[00:00] 500 http://archive.canonical.com/ raring/partner amd64 Packages [00:00] I have held broken packages apparently so it is refusing to do anything [00:00] ii skype-bin 4.1.0.20.0-0 i386 client for Skype VOIP and instant [00:01] do you have that magic dpkg setting which allows you to install i386 stuff? [00:01] alan@deep-thought:~$ apt-cache search skype-bin [00:01] skype-bin - client for Skype VOIP and instant messaging service - binary files [00:01] does that work? [00:01] I have an issue with ekiga being held back and libloudmouth1-0 libpt2.10.9 installing and uninstalling [00:01] when I autoremove and dist-upgrade [00:01] * AlanBell removes ekiga [00:02] apt-cache search skype-bin works fine [00:02] http://paste.ubuntu.com/5583810/ [00:02] and apt-get install skype-bin:i386 works? [00:03] something squiffy on your machine [00:03] I have all of that stuff [00:04] yeah, I had it last week too [00:11] aptitude says: http://paste.ubuntu.com/5583828/ [00:13] aptitude's second solution is to remove 499 packages freeing up 3GB of space and installing nothing new \o/ [00:15] your machine looks ill [00:16] apt-cache policy libx11-xcb1 [00:16] where'd that come from? [00:16] er, apt-cache policy libx11-xcb1:i386 [00:17] http://paste.ubuntu.com/5583836/ [00:18] http://paste.ubuntu.com/5583837/ [00:18] what if you try to install that package manually with apt-get? [00:18] woah! [00:19] http://paste.ubuntu.com/5583839/ [00:19] wtf [00:20] can you pastebin your /etc/apt/sources.list [00:20] and all /etc/apt/sources.list.d/*.list ? [00:20] http://paste.ubuntu.com/5583842/ [00:20] deb http://gb.archive.ubuntu.com/ubuntu/ raring-proposed restricted main multiverse universe [00:21] you shouild _not_ have that enabled [00:21] http://paste.ubuntu.com/5583843/ [00:21] that _may_ be the cause [00:22] can you remove it and update [00:22] gosh, proposed does seem a bit brave [00:22] no human is supposed to use it [00:22] in the development release [00:23] I am mostly human, so I will remove it [00:24] sudo apt-get update and dist-upgrade, didn't do much and still can't install stuff [00:24] same issue with skype? [00:25] yeah, just installing ekiga back again so generally installing things is OK [00:27] basically all the :i386 stuff is upset with me, but proper 64bit things are fine [00:29] does dpkg know you can install i386 [00:30] dpkg --add-architecture i386 [00:30] then update [00:30] dpkg --print-foreign-architectures returns i386 [00:30] ok [00:31] sudo apt-get --reinstall install libx11-xcb1:i386 [00:31] that works forme [00:31] that offers to remove 346 innocent bystanders for me [00:31] hmmm [00:32] how odd [00:32] The following NEW packages will be installed libx11-xcb1:i386 phonon-backend-null [00:32] who is phonon-backend-null? [00:32] not installed here [00:33] I can install it, dunno why it wants to bring that in [00:34] something squiffy here [00:34] first thing I'd do is backup/move your /etc/apt/sources.list.d/*.list out the way [00:34] and then sudo apt-get update [00:35] then see if you can install it, so you're down to just the main archive [00:35] * AlanBell tries that [00:35] same problem [00:36] how odd [00:41] think I got bit by something in -proposed [00:44] we need to figure out what came in from proposed [00:45] apt-cache policy | grep proposed [00:45] does that return anything at all? [00:45] no [00:46] from the aptitude output I think it might be libqtwebkit4 and libx11-6 [00:46] what versions of those do you have? [00:46] libx11-6 Installed: 2:1.5.0-1ubuntu1 [00:47] libqtwebkit4 Installed: 2.2.1-4ubuntu1 [00:47] libx11-6: Installed: 2:1.5.0-1 [00:48] I just removed libqtwebkit4 and I am readding it [00:48] popey: where's the next OGG Camp? :D [00:48] libx11-6 | 2:1.5.0-1 | raring | amd64, armhf, i386, powerpc [00:48] libx11-6 | 2:1.5.0-1ubuntu1 | raring-proposed | amd64, armhf, powerpc [00:48] yes, rmadison libx11-6 confirms [00:48] sebsebseb: no idea [00:49] popey: around the same time of August again I guess? [00:49] pass [00:49] oh I thought you helped decide stuff ike that [00:49] I have had no conversations about it [00:49] i do sometimes [00:49] unlikely to this year though [00:49] oh how come? [00:49] way too busy with Ubuntu Phone & Tablet... [00:50] oh I see to help organise OGG Camp as well you mean? [00:50] yeah [00:50] too busy [00:50] popey: well we'll see how that goes [00:50] Android could do with some good competiton [00:51] indeed [00:51] in fact I was thinking about it earlier a bit how they say there's like 700 thousand or so apps for it [00:51] in the Google app store, but [00:51] 1. we won't know what most of those apps are I guess since to many [00:51] 2. on my phone anyway, I coudn't seem to search the app store that well really [00:51] popey: is there anything I can do to downgrade libx11-6 or do I just wait for whatever transition is sitting in proposed to land? [00:51] yes [00:52] apt-get install packagename=version [00:52] sudo apt-get install libx11-6=2:1.5.0-1 [00:52] popey: it's not quite like Synaptic or Software Centre or something like that, you just search really well and :) yes can search, but not quite the same [00:52] or sudo apt-get install libx11-6/raring [00:53] sebsebseb: i rarely search the app store [00:53] I tend to install stuff when I hear about an app on a blog post or news article [00:53] ok, that is going to rip out some mildly annoying stuff (like compiz) but I think I can get it all back again [00:53] rip out or downgrade? [00:53] remove [00:53] popey: right I see yeah, well I got a new phone so [00:53] so add compiz/raring [00:53] AlanBell: hang on... [00:53] too late ;) [00:54] popey: well not new for that much longer asi n the phone itself, nearly time for Galaxy S4's now [00:54] would have got a Nexus probably, but weren't on sale at the time so [00:54] AlanBell: http://paste.ubuntu.com/5583900/ [00:54] do that [00:54] Nexus 4 [00:54] it reverts all unity/compiz packages back to /raring [00:54] its handy if you have added manky PPAs [00:55] It'll be quite refreshing to have an Ubuntu phone with only a few apps :D [00:55] * AlanBell installs skype [00:55] popey: yeah in a way there can be to many apps as well maybe [00:55] popey: I mean like I said earlier 700 thousand apps or whatever for Android [00:55] uhmm we won't even know what most of those are [00:56] Ubuntu Phone needs Skype idealy to though :d [00:56] * AlanBell runs skype \o/ [00:56] all sorted? [00:56] AlanBell: sure, but not on Ubuntu Phone ? [00:56] * AlanBell likes having awesome repositories and an awesome popey to help fix them \o/ [00:56] heh [00:56] reminds me I Found out about a good Skype altenraive the other day [00:56] or well looks like it from site :d [00:57] sebsebseb: no, not on the phone [00:57] open source yeah [00:57] turns out they had a stand at FOSDEM to, but don't think I went there [00:57] to the stand [00:57] I don't like skype much but I wanted the last 30 days of chat history [00:58] night all o/ [00:58] AlanBell: popey Not tried it yet msyelf, but I guess this is probably quite a good open source Skype and so on alternative :d https://jitsi.org/ [00:58] for just voice there's mumble as well [00:59] nn AlanBell [01:00] with a name like Jitsi it makes me think it will be a java app [01:00] popey: yep bingo it is [01:00] and it had other names in the past as well [01:00] if you read the site [01:00] ew [01:01] also, no updates for nearly a year [01:01] https://download.jitsi.org/jitsi/debian/ [01:01] popey: yeah, but they had a stand at FOSDEM 2013 [01:01] and there was a blog post or two from this year [01:01] didn't know about the stand untill after [01:01] didn't know about the project untill after that event to [01:01] yep I went [01:02] popey: and last year, I didn't know about the Open Suse beer for like one euro untill after the event to, ah well [01:02] maybe they had some this year, but didn't end up at that stand and a few others, since the timing of stuff [01:03] but it's SIP [01:03] SIP is no cometition to Skype [01:03] yep it does SIP and XMPP [01:03] and it can support Skype it seems going by featureas [01:03] it's a open source program [01:05] doesn't even start here [01:05] http://paste.ubuntu.com/5583923/ [01:05] popey: Java isn't exactly liked by quite a lot of people now it seems [01:05] espeically since Oracale owneded them it seems [07:53] How do I find out what audio chipset I have? [07:54] lspci | grep Audio returns some generic stuf [07:54] I know I have Intel HDA but not what version [07:54] kvarley: /proc/asound/cards should help [07:54] kvarley: and /proc/asound/cardX/codec#Y [07:54] Realtek ALC887-VD [07:56] MartijnVdS: Thanks :) [08:43] morning [09:02] Morning! [09:14] Morning all === michelle is now known as michelle_ [09:32] Happy Monday, everyone! :-D [09:32] woot [09:32] no, wait... === creakybore_ is now known as creakybore [09:54] hi folks, i'm trying to enable an sftp only user on an ubuntu box [09:54] I'm having trouble getting it to work. [09:56] one way is to change the shell - look at something like https://github.com/scponly/scponly/wiki [09:57] or rash at http://pizzashack.org/rssh/ which is perhaps easier [09:58] and cleaner as the rssh shell is included (damn auto correct rssh into rash) [09:58] well i've followed a generic route of modifying /etc/sshd_config to use Subsystem sftp internal-sftp [09:58] ah damn autocreater [09:58] then i add the Match Group sftponly with the chroot stuff and ForceCommand internal-sftp [09:58] good morning everyone. [09:58] go here --> http://pizzashack.org/rssh/ [09:58] but the user has no home directory, ahh, i need to explicityly tell the system to use a cert for that user. [09:59] hang on [09:59] how do you do that for auser without a home. [10:00] go http://troy.jdmz.net/rsnapshot/ scroll down to Restricting the key (not vert) [10:00] not certificate even [10:00] yeh, the sshd_config has PasswordAuthentication no so i have to use a cert for all users. [10:00] I have the cert already. [10:01] it's an aws instance [10:01] not certificate, a private/public key [10:01] yeh, what i meant [10:01] i have that already. [10:01] makes no difference is AWS, VM or local bare-metal - same principle [10:01] yup, [10:01] just reading that segment [10:02] so in restricting the key, you would put [10:03] the full pathname of the SCP binary [10:03] sftp [10:03] this is client side only, i know how to connect to the server with the key [10:04] sftp -I /pth/to/key.pem [10:04] well, ssh would be [10:04] i've never done certificate-based auth with ssh [10:04] only key-based [10:04] ssh -p XX -i key.file [10:05] oppollogies, lower i [10:05] scp -P xx -i key.file [10:05] : [10:05] sftp -p xx -i key.file [10:05] yeh, i just get a message saying Connection closed [10:06] did you set correct permissions on user home dir and .ssh folder and files? [10:06] Connection closed by foreign host? Could mean your host isn't in /etc/hosts.allow (or IS in /etc/hosts.deny) [10:06] just reading /var/log/auth.log [10:06] on the log on server i just get Disconnecting: Too many authentication failures for madgex [preauth] [10:06] do this from the account or root [10:06] user is madgex [10:07] {as user} [10:07] cd ; ls -ld . .ssh .ssh/authorized_keys [10:07] chmod go-w . .ssh .ssh/authorized_keys [10:07] creakybore: this on the server? [10:07] or on my local machine? [10:07] eys [10:07] yes on the server, in the users home directory [10:08] on server, well, madgex user has no home directory [10:08] you should of made a .ssh sub directory with their key [10:08] hmm, unless the upload directory is considered the home for this user. [10:08] no [10:09] the user key file (must be called authlrized_keys) must go in to /home/user/.ssh [10:09] and must have correct file permissions [10:09] yeh, but htere is no /home/madgex/ directory [10:09] creakybore: or whatever other directory is specified in /etc/ssh/sshd_config [10:10] MartijnVdS: how would i specify the key for this user or all users under the Match Group block to use the key? [10:10] via the /etc/ssh/sshd_config [10:10] ? [10:10] what is the users home directory as per /etc/passwd [10:10] NET||abuse: I don't think that's easy.. sshd still checks permissions [10:10] NET||abuse: what do you want to do? [10:10] !xyproblem [10:10] madgex:x:1001:1001::/var/opt/updatesys/upload:/bin/sh [10:11] http://mywiki.wooledge.org/XyProblem [10:11] ok so under /var/opt/updatesys create .ssh and put authorized_key in that - you can have more than one entry (i.e. user key) in authorized_keys [10:11] MartijnVdS: madgex is intended as an sftp only user, is member of group sftponly and under sshd_config i have Match Group sftponly ChrootDirectory %h and ForceCommand internal-sftp [10:12] cd /var/opt/updatesys ; ls -ld . .ssh .ssh/authorized_keys ; chmod go-w . .ssh .ssh/authorized_keys [10:12] If you don't want the user to be able to modify the ssh authorized keys, you'll have to do some more interesting things with sshd_config [10:12] man sshd_config + some ServerFault browsing might be in order [10:12] been doing alot of that, [10:13] seems very surface level information available from the examples there. [10:14] creakybore: i think updatesys/upload is actually the user home, so it would have to put .ssh into upload [10:14] NET||abuse: the manual has all the puzzle pieces, if you want to do something complex, you'll have to LEGO it together yourself ;) [10:14] unless i move the home for that user back to /var/opt/updatesys then in sshd_config ChrootDirectory %h/upload [10:15] then the sftp login won't see the .ssh directory but auth will pick it up [10:15] hopefully. [10:15] yes but then you can't ssh as "normal" user anymore, can you? [10:15] it should only apply to users in a specific group [10:15] don't want to ssh as normal under sftponly user [10:15] sure, but can you have per-user sshd configs? because if you put that in sshd_config, ssh'ing as "yourself" or "root" will chroot to ~/upload as well [10:15] hmm, how to modify user home directory. [10:15] NET||abuse: vipw [10:16] MartijnVdS: it's under a Match Group sftponly block [10:16] so this is all only applied if your a member of that group [10:16] so i only have this one user as that [10:16] NET||abuse: ah, didn't know those existed.. must be new :) [10:16] i think you can do Match User madgex forexample also. [10:17] articles showing that sshd_config entry going back years. doesn't seem new [10:21] apt-get install vim-shiny ;) [10:21] shiney? [10:22] yeah... every file it edits ends up looking shiny and new again! [10:22] uhh, typo.. shiny,, is that a firefly vim ? [10:31] * BigRedS has uefi [10:31] * BigRedS wants his bios back [10:33] BIOS. because all booting computers in 2013 should rely on having a complete implementation of a 16-bit Intel 8086 in the silicon, to run their 16-bit 8086 assembly boot loader [10:34] * popey increments the Program Counter [10:35] directhex: Not saying it's *better*, but it does reliably boot ISOs I've downloaded off the net [10:35] BigRedS, so set your system to boot via BIOS emulation, in the UEFI setup [10:36] since most ISOs aren't valid EFI images. yet. [10:36] nah, I've found that the raring daily CD sort-of boots, so I'm going with that for now [10:36] Given UEFI I feel I should probably use it, since it's going to be one of those things where I should be used ot all the inconsistencies and daft ideas [10:36] so, passwords [10:36] I'm thinking keepass + ubuntu one [10:37] any downsides to this method? [10:37] SuperMatt: I use that, apart from it's Dropbox in my case [10:37] I sync to my phone aswell [10:37] And use keepassdroid on there [10:37] also: how do I make keepass not look ugly on my desktop? [10:38] As in? [10:38] rewrite it to not be a winforms app [10:38] keepassx is one such project [10:38] I see [10:39] There are other apps that use Keepass DB if you want to try them, can't remember them off hand though [10:39] Can you not style keypassx via a qt theme? [10:40] yeah, but that's the point [10:40] keepassx is qt [10:40] keepass is winforms [10:40] but .. but .. [10:40] keepassx should be plain xlib [10:40] ah i use keepassx [10:40] qeepass or qtkeepass should be qt! [10:41] an keepass should be KDE [10:42] I use a plain text document to store my passwords [10:42] gpg encrypted of course [10:42] SuperMatt: don't store your key on ubuntu one too [10:42] I use post-its [10:42] popey: I do that.. Vim's gpg plugin makes it quite transparent [10:42] shauno: under your keyboard? [10:43] I use keepassX + password + private key [10:43] MartijnVdS: *everywhere*. I swear they breed when I'm not home [10:43] the keepass kdb can stay on u1 [10:43] but not the key [10:43] mungbean: oh, I won't [10:43] yeah, my password file is in u1 [10:51] popey: how do you sync with your phone? u1 android client? [10:51] ios u1 client [10:51] android is for losers ;) [10:51] pfft [10:52] got that thing working by bending to the wills of ssh, moved user account to their own normal /home directory and symlinked a upload directory from their home to the updateasys/ directory, [10:52] poor troll attempt popey :) [10:52] now now, that's not fair. android and ios are *both* for losers. /me flees [10:52] directhex: yeah, S40 OS 4 LIFE [10:53] so it's all contained in their home, and the system's schedule will pull stuff out of /home/madgex/upload to be used,, now, setting correct mask for sftp user so other schedule running user can access uploaded files.. [11:01] Morning all [11:03] \o davmor2 [11:07] think i'm finally recovered now, a full week later after phpuk13 [11:08] was like a zombie all last week and even this weekend. [11:10] PHP is bad for you? :P [11:10] lol,, ahh was a really fun conference [11:10] i got mega drunk, I had beers, several [11:11] But all was in good spirit, nothing untoward happened. [11:12] just waiting on video releases now from the talks. I was volunteering on tracks so couldn't see what i wanted. [11:27] Good morning peeps :) What's happening today? [11:27] * Laney accidently wrote "xnox" on his notepad instead of "Xsession" [11:29] Exciting [11:31] Laney: just wait for your girlfriend to start questioning what's on your mind ;-) [11:32] mmm latvian men [11:32] * Laney coughs [11:32] Jono doesn't know how to pronounce xnox, and hence said 'X.N.O.X.' on google on air hangout. [11:33] eggs-nogs? [11:33] MartijnVdS: yeah, sounds very much like that. [11:33] xnox: wondered was he talking about you [11:33] Or more like "snogs" with an X? [11:33] cant be more than one of you :) [11:33] Laney: to be fair you are excused, i did promise latvian beer to you. [11:35] \o/ Latvian Men [11:35] late to the latvian men party, sorry. [11:36] there's plenty enough to go around [11:36] \o/ [11:36] I cooked a joint of pork overnight in the slow cooker [11:36] it is completly nommy [11:40] recipe pls [11:41] i have burritos for dinner, made with my yummy home-made carnitas [11:41] which are slow cooked, but not in the slow cooker [11:42] http://www.youtube.com/watch?v=7dYj4utgLq4 [11:42] a bit like that [11:44] that is one huge shoulder [11:45] http://forums.hexus.net/hexus-hotpot-cookery-discussion/211986-carnitas-recipe-stolen-reddit-do-now.html#post2151910 [11:52] Hm. Just installed raring, installer worked fine but now I've booted in it's not detecting my keyboard or my mouse... [11:52] Though I can't think how to interact with this in suh a way as to fix it... [11:54] buy an OCZ brainwave-based controller, use that [12:01] anyone use a Reddit App on their Android phone, if so can you recommend one.. seems a fair few :) [12:01] diplo: I just go to i.reddit.com [12:02] I actually hadn't tried that, new phone that works, will take a look now ta [12:06] I use bacon reader [12:06] can't recommend it having not used anything else, but it seems fine to me [12:06] ah that's in the top 2, watching vid now [13:21] bonga bonga [13:21] ooh, i have an underscore [13:21] that's not good [13:22] hmm, someone in the ukraine is using my nick [13:22] tut tut [13:23] * MartijnVdS watches the banhammer [13:26] TheOpenSourcerer: feeling better? [13:26] not much [13:26] Still coughing and sniffing [13:27] rib hurts [13:27] big toe is black [13:27] back aches [13:27] Other than that I'm fine. [13:27] :-D [13:27] big toe is black? Frostbite? [13:28] lol - nope - nearly ripped the toe off putting on a ski boot [13:28] TheOpenSourcerer is considerd properly ill when it is so bad that a curry and a scotch doesn't fix it [13:28] ouch [13:28] (nail) === neuro_ is now known as neuro [13:32] Penalty of 0 days, 07:35:00 added to your timer for nick change. [13:32] damn [13:32] IdleBot? [13:32] #idlerpg [13:32] it's an rpg you play by idling on irc [13:32] ಠ_ಠ [13:39] hi TheOpenSourcerer [13:40] AlanBell: you going to online UDS tommorow? [13:43] probably not, but I will catch up on some interesting recordings afterwards [13:48] AlanBell: I took part in two of the old ones remotly or maybe more a bit, but got to register for this one and uh [14:12] sebsebseb: I take it you were at FOSEDM '13 this year ?? I went last year, how was it IYHO ?? === Hornet- is now known as Hornet [15:02] redtape-renegade: what's IHYHD ? [15:03] IYHO even [15:03] oh [15:03] In My Humble Opinion ? [15:03] IMNSHO [15:03] MartijnVdS: In My Not So Humble Opinion ? [15:03] ack [15:10] * Laney is edgy waiting for a call from evans to say that he can go test ride his new bike [15:10] have had one call from ecotricity trying to sell me green energy and one from my letting agent [15:28] http://www.omgubuntu.co.uk/2013/03/hp-launch-ubuntu-all-in-one-pc-for-349 [15:29] popey: how can you link to that unoffical source :D your meant to only be linking to http://planet.ubuntu.com and stuff like that :d JOKE [15:29]