the tools, but I'm not confident (a) that it works :) (b) that it actually improves the tools. :( )20:02
dragoniousjrib: so if the directory is /var/www/dr I would use what string of text chroot it correctly?20:03
jribdragonious: something like: Match user USERNAME_HERE; ChrootDirectory /var/www/dr    (where USERNAME_HERE is replaced by the actual username and ';' denotes a newline)20:04
jribdragonious: you can add ForceCommand  internal-ftp too.20:05
dragoniousjrib:  ty I will try that and get back to you in a sec20:06
dragoniousjrib: im using sftp through ssh20:06
jribdragonious: yeah, it should read "internal-sftp"; this keyboard sucks20:06
escottdragonious, sftp chroot is easy. see the minstrel.org isntructions20:07
escottdragonious, http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&ved=0CDUQFjAA&url=http%3A%2F%2Fwww.minstrel.org.uk%2Fpapers%2Fsftp%2F&ei=fH0JUeK-FuqDyAHyhYDADg&usg=AFQjCNHxH7TmMoSAcc0RUb5kb0PBfK9pVw&sig2=aOpCLO9NLKFjG-8SVu_wOQ&bvm=bv.41642243,d.aWc20:07
jribdragonious: there is one caveat though.  The chroot directory needs to be owned by root20:07
dragoniousescott: ty for that link I will look it over jrib ty for all your help as well, you to sarnold. It is appreciated. You may see back again in a bit lol20:10
Demosthenexok, just because i ended up frothing at the mouth, perhaps this irc channel has a history, here it is for posterity.20:21
Demosthenexif you boot to repair your ENCRYPTED root, and you end up manually running cryptsetup, whatever crypt device name you specify to luksOpen MUST match the encrypted device name in /etc/crypttab, or else when update-initramfs runs it will omit crypto support because it couldn't isolate that the boot device requires it.20:23
=== acidflash_ is now known as acidflash
dragoniousescott: I followed that walkthrough you linked and now I cannot connect through ssh at all :(21:38
dragoniousescott: I followed all the steps, all my settings apear correct to me, Im not sure what to do at this point21:39
=== acidflash_ is now known as acidflash
hallynjdstrand: does http://paste.ubuntu.com/1590858/ as a qa-regression-testing/scripts/test-libvirt.py l ook at all familiar to you?21:47
hallynmy guess would be virtinst needs to be linked against a new library...21:47
hallynwas hoping you'd recognize it offhand :)21:47
jdstrandhallyn: eek, no. I wonder if virstinst needs to be updated to work with the new libvirt? (wild guess)21:58
jdstrandhallyn: it possible mdeslaur has seen something like this ^21:58
mdeslaurnope, haven,t seen that before21:59
hallynjdstrand: mdeslaur: ok, thanks.  I"ll look deeper into it.22:00
mdeslaurand I just ran test-libvirt yesterday22:00
=== firewall is now known as megha
hallynmdeslaur: this is happening with zul's proposed libvirt 1.0.222:04
hallynwhich does move virGetLastError to a new source file22:04
mdeslaurhrm, not sure what needs to be done without investigating22:07
hallynmdeslaur: yup, np, i'll look int oit22:10
dragoniousok guys im back lol22:42
dragoniousI found my problem with Chroot and now am able to login to the server via sftp and have the user "locked" into the folder I want them in . Now I have a different problem, I need the user to be able to write and modify any files or folders within  his  Chrooted folder.22:45
dragoniousHow are host companies able to do this ? does anyone know22:46
Linuks83dragonious, ?? chmod -R #### /path ??23:16
Linuks83peace23:16

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!