| === Jikan is now known as Jikai | ||
| === Jikai is now known as Jikan | ||
| === histo1 is now known as histo | ||
| MraAlbertina | hi. any bad experience with ISPConfig 3? recommended/not?i have a headless system and i'm planning in installing it. | 01:31 |
|---|---|---|
| MraAlbertina | latest 12.10,, btw | 01:31 |
| === racedo` is now known as racedo | ||
| jacobw | Mornin | 08:51 |
| seicherlbob | hi there! I'm getting daily mails, telling me, that "/bin/sh: hwclock: not found" - but hwclock is installed and working. I dont even know, which script encounters this error. Any suggestions on how to fix that? | 09:10 |
| seicherlbob | (btw., its ubuntu server 10.4 LTS) | 09:11 |
| seicherlbob | I further see in the logs, that it must be some cron-task: "Mar 18 00:05:01 imladris CRON[30560]: (root) CMD (hwclock --systohc)" - but still I can't find which one to debug it. | 09:19 |
| seicherlbob | ok, got it. it was the crontab of root... never mind. | 09:23 |
| ataxlab | u | 09:38 |
| koolhead17 | hi all | 09:44 |
| alex88 | hi guys | 09:52 |
| alex88 | does ufw logging works on ipv6? I don't see any logs of it | 09:52 |
| alex88 | oh sure, IPV6=yess will not be processed | 09:54 |
| BaNzounet | Hey guys, I'm trying to change my server's kernel but I don't know why everytime It still start on the other one | 09:57 |
| BaNzounet | Can someone help me? | 09:57 |
| jacobw | BaNzounet: you need to new entry in GRUB to be the preferred entry | 10:01 |
| jacobw | BaNzounet: can you boot on the new kernel by manually seleting it in the GRUB menu? | 10:02 |
| BaNzounet | I did update-grub, but still It doesn't change anything | 10:02 |
| jacobw | BaNzounet: test that first, then set it to preferred in GRUB | 10:02 |
| jacobw | BaNzounet: update-grub adds new entries to grub, it doesn't change which entry is the default | 10:02 |
| BaNzounet | jacobw: It's a server in a data center I can't manualy chose the entry | 10:03 |
| jacobw | BaNzounet: then you have two choices, set it as the default, reboot and hope it comes up OK .. or use IPMI or an IP KVM or something similar with the datacentre staff | 10:04 |
| BaNzounet | What I don't get is, we're already booting on the right one(according to grub) but It still load the older one :/ | 10:08 |
| jamespage | hallyn, /dev/kvm fix in raring lgtm | 10:19 |
| zorgs | hi | 10:27 |
| jacobw | BaNzounet: is it a container? | 10:29 |
| zorgs | question about a server process with a console (running in a screen session), it accepts commands like "save" entered into the console, can I somehow send "save\n" to that process and have a crontabbed script doing that on set intervals? | 10:29 |
| zorgs | I guess my question could be reworded as "how can I send a small string of text, like a server command, to a process running in a screen session" | 10:30 |
| zorgs | or byobu | 10:30 |
| zorgs | (using tmux) | 10:30 |
| BaNzounet | jacobw: mhum? A container? what do you mean? | 10:30 |
| jacobw | BaNzounet: a container is an instance of an OS running under the kernel of a host OS | 10:31 |
| jacobw | BaNzounet: it's not a virtual machine, it doesn't have virtual cpus or it's own kernel, it's an instance of init running on the host with access to a restricted set of resources (devices, filesystems, memory, cpu) | 10:33 |
| jacobw | BaNzounet: the kernel is shared over many containers, it's an effective way to run VPS services and lots of datacentres do it now | 10:34 |
| jacobw | BaNzounet: i.e. it's not your kernel to upgrade | 10:34 |
| zorgs | how can one tell from the inside of the guest system? | 10:34 |
| jacobw | zorgs: you don't have many devices, any kernel operation will fail, etc. | 10:38 |
| zorgs | right, makes sense | 10:38 |
| jacobw | zorgs: regarding your question, you want to send the string the STDIN file descriptor of the process | 10:40 |
| jacobw | zorgs: http://serverfault.com/questions/178457/can-i-send-some-text-to-the-stdin-of-an-active-process-running-in-a-screen-sessi | 10:40 |
| zorgs | ah awesome | 10:40 |
| zorgs | couldn't find anything on stackxchange | 10:40 |
| zorgs | /proc/*pid... how easy. I love this shit | 10:41 |
| zorgs | thanks | 10:43 |
| jacobw | zorgs: see the comment where the guy warns about sending EOF to STDIN | 10:45 |
| zorgs | saw it thanks, yeah I don't like that solution | 10:45 |
| zorgs | the first answer I like a lot more, echoing something to the fd/0 of that PID | 10:45 |
| zorgs | one question though | 10:45 |
| zorgs | say I'm in the same boat as that guy that I want to restart that process and to gracefully stop it and restart... but it requires sending that command etc... | 10:46 |
| zorgs | when it restarts how can I find out its new PID | 10:46 |
| zorgs | I mean... the script. | 10:46 |
| zorgs | and use the new PID next time when it sends the stop command before next restart (after 24hrs) | 10:47 |
| jacobw | zorgs: i'm not sure if it what he's saying applies to all processes, i would test to find out | 10:50 |
| jacobw | zorgs: upstart can probably tell you the PID of a service, if your using upstart | 10:50 |
| zorgs | 12.04 LTS | 10:51 |
| zorgs | ok cool that helps, I will do some testing | 10:51 |
| zorgs | jacobw, appreciated your input but sad to report that trick doesn't work :/ | 11:22 |
| zorgs | jacobw, the command appears on the console of the process but it just don't werk :/ the response is unknown/illegal command like the text was something other than "save", I was testing with "help" pretty straighfoward | 11:23 |
| jacobw | How are you sending it STDIN? | 11:24 |
| zorgs | echoing to /proc/1/fd/0 | 11:24 |
| zorgs | 1 = the actual pid | 11:24 |
| zorgs | it does show up when I change to that window... | 11:24 |
| zorgs | how can I echo the enter character sequence right after the string? | 11:26 |
| zorgs | "string\n" didn't cut it | 11:26 |
| jacobw | I'd test by using python to open('/proc/1/fd/0') so I could control exactly what I was sending | 11:26 |
| zorgs | ah that's a good idea | 11:27 |
| zorgs | bash might modify it a bit | 11:27 |
| zorgs | thanks | 11:27 |
| jacobw | echo doesn't interpret backslashes by default, `echo -e "foo\n" > bar` | 11:27 |
| zorgs | ahh | 11:27 |
| zorgs | it sends the text and a new line but nothing happens until I actually switch and press enter at the console hmm | 11:28 |
| zorgs | i'll play with this some more, thanks for all your help so far | 11:32 |
| tdotr6 | Hi Good Morning, I have a question hopefully I can make this not very confusing. I did just finish a night shift.. | 11:50 |
| tdotr6 | I just got in from work and I found my server unreachable..Running Ubuntu server 12.10... So I went over to physically check it this time since it's the second time in 24 hours this has happened. There was nothing when I turned the screen and I couldn't get the screen to wake up...I have checked logs and found nothing other then crazy amounts of DHCP Requests from all 3 nic cards. The | 11:50 |
| tdotr6 | only thing I could find that I am able to duplicate is if I unplug 1 of the 3 NIC cards, they all become unreachable. So If eth0 gets unplugged and I am pinging eth2 say, It will die. but the moment eht0 is back in, eth2 will reply.... I work at a data center for a living but I am a networking guy , not a server guy. This is blowing my mind why I am having this issue with no logs..or am | 11:50 |
| tdotr6 | I not looking at the right logs.. | 11:50 |
| tdotr6 | Sorry I know thats a lot to read | 11:52 |
| rajumoh | zorgs, jacobw : will not the use of echo -e help as it enables backslash interpretation | 11:53 |
| ogra_ | if -e is supported totally depends on the shell you use ... its really a matter of luck | 11:54 |
| rajumoh | yeah, just thought that being on ubuntu-server and bash being the default .. | 11:57 |
| ogra_ | bash isnt the default in ubuntu since 6.06 | 11:58 |
| ogra_ | dash is :) | 11:58 |
| tdotr6 | Does anyone have any networking exp? | 11:58 |
| ogra_ | (bash is still the default user shell, but not used for any system scripts) | 11:58 |
| ogra_ | https://wiki.ubuntu.com/DashAsBinSh | 11:59 |
| ogra_ | https://wiki.ubuntu.com/DashAsBinSh#echo specifically ... | 12:00 |
| rajumoh | please kill me ;-( . the day seems to be getting worse. | 12:01 |
| pmatulis | rajumoh: where do you live? | 12:06 |
| tdotr6 | Hey guys, quick question | 12:06 |
| tdotr6 | I just wrote a big blob but maybe it was 2 much to take in | 12:07 |
| tdotr6 | Basicly the problem is, 3 NIC Card setup, You unplug 1 NIC Card, All 3 become unreachable. | 12:07 |
| rajumoh | he he .. very funny!! | 12:07 |
| rightshift | Hi, Ubuntu 10.04 - can DNS be added in /etc/network/interfaces or is it only in /etc/resolv.conf? | 12:11 |
| tdotr6 | Interfaces I belive | 12:12 |
| tdotr6 | resolv.conf is a auto gen file I belive | 12:12 |
| rightshift | I'm trying to standardize my servers and my new 12.* boxes are /etc/network/interfaces whereas my old 10.* are /etc/resolv.conf - i'd like to have them all in one place, hence moving 10.04 to /etc/network/interfaces | 12:12 |
| rightshift | just want to make sure it works there and that it wasnt adopter in 11 or 12?... | 12:12 |
| tdotr6 | :/ dont know about adopter , then again i only use 12 | 12:13 |
| tdotr6 | havent used 10 in very long time so i cant tell you sorry. | 12:13 |
| rightshift | same... | 12:13 |
| tdotr6 | I am having networking issues of my own right now | 12:13 |
| tdotr6 | maybe you can help me? LOL | 12:13 |
| tdotr6 | Basicly the problem is, 3 NIC Card setup, You unplug 1 NIC Card, All 3 become unreachable. | 12:13 |
| tdotr6 | and this only started to happen yesterday and I cant find anything in the logs for it other then a tonn of DHCP Requests from all 3 nics. But after a cpl hours of the server being on, it just becomes unreachable. | 12:14 |
| jacobw | rightshift: man resolvconf | 12:14 |
| tdotr6 | nice thx jacobw | 12:15 |
| rajumoh | tdotr6: my 2 cents . did u check ur routing table on the server ? are the other 2 nic's by anyway dependent on the eth0 nic ? | 12:17 |
| tdotr6 | Good call I don't know why or how that would of changed ( Since this is a new issue ) But fuck i should of checked that | 12:18 |
| tdotr6 | thx raj def look at that now | 12:18 |
| tdotr6 | I was just going to check my syslog file | 12:18 |
| tdotr6 | and I did yesterday......Infact I still had it open. I went to reopen it now.. And It made scp hang.. | 12:18 |
| tdotr6 | the file is 400MB ! | 12:18 |
| tdotr6 | : | 12:18 |
| tdotr6 | Hmmm that can't be normal ... ?? 400Mb syslog file??\ | 12:19 |
| tdotr6 | wow it just crashed my server | 12:19 |
| tdotr6 | trying to open that | 12:19 |
| tdotr6 | all 3 nics unreachable.. | 12:20 |
| tdotr6 | What the heck? | 12:20 |
| tdotr6 | ya server is dead.. Man I dont want to go all the way.. Any tips for anything I should try other then the good old reboot first? | 12:21 |
| tdotr6 | ? nothing ? | 12:23 |
| ogra_ | rightshift, http://www.stgraber.org/2012/02/24/dns-in-ubuntu-12-04/ | 12:26 |
| tdotr6 | lol I guess my problems 2 complicated? | 12:27 |
| jacobw | tdotr6: you need to describe your problem better, which ports are connected to which physical devices? which addresses are associated with which ports? what routes and firewall rules do you have? etc | 12:34 |
| tdotr6 | There are 3 NIC Cards in the machine, All 3 are on the same subnet , 192.168.1.40,50,60. There are no firewall rules on the machine other then logs. The logs show nothing other then DHCP Requets during the time of drop. | 12:38 |
| tdotr6 | Just now it happened again where I tried to download a large file and the machine just became unreacahble from all 3 ip's | 12:39 |
| tdotr6 | I went to the machine and took a photo, just a sec for that.. But When I logged in I was unable to ping say, google.com or my router , I shut eth0 down and the moment I did that it was reachable. I had a constant ping going to eth2 IP | 12:40 |
| tdotr6 | eth0 is the same nic also that If I pull that cable , Then eth1 and eth2 are unreachable but the moment it gets plugged in , boom its all good again. | 12:41 |
| tdotr6 | so clearly the issue lies with eth0 | 12:41 |
| tdotr6 | yet all interfaces are error free | 12:42 |
| tdotr6 | RX packets:3397 errors:0 dropped:0 overruns:0 frame:0 | 12:42 |
| tdotr6 | TX packets:1604 errors:0 dropped:0 overruns:0 carrier:0 | 12:42 |
| tdotr6 | collisions:0 txqueuelen:1000 | 12:42 |
| tdotr6 | OK | 12:43 |
| tdotr6 | found my issue | 12:43 |
| tdotr6 | Destination Gateway Genmask Flags Metric Ref Use Iface | 12:43 |
| tdotr6 | default pfr1.network 0.0.0.0 UG 0 0 0 eth0 | 12:43 |
| tdotr6 | Destination Gateway Genmask Flags Metric Ref Use Iface | 12:43 |
| tdotr6 | default pfr1.network 0.0.0.0 UG 0 0 0 eth0 | 12:43 |
| tdotr6 | 192.168.1.0 * 255.255.255.0 U 0 0 0 eth1 | 12:43 |
| tdotr6 | 192.168.1.0 * 255.255.255.0 U 0 0 0 eth2 | 12:43 |
| tdotr6 | 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 | 12:43 |
| tdotr6 | how I do make that default route go out the loopback | 12:44 |
| tdotr6 | nvm | 12:45 |
| tdotr6 | i just solved all my issues | 12:45 |
| tdotr6 | thanks for letting me think out loud | 12:45 |
| tdotr6 | :) | 12:45 |
| Reemo | Hey guys, i just ran into a few issues with mdadm: I have a raid5 /dev/md3 consisting of sde, sdf, md2. Everytime i boot up the server, mdadm doesnt find /dev/md2, forces me to readd and resync it. Quite annoying. How can i tell mdadm to wait for md2 to be created? | 13:19 |
| Reemo | Oh btw: 12.10, 3.5.0-25-generic x86_64 | 13:19 |
| simplexio | Reemo: re-add ? i have to do mdadm --assemble --scan | 13:21 |
| Reemo | simplexio: re-add didnt work (cant add /dev/md2 to /dev/md3) | 13:21 |
| Reemo | had to run --add | 13:21 |
| Reemo | Im fairly new to mdadm, whats with bitmaps, could those speed up the process? | 13:21 |
| Reemo | i dont like the idea of writing everything to the discs after booting... | 13:22 |
| simplexio | Reemo: ahh. i do -manage --stop /dev/md1_1 | 13:22 |
| simplexio | because it dosent fire up whole raid package | 13:22 |
| simplexio | Reemo: i have seen some startup script wich will fix it but idont use it | 13:23 |
| Reemo | simplexio: can you give me a link? googling is kind of pointless here, as its just way to generic | 13:23 |
| simplexio | Reemo: like i said , i dont use it. But this seems to be good answer http://superuser.com/questions/287462/how-can-i-make-mdadm-auto-assemble-raid-after-each-boot | 13:25 |
| Reemo | simplexio: thanks, will try it | 13:26 |
| simplexio | Reemo: i addes autostart=true to my config too | 13:27 |
| === wedgwood_away is now known as wedgwood | ||
| hallyn | jamespage: \o/ thanks | 13:45 |
| jamespage | hallyn, no - thankyou! | 13:55 |
| Fieldy | when I do "start mysql", I am told "start: Job failed to start". There's no logs from any startup attempt in /var/log/msyql/... any ideas? | 14:22 |
| Fieldy | if I do mysqld -u mysql , it does start up | 14:23 |
| resno | you use the command "start mysql"? | 14:23 |
| resno | does "sudo service mysql start" work? | 14:24 |
| Fieldy | i had initially done /etc/init.d/mysql start however it told me to use start, let me try that | 14:25 |
| Fieldy | same error, no logs | 14:25 |
| resno | is /etc/init.d/mysql start not working? | 14:25 |
| Fieldy | same error, no logs, and also "Since the script you are attempting to invoke has been converted to an Upstart job, you may also use the start(8) utility, e.g. start mysql" | 14:26 |
| resno | you are running it with "sudo" right? | 14:26 |
| Fieldy | mysqld -u mysql starts up just fine | 14:27 |
| Fieldy | both using sudo yes | 14:27 |
| zul | hallyn: i have sometime do you think we should update libvirt in raring? | 14:37 |
| hallyn | zul: i haven't tracked to see what would be more stable...i think starting the lxc api driver for libvirt would be better use of the time :) | 14:38 |
| hallyn | zul: is there any feature you need from it? | 14:38 |
| zul | hallyn: meh :) | 14:38 |
| zul | well it has the fix for the python libvirt stuff that we tracked down so less patches that we have to carry | 14:39 |
| Fieldy | how can i remove mysql-server including all configuration and databases and tables, so that I can have a clean slate and start over? | 14:39 |
| hallyn | zul: more and more lxc-based projects are cropping up (like http://www.roboearth.org/archives/1869 and http://dotcloud.github.com/docker) so having everyting on common codebase seems a priority | 14:40 |
| hallyn | zul: but it's up to you :) | 14:40 |
| zul | interesting | 14:41 |
| Fieldy | when I do apt-get remove mysql-server it hangs at "Setting up mysql-server-5.5 (5.5.29-0ubuntu0.12.10.1) ..." for about ten seconds and then tells me various errors and the remove doesn't finish. | 14:44 |
| Fieldy | just trying to get a clean slate as above | 14:45 |
| === andreas__ is now known as ahasenack | ||
| Fieldy | meh. | 14:53 |
| resno | Fieldy: purge would be the right command | 14:54 |
| Fieldy | ok i will man page it up | 14:54 |
| Fieldy | resno: i'm still getting the same issues: http://fpaste.org/B0rI/raw/ | 14:56 |
| resno | it says its no tinstalled | 14:56 |
| resno | have messed with the init scripts? | 14:57 |
| Fieldy | yep, and if I do install, i get the same errors at the end. all i'm trying to do is wipe it out, configs and everything | 14:57 |
| Fieldy | nope, i know better hehe | 14:57 |
| resno | you got some kinda issue though.. | 14:57 |
| resno | something beyond the "run of the mills" stuff | 14:58 |
| Fieldy | yeah. i'm trying to track it down without success. it still does start (once installed) manually with mysqld -u mysql so i'm really not sure what the problem is | 14:58 |
| resno | Fieldy: try dpkg --configure -a | 14:59 |
| resno | and have altered the my.cnf? file | 14:59 |
| Fieldy | resno: http://fpaste.org/MBVq/raw/ | 15:00 |
| Fieldy | resno: i did but it wouldn't start at that point, so I put the original my.cnf back (i copied it out), from then on there's the issues. but the original my.cnf is back in place | 15:00 |
| resno | Fieldy: try apt-get purge mysql-server-.. what ever server version you are using | 15:01 |
| Fieldy | ok, it's "purge" and not "--purge"? | 15:02 |
| resno | correct.. | 15:02 |
| Fieldy | will do | 15:02 |
| Fieldy | resno: no complaints anymore, it looks like it's gone | 15:03 |
| resno | cool | 15:03 |
| resno | i only had a few more ideas beyond that.. so good something workd | 15:03 |
| Fieldy | is that supposed to wipe out all files that were originally installed, aiming at the goal of a fresh start with mysql-server? | 15:04 |
| Fieldy | looks like it removed anything that i did not modify, all i have to do is clean up my stuff... on the right path ehre | 15:05 |
| Fieldy | s/ehre/here/ | 15:05 |
| Fieldy | and i just figured out the my.cnf issues; I had several different versions laying around, things like my.cnf-ORIG my.cnf-TEST and i was just symlinking my.cnf to those to switch around -- the init scripts hated the symlink. when I copied them instead, it worked. | 15:08 |
| Fieldy | heavy rain goofing up my internet connection, bbl | 15:10 |
| luminous | for log_output in sudo, or any other "option flag" - what is considered "enabled" | 15:40 |
| hallyn | jamespage: https://blueprints.launchpad.net/ubuntu/+spec/servercloud-r-seeded-qa-workflow write dep-8 tests for lxc - is inclusion of lxc tests in utah server testcases sufficient? | 16:48 |
| === Jikan is now known as Jikai | ||
| === Jikai is now known as Jikan | ||
| jamespage | hallyn, I think its a good start | 16:54 |
| jamespage | hallyn, and enough for now | 16:54 |
| jamespage | we need to revisit the dep-8 approach | 16:54 |
| jamespage | I made it work nicely for openvswitch dkms modules | 16:55 |
| hallyn | floodlight? | 16:55 |
| jamespage | hallyn, I wrote three tests | 16:56 |
| jamespage | one for dkms package | 16:56 |
| hallyn | where? | 16:56 |
| jamespage | one for using module-assistant | 16:56 |
| jamespage | and then I used mininet to test openvswitch itself | 16:56 |
| jamespage | hallyn, its in the source tree in raring | 16:56 |
| jamespage | (which is the other nice thing about dep-8 tests :-)) | 16:57 |
| hallyn | i don't knwo what "the source tree" is | 16:57 |
| hallyn | oh | 16:57 |
| hallyn | ok | 16:57 |
| jamespage | hallyn, as in the package source tree | 16:57 |
| jamespage | pull-lp-source openvswitch/bzr branch ubuntu:openvswitch | 16:57 |
| hallyn | jamespage: for qemu tests, i'm considering having the utah test case (at lest for starters) bzr co qa-regression-tests and run that testsuite | 16:58 |
| jamespage | hallyn, OK - but consider that DEP-8 gets run when the package is in proposed as well | 16:59 |
| jamespage | so it gets a pre-acceptance test | 16:59 |
| hallyn | jamespage: sigh, then maybe i'll jut mark that postponed. hang on | 17:00 |
| hallyn | jamespage: for uds.2013.06 i've put down an item to put all the lxc testcases into upstream lxc under tests/ubuntu . | 17:06 |
| hallyn | stgraber: ^ | 17:07 |
| jamespage | hallyn, lovely | 17:07 |
| hallyn | that should help maintainability of utah testcases quite ab it | 17:07 |
| hallyn | jamespage: so i'll mark the current open WI done. for qemu one, i'm thinkingo f markign it postponed | 17:07 |
| hallyn | jdstrand: says nuclearbob may have thoughts on it, so would like to chat with him when i find him | 17:08 |
| hallyn | Daviey: ^ any objections to postponing the dep-8 tests for kvm item? | 17:10 |
| Daviey | hallyn: partial coverage cannot be started? | 17:12 |
| hallyn | Daviey: we've got a shitload of coverage | 17:12 |
| hallyn | in the qa-regression-tests | 17:12 |
| Daviey | Ah, of course we have | 17:13 |
| Daviey | yeah, good point. :) | 17:13 |
| Daviey | defer away! | 17:13 |
| hallyn | Daviey: thx. (check recent log of #ubuntu-hardened - someone else may be looking at hwo to best sync testcases between qrt and utah) | 17:14 |
| hallyn | i was going to write a test script to check out the qrt and run them in utah, but i fear i'd make the situation worse that way | 17:14 |
| === matsubara is now known as matsubara-lunch | ||
| Daviey | hallyn: yeah, thanks | 17:15 |
| hallyn | woohoo, ppa claims to have compiled a sparc crossc- with no problems. (I don't believe it, waiting till it gets published to really celebrate :) | 17:16 |
| hallyn | Daviey: so, there are action items from uds 2013.03. any decisions about where we should track thsoe? | 17:17 |
| Daviey | hallyn: do they not fit on existing blueprints for 13.04? | 17:29 |
| Daviey | hallyn: if there is no intention of getting them into 13.04, still add them to the BP - but mark them postponed.. then we can pick it up next cycle? | 17:30 |
| hallyn | that's a bit of a shoe-horning :) which is fine if it's a one-time thing while we wait for updates to support 3-month and 12-month blueprints, | 17:32 |
| fabiofranco | why do I need the rule accepting connections RELATED, ESTABLISHED on iptables? What are their purpose? | 18:16 |
| fabiofranco | What is their purpose? | 18:16 |
| yolanda | hi, any suggestions for converting an svg file to pdf? i tried with reportlab and the result isn't very good, and wkhtmltopdf python module doesn't seem to be working, it's buggy | 18:18 |
| sarnold | fabiofranco: that's what turns your firewall into a stateful firewall | 18:18 |
| === matsubara-lunch is now known as matsubara | ||
| fabiofranco | sarnold thanks... gonna have a look at some reading material regarding the subject. suggestions would be appreciated if any | 18:20 |
| sarnold | fabiofranco: I've linked to the wikipedia article before, it must have been okay once | 18:21 |
| fabiofranco | sarnold ok... thanks a lot! | 18:22 |
| === blitzkrieg3 is now known as jmleddy | ||
| RoyK | fabiofranco: "established" is for return ports of established TCP connections. "related" is for related return ports as with TCP and other ugly protocols exchanging ip addresses or port numbers up in layer 7 | 18:35 |
| RoyK | erm - "as with FTP" - not TCP | 18:36 |
| RoyK | TCP in for "established" | 18:36 |
| sarnold | RoyK: thanks :) | 18:36 |
| fabiofranco | RoyK thanks a lot! | 18:39 |
| irv | how do i add my user to sudoers without being in sudoers already? | 18:46 |
| irv | it's the only account on the box | 18:46 |
| irv | i can't elevate to add myself D: | 18:46 |
| RoyK | it should be in sudoers if you installed the box given that account | 18:46 |
| sarnold | irv: reboot with init=/bin/sh | 18:46 |
| irv | it says i'm not :[ | 18:46 |
| irv | k sec | 18:46 |
| RoyK | irv: reboot into single user mode | 18:46 |
| RoyK | aka "recovery" | 18:47 |
| irv | any easy way to reboot without being root | 18:48 |
| irv | i don't want to just hard power it off in hyperv | 18:48 |
| irv | or is there a way to find what the other account could be? | 18:48 |
| irv | i'm almost positive i set that one up as the 'account' during setup | 18:48 |
| irv | but, who knows at this point.. | 18:48 |
| irv | i only see my directory in /home | 18:48 |
| irv | but i suppose that could be permissions hiding the others | 18:48 |
| irv | k sent it a shutdown from hyperv | 18:49 |
| irv | so just e on the main entry then add 'init=/bin/sh' to the last line? | 18:51 |
| irv | in grub | 18:51 |
| sarnold | well, whichever boot entry would otherwise be correct :) | 18:51 |
| irv | ya i used the main one | 18:51 |
| irv | there are only 2 ubuntu ones (one is recovery mode) | 18:51 |
| RoyK | irv: it rather obvious you can't get sudo access without having sudo access ;) | 18:52 |
| irv | still gave me the same error | 18:52 |
| irv | ya but someone on the box has to have it, right? | 18:52 |
| irv | as far as i can tell, it's only this one account (that i created) | 18:52 |
| sarnold | irv: you're root. edit /etc/sudoers to fix it. | 18:52 |
| irv | but when i try to sudo something it says that account is not on the sudoers list | 18:52 |
| RoyK | irv: but rebooting the vm the hard wary from hyper-v should be trivial - ext4 and most other filesystems will handle this easily | 18:52 |
| irv | sarnold: i get permission denied when nano /etc/sudoers | 18:53 |
| RoyK | irv: did you install this system? | 18:53 |
| irv | RoyK: ya, the shutdown did it cleanly | 18:53 |
| sarnold | irv: try EDITOR=nano visudo | 18:53 |
| irv | RoyK: yep, stood it up from a fresh ISO like 2 weeks ago | 18:53 |
| sarnold | .. the file is'nt writable for root to remind you to use visudo | 18:53 |
| RoyK | sarnold: everything is writable for root | 18:54 |
| irv | i got 2 permission denied with that command | 18:54 |
| irv | sarnold* | 18:54 |
| RoyK | irv: reboot into single - if you don't have sudo access, you don't | 18:54 |
| sarnold | RoyK: well, uh, yess and no... | 18:54 |
| sarnold | RoyK: root is treated as a user when root owns the files, so if root has removed write permissions, nano ought to complain at startup | 18:55 |
| RoyK | irv: really - if you don't have sudo access, something is messed up - reboot into single - it's the only way | 18:55 |
| irv | k doing that now | 18:56 |
| RoyK | sarnold: no, root always has write access to everything unless you're running with enforced security like hardened selinux | 18:56 |
| irv | yay root@linux | 18:56 |
| irv | :D | 18:56 |
| irv | now just to add my user to the /etc/sudoers ? | 18:57 |
| RoyK | irv: then visudo | 18:57 |
| RoyK | or "EDITOR=nano visudo" if you don't know vi too well | 18:57 |
| irv | can i just copy the root line and change to my username underneath | 18:57 |
| RoyK | normally, nano should be the default editor, so it shouldn't matter much | 18:57 |
| RoyK | yes | 18:57 |
| irv | okay it's written | 18:58 |
| irv | reboot now? | 18:58 |
| RoyK | yep | 18:58 |
| sarnold | RoyK: try this: sudo -s ; echo hi > /tmp/foo ; chmod 000 /tmp/foo ; vim /tmp/foo -- note the [readonly] in the bottom line. change the file. note the [Changing a read only file] warning. | 18:58 |
| sarnold | RoyK: Now, granted, you hit :w! and vim _will_ write it. but the _interface_ the human sees gives the impression that root can't write it. | 18:58 |
| RoyK | sarnold: and then change it, and :w! | 18:58 |
| RoyK | sarnold: yes, that's what I'm saying - root has write access, even if vim tells you otherwise | 18:58 |
| irv | yay, worked. | 18:59 |
| irv | thanks all | 18:59 |
| sarnold | RoyK: and _that_ is why sudoers is 440 and not 640 -- so that root sees the "read-only file" warning from their editor and then thinks "oh yeah! I need to use visudo otherwise I'll screw up my sudo config!" :) | 18:59 |
| RoyK | sarnold: visudo checks the syntax, which is fine | 18:59 |
| sarnold | RoyK: s/fine/damn near mandatory/ :) | 19:00 |
| irv | hmm although my DNS isn't in there | 19:00 |
| RoyK | irv: resolv.conf? set those values in /etc/network/interfaces | 19:00 |
| irv | ya i have it in there | 19:01 |
| RoyK | as in 'dns-nameservers x.x.x.x y.y.y.y' and 'dns-search asdf.com' | 19:01 |
| irv | 'nameserver x.x.x.x' | 19:01 |
| irv | ohh | 19:01 |
| irv | it's in there now | 19:02 |
| irv | thx | 19:02 |
| RoyK | irv: now su - youraccount and try sudo -i | 19:04 |
| irv | will do, just updating a few packages right now | 19:04 |
| irv | what sort of speeds are these repos generally putting out | 19:04 |
| RoyK | no idea about numbers - sufficies for me | 19:05 |
| irv | only reason i ask is it seems to only be downloading at like 10% of my connection speed | 19:06 |
| sarnold | I think I tended to get 1-2 MBps .. but I put up a caching proxy for my VMs and so forth, so once in a while 60MBps, entirely local... | 19:06 |
| irv | ahh ya | 19:06 |
| RoyK | irv: where are you located? what mirrors are you using? | 19:06 |
| irv | i only have a couple linux VMs at the moment | 19:06 |
| irv | canada and i thought i was using the uwaterloo one | 19:06 |
| irv | but how can i check | 19:06 |
| irv | also, is there another tool for looking at per-connection bandwidth usage on the machine | 19:08 |
| irv | nethogs seems to be off or something | 19:08 |
| irv | there's an apache server and ftp, i'd like to see how much bandwidth various users are pushing at any given moment in time | 19:09 |
| irv | perhaps i'm reading it wrong.. what is the 'sent' column measured in units wise? | 19:10 |
| irv | nm, it seems to be working | 19:11 |
| luminous | anyone familiar with enabling logging for sudo? I see the log_output and log_input booleans, but am getting "sudo: >>> /etc/sudoers.d/logging: syntax error near line 0 <<<" | 19:42 |
| sarnold | cat: /etc/sudoers.d/logging: No such file or directory | 19:43 |
| histo | luminous: auth.log | 19:43 |
| luminous | sarnold: I created it :) | 19:44 |
| sarnold | luminous: then fix your errors? :) | 19:44 |
| sarnold | luminous: can you pastebin the file? | 19:44 |
| histo | luminous: Doesn't sudo log to auth.log by default | 19:44 |
| luminous | what is the correct syntax for "enabling" the sudoers booleans? the sudoers manpage is not clear on this point | 19:46 |
| luminous | histo: I am trying to enable log_output, I don't think this is on by default | 19:46 |
| luminous | no one fiddles with sudo? :( | 19:48 |
| island219 | Well… Hellooo | 20:10 |
| RoyK | daginn | 20:10 |
| zul | adam_g: https://code.launchpad.net/~zulcss/keystone/keystone-upstart/+merge/153927 | 20:23 |
| wastl | thefox: indeed it does :( | 20:26 |
| wastl | thefox: maybe this helps: http://askubuntu.com/questions/32298/prefer-a-ipv4-dns-lookups-before-aaaaipv6-lookups | 20:27 |
| JanC | luminous: see the EXAMPLES section in the manpage...? | 21:16 |
| Koheleth | anyone updated apache2 2.2.22 today? | 21:45 |
| Koheleth | did all go tickety boo? | 21:45 |
| patdk-lap | heh? | 21:46 |
| brian_petersen | I am installing ubuntu server onto a desktop computer but need some help with the partitioning. I've done this three times but it never works. I create a boot partition | 22:15 |
| brian_petersen | Ignore my last thing, | 22:16 |
| brian_petersen | When I use the manual partition for the ubuntu installation and when I make the /boot partition, should I mark it as bootable? | 22:17 |
| fluvvell | hey guys, can you mount an ext4 drive in read only mode on an 8.04 server that wont support ext4? ie mount it as ext2 or 3 | 22:26 |
| patdk-lap | not really | 22:27 |
| patdk-lap | it only works if it doesn't use the ext4 extents feature | 22:27 |
| fluvvell | like journalling? | 22:27 |
| patdk-lap | no | 22:27 |
| fluvvell | can i easily add ext4 support without major upgrade to the server? | 22:28 |
| histo | fluvvell: it should have ext4 support | 22:31 |
| histo | ugghh oh just read 8.04 | 22:31 |
| histo | I thought it was backwards compatible for mounting as ext3 | 22:31 |
| sarnold | fluvvell: please note 8.04 leaves support in a few weeks. | 22:32 |
| fluvvell | histo, yeah. | 22:32 |
| fluvvell | sarnold, thanks I only have a couple of machines using it. urr make that 3, one is a virtual machine | 22:32 |
| sarnold | fluvvell: it'd be worth figuring out a migration path away from that server's install before the updates stop.. | 22:32 |
| fluvvell | sarnold, worked out, just planning when to implement. Your reminder is timely - ill have to get it put on priority | 22:33 |
| fluvvell | histo, so did I but it wont, complains bad superblock etc. (attempted ro mount) | 22:36 |
| fluvvell | oh well, thanks all. | 22:38 |
| sarnold | have fun :) | 22:38 |
| histo | fluvvell: upgrade | 22:49 |
| fluvvell | histo, its ok I've setup a virtual machine to mount it on. | 22:49 |
| fluvvell | but yes I'll upgrade | 22:49 |
| histo | ahh | 22:57 |
| === wedgwood is now known as wedgwood_away | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!