[00:13] Will someone give me a hint as to what man page will tell me how to set an init script to start at boot? [00:14] !boot [00:14] Boot options: https://help.ubuntu.com/community/BootOptions - To add/remove startup services, you can use the package 'bum', or update-rc.d - To add your own startup scripts, use /etc/rc.local - See also !grub and !dualboot - Making a boot floppy: https://help.ubuntu.com/community/GrubHowto/BootFloppy - Also see https://help.ubuntu.com/community/SmartBootManagerHowto [00:23] Will someone give me a hint as to what man page will tell me how to set an init script to start at boot? [00:25] hey hey boo boo [00:29] !boot [00:29] * sw pokes ubottu [00:30] onereadingman: [00:30] 00:13 < onereadingman> Will someone give me a hint as to what man page will tell me how to set an init script to start at [00:30] boot? [00:30] 00:14 < sw> !boot [00:30] 00:14 < ubottu> Boot options: https://help.ubuntu.com/community/BootOptions - To add/remove startup services, you can use [00:30] the package 'bum', or update-rc.d - To add your own startup scripts, use /etc/rc.local - See also !grub and [00:30] !dualboot - Making a boot floppy: https://help.ubuntu.com/community/GrubHowto/BootFloppy - Also see [00:30] sw: I am only a bot, please don't think I'm intelligent :) [00:30] https://help.ubuntu.com/community/SmartBootManagerHowto [00:41] HEYO! [00:41] ok so my host says i can change kernals all i want! [00:41] so I has to do that. [01:02] roy [01:02] RoyK: [01:27] does anyone have any good thoughts on what kernel One should install? [01:46] LargePrime: linux [01:48] remote: Linux??? not a windows kernal on my ubuntu server? [01:48] are you sure? [01:48] [01:48] how would you feel if I said "yes"? [01:48] relived [01:51] remote: have you looked at http://grsecurity.net [01:55] remote: also i see a linux-image-3.5.0-25-lowlatency kernel [01:55] and I not know if i want, o why? [01:55] and I not know if i want, or why? [01:58] heh, you unlikely want lowlatency kernel [01:58] it causes more kernel overhead processing [01:59] great [01:59] it's kind of like disks, doing many small operations, are a few larger ones [01:59] you can go one way or the other [02:00] so low latency i i want low latency and will pay with higher cpu load for net tasks [02:00] for net tasks? [02:00] for everything [02:01] oh [02:01] all the programs will run slower, cause it's optimized to switch more often, and do things *quicker* instead of waiting [02:01] ok so DO NOT WANT! [02:01] that means lots of context switching [02:01] and context switching is a huge overhead [02:02] ok, so latest and greatest? 3.5.0-26? or stick with an earlier? [02:03] who would use a low latency kernel? [02:03] patdk-lap: [02:03] time sensitive stuff [02:03] signal analysis, some audio people [02:03] audio people are always alittle nuts [02:03] REAL time sensitive stuff? This is just a minecraft server [02:04] lol [02:05] so any reason not to use .26? patdk-lap [02:05] and what about grsecurity kernels? [02:08] it's some extra security package [02:08] been years since I looked into it [02:08] but opted not to use it, just too painful for the gain it would give me [02:09] but you had ovh doing that, so would be nice to use, unless like you had, it gets in the way [02:11] patdk-lap: , ima be back to ask you more questions === snoonan is now known as neunon [05:50] Id python required by nmap? [05:50] Is python required by nmap? [05:52] one: Yes, and why so hung up on not installing Python? Setting up some embedded system? [05:52] andol: eventually but trying to get a clean build environment first [05:53] I need nmap to check the lines and get an idea of what im downloading [05:54] I guess I could try and rewrite nmap to use perl [05:54] What version of nmap doesnt require python? [05:54] Someone keeps changing my internet connection [05:55] So I need nmap to see whats going on [06:00] you're going to have a really hard time trying to build ubuntu without python [06:00] and why is perl somehow ok but python isn't? [06:04] I only see .cc and .h files in the nmap source [06:04] Where is the python? [07:12] Question, when I first create the server and it asks for the hostname e.g. server.example.com can I use that name or should that only be used to name the server? [08:44] Is there a version of nmap without python? [08:47] If I download a package or a source is there a way to automatically download the deps of the package and source? [08:48] aldo talk to me [08:51] andol: are you there? [08:52] If I download a package or a source is there a way to automatically download the deps of the package and source? [08:55] one: apt-get source packagename [09:01] histo: but that doesnt also get the dependencies of that package [09:01] one: you want source for nmap and source for all the dependancies [09:02] one: Are you sure python isn't jsut a recomended package? [09:02] histo: let me check again [09:03] histo: First please help me with this I want to download the packages for build-essential so after I get the sources I can build them. [09:03] so I try apt-get download build-essential and it only downloads the metapackage [09:03] one: Is there a reason you want to build all of this from source? [09:03] of course [09:03] And that is? [09:04] I am going to make changes for one and that is sufficient reason. [09:04] Reasons matter not anyway. [09:04] It is the causes that matter. And the effects. [09:04] Okay but yet you don't understand how to install packages or download their source code? [09:05] sudo apt-get install build-essential [09:05] apt-get source nmap [09:05] histo: yes it resolves dependencies automatically when installing [09:05] I want to download only [09:05] Download only what? [09:05] the packages needed to build the sources I will download [09:06] so either or apt-get download and apt-get source I want to also get the dependencies [09:07] one: apt-get buil-dep packagename [09:07] * histo has a feeling this is going to end badly [09:10] histo: I dont want to build them at the moment I want to download them [09:10] whats the point of building them if there are no changes made? [09:10] one: that will download the dependancies to build "them" [09:11] the sources? [09:11] one: You are really confusing. Perhaps you can try again and state what you want to do concisely in one line. [09:11] ok [09:11] one: again sources for what? [09:12] I want to download ONLY the packages for build-essential (so I can build the latter) and I also want to download a source pagage INCLUDING sources for dependencies. [09:13] one: build-essential is a meta package you realize that right? [09:14] Right so how do i tell both commands to alse get DEPENDENCIES [09:15] one: So you want source code for all the packages in build-essentail??? or do you just want to download the packages only and not install them? [09:16] Both. [09:17] one: what are you going to recompile gcc with btw? [09:18] Thats not what I am going to do at the moment. [09:18] Then what do you need the source for it for? [09:18] You have an XY problem [09:18] But if you would answer the question I can get sources for other packages the answe ris the same either way. [09:19] one: http://www.perlmonks.org/?node_id=542341 [09:19] The question is how do I get apt-get source and apt-get download to also get dependencies. [09:19] SIMPEL [09:19] Dont worry about why [09:19] Let me do the thinking here. [09:20] You just help me issue the commands. [09:20] OK [09:21] The only way I can think of doing the insane thing you want to do is to install the package an get the debs from the /var/cache/apt/archives/ [09:21] then you could apt-get source packagename and get all the source also [09:22] Since you don't want to apt-get build-dep packagename [09:22] So I have to remake a list for apt-get source? [09:22] let me try build dep [09:22] one: I guess but again sounds like an XY problem to me [09:23] What do you mean XY problem I am sick of flawed logic being thrown at me as some sort of rules to ask questions by. [09:23] one: apt-get build-deps [09:23] build-dep, that is. [09:23] ...will download the build dependencies of a package. [09:24] one: You want to do X, and you think Y is the best way of doing so. Instead of asking about X, you ask about Y. [09:24] one: or... You're trying to do X, and you thought of solution Y. So you're asking about solution Y, without even mentioning X. The problem is, there might be a better solution, but we can't know that unless you describe what X is. [09:25] I don't think like most people. [09:25] Ok I dont think linear. [09:25] one: And that's the problem [09:25] Why does everything I ask turn into a logic argument.\ [09:26] histo: it is not a problem the problem is that folks dont want to help unless they think they can approve of an outcome that they are unable to see [09:26] one: I'm not arguing only trying to help. I've explained numerous ways to do what you want although I don't agree with it and don't believe you understand. [09:26] hold on let me look at build dep [09:26] its trying to install packages i dont want them installed i just want to download binaries and source [09:28] one: then you would apt-get download packagename To download the binary and apt-get source packagename to download the soruce [09:29] one: build-dep satisfies the build dependancies for a particular package [09:30] !source | one [09:31] one: You can easily fetch a package's source with apt-get. See: http://www.debian.org/doc/manuals/apt-howto/ch-sourcehandling.en.html [09:31] !build | one [09:31] one: Compiling software from source? Read the tips at https://help.ubuntu.com/community/CompilingSoftware (But remember to search for pre-built !packages first) [09:31] histo: ok I see but in binary form [09:31] one: you would have to extract it from the debs [09:31] I want the deps in source form [09:32] one: then apt-get source packagename for them [09:32] ok so I have to make my own list theres no way to have the command resolve the dependencies [09:32] right, that is the answer to my question [09:34] There is no way to do what you want witht he apt-get source command it's not used that way [09:35] oh thanks for finally answering [09:36] appreciate the help histo if I may give some feedback next time just try to answer the questions asked [09:36] one: I did [09:38] histo: yeah 42 minutes later [09:39] one: drop the attitude, you're banned from #ubuntu for this attitude - be nice here [09:40] im just giing feedback [09:40] one: yeah, so stop he's trying to help you [09:40] i dont buy that [09:41] i think its trolling [09:41] i think he is smarter than that [09:41] and i also think he knows i am smarter than that === Ursinha-afk is now known as Ursinha [11:17] hello, how much space will take to install ubuntu server with php and mysql server? [11:17] I have old comp with 40 GB disc and I don't know how much will be to use after instalation [11:20] Hasoth: couple of gig [11:20] can probably get it down to around 800mb [11:22] ikonia: thanks [11:23] will that Ubuntu Server 12.04.2 LTS work on old machine ? [11:25] Hasoth: read the minimum spec and see if your hardware meets it [11:39] is that very difficult to install php and mysql server on ubuntu server? [11:40] have you considered reading any of the documentation ? [11:40] Hasoth: but in short, "no" [11:40] ok, just in short, I will read everything today later ;) [11:40] I just use sometimes ubuntu - normal not server [11:40] and it's very easy to do anything there [11:40] the desktop is the same as the server [11:41] ahh, I thought I will need to do anything with command lines [11:41] everything not anything ;) [11:41] Hasoth: well that is the default setup, [11:41] but the command line is the same as the ubuntu desktop command line [11:46] I bet there's a lot of tutorials for ubuntu server [11:46] I just hope I won't get any anusual problem ;) [11:47] in other case I will come here and ask specific question [11:47] thanks for help ;) [11:52] Hasoth: https://help.ubuntu.com - there is an excellent server section [11:52] Hasoth: please be aware you can also use a desktop install as an excellent server [12:13] ikonia: I thought server version is like light version of system, without not needed things + with installed some stuff for server [12:14] Hasoth: it's not got things like a desktop installed by default [12:14] and I will use that server just for showing sites for clients [12:15] good, that would be waste of space [12:16] is that possible to use free domain on my own server? [12:19] or rather, is that anything like free domain without server that gives free domain? [12:20] because they mostly want track-back link or something [12:26] I probably need to make domain controller or server [12:26] guys I got newly installed ubuntu server on virtual machine where i deployed apache and my application. I am not familiar with ubuntu server at all , is there something which I should do in order to procted it or something? [12:44] I found this http://askubuntu.com/questions/151440/important-things-to-do-after-installing-ubuntu-server [15:21] !apache [15:21] LAMP is an acronym for Linux-Apache-MySQL-PHP. However, the term is often used for setups using alternative but different software, such as Perl or Python instead of PHP, and Postgres instead of MySQL. For help with setting up LAMP on Ubuntu, see https://help.ubuntu.com/community/ApacheMySQLPHP - See also the Server CD installation process. [16:01] hi! I'm trying to install a package but another package is erroring out in it's --configure.. there should be no dependency between the two, so I don't know why this would happen. any insights into how I can just install salt-minion and work around puppet sucking? http://dpaste.de/xOZy7/ [16:02] dpkg won't work until errors are resolved [16:02] so you can't install any packages until that's fixed [16:02] what part of dpkg is broken? [16:02] not dpkg, the package that's generating the errors [16:03] how should I find out more information so I can fix the problem with puppet? [16:03] well, it looks like it won't start [16:04] so check syslog or messages to see why [16:04] if you don't care about puppet and just want to remove/manually fix later, you can manually set it to installed [16:04] I like that last option as a fallback [16:05] how would I tell dpkg that? [16:05] Edit /var/lib/dpkg/status and search for “Package: puppetmaster″ [16:05] Replace “half-configured” with “installed” [16:05] ugh [16:05] another thing is I could drop the version back to known working and lock it somehow? [16:05] be careful because trashing this file will break everything [16:05] Editing the dpkg status file manually is REALLY dubious [16:06] Why can't you just remove the problem package instead? [16:06] maxb: touching apt in anyway is often dubios [16:06] maxb: I would prefer to drop back a versoin at this point [16:06] Hardly [16:06] you can pin/hold a package [16:06] I'm just speaking from my experience, not trying to argue reality for others [16:06] did it break after an upgrade? [16:07] Theres a vast difference between using the package manager's published interfaces and fiddling with its internal database manually [16:07] qman__: likely, I did not do an upgrade, but I think another admin did, and was not looking at puppet working [16:07] Do you actually want a running puppetmaster on this system? [16:07] maxb: agreed [16:07] maxb: yes, I do want puppet running [16:08] as I said, I would prefer to drop back to 3.0, which was known working for my setup [16:08] and i can then debug what is breaking elsewhere [16:08] but I need salt on there regardless.. so I'm mostly just trying to get puppet out of my way [16:08] Do you run the built in ruby server version of the puppetmaster or do you use passenger/apache? [16:09] Because, somewhat counterintuitively, if you use the passenger/apache form, you *don't* want the puppetmaster package installed [16:09] builtin, I'm hardly using puppet anymore, I'm in the process of converting the last vestigages >>> salt stack, and I have never been happier :) [16:10] i need to have puppet running to ensure I'm covered if any of the last few bits break while I have not got them converted to salt [16:11] I'm not 100% sure that this will work, but the simplest option might be to disable the puppetmaster init script by chmod -x [16:11] I *think* that will allow the package configuration to complete [16:11] So, can you try 'chmod -x /etc/init.d/puppetmaster; dpkg --configure -a' [16:12] ok, that would get me through a bit. how would I ask apt to drop puppet back a version? [16:12] Of course, if it's important to you that the puppetmaster run, you should probably work out why it is failing to start [16:13] that's the third step [16:13] Dropping back a version largelly depends on whether the puppetlabs repositories still publish the old version, or if you're going to have to locate the packages manually [16:13] hrm, ok [16:13] You could try 'apt-cache policy puppet' to see a list of versions that apt knows about [16:13] if you are not using salt stack, I _highly_ recommend checking it out [16:13] If the one you want isn't in the apt indexes any more [16:14] yea, I might just need to fix the broken puppet definition :) [16:14] * If the one you want isn't in the apt indexes any more, then you will need to find the .deb files manually [16:14] I will have a look at salt. I currently use puppet, but I'm not all that fond of it [16:15] working with salt breathes some life into sys admin again [16:15] Ooh, salt is Python? [16:15] * maxb would rather like an escape hatch from RUby [16:15] it's easy to work with, super fast, built on zmq, and _just friggin works_ [16:16] yea, there's ancel too, also in python [16:16] it's really easy to learn [16:17] much simpler/shorter learning curve than puppet [16:17] and in the end, you get a clean description of what your infrastructure looks like, way more so than I could in 2 years with puppet [16:18] apt tells me there is a 3.0.2-1puppetlabs1 package? but how do you reference this correctly with apt? tr [16:19] maxb: checkout libvirt integration here: http://docs.saltstack.com/topics/releases/0.14.0.html :D [16:21] luminous: Do a dpkg -l '*puppet*' and figure out all of the puppet related package names ( e.g. puppet, puppetmaster, maybe a puppet-common IIRC? ) [16:21] Then apt-get install {puppet,puppetmaster,puppet-common}=3.0.2-1puppetlabs1 [16:21] Where the {} is bash syntax [16:22] I see the name=version in doc [16:22] oh yea, I did not think of the other pkg [16:23] thanks so much maxb :) [16:23] you have made my working with ubuntu a wee bit less painful :) [16:23] The packages are likely to become unhappy if you mix versions :-) [16:23] yea, totally understandable! [16:24] And thank you, it's promising to have an alternative to Puppet to look into next time I end up in a configuration management argument at work [16:25] :) [16:25] you may want to put it on a vbox image just to fiddle with a little.. you may find yourself using it right away :P [16:26] want to find that file you can't remember which server it is on? salt '*' cmd.run 'find / -type f -name "*that_file*"' [16:27] My instinct would be to just use pssh for that [16:28] sure, except that pssh isn't really the same framework that salt provides.. so you use one integrated tool to do a whole lot [16:30] I have networks defined as maps of vms with specific profiles, and then states to control evyerthing from services to users and the specifics of files.. and can then use salt-cloud to wave a wand and have an instance of that network created in the cloud for me, all according to spec.. [16:30] but yea, I know.. it's just something you experience as your life gets easier with salt, and then you don't want to use anything else. you even start to solve your admin problems differently [16:30] how do the systems connect? [16:31] is it possible to do this over the internet or no? [16:32] at my job we have a bunch of NASes that need to be more or less identically configured, and right now I have them wget a tar.gz to update a set of scripts [16:32] I suspect it might be a bit of a hard sell to move off Puppet at my place, unfortunately. We're still splitbrained between Debian and CentOS after a merger of two companies [17:09] guys I got newly installed ubuntu server on virtual machine where i deployed apache and my application. I am not familiar with ubuntu server at all , is there something which I should do in order to procted it or something? [17:09] I found this http://askubuntu.com/questions/151440/important-things-to-do-after-installing-ubuntu-server [17:17] Trudko_: just apply common sense and lock it down without locking your application [17:21] ikonia: I dont have enough experience with setting ubuntu server to have common sense about this [17:22] basically sort your file permissions out [17:36] Trudko_, ubuntu, like most linux distributions, is secure by default [17:36] if there are any gaping holes, it would be something you have done [17:36] what about the link i sent ? there are bunch of things which people set... [17:36] make sure you use good passwords, don't install more than you need, etc [17:37] those are all a matter of preference and are application-specific [17:37] for example, shared memory is only an issue if you allow users to execute arbitrary code on your server, i.e. user shell accounts [17:39] spoofing is only an issue if your system is directly connected to an untrusted network, and even then is not typically a huge issue, and hardening PHP reduces some application functionality [17:40] of course hardening PHP is kind of a misnomer, when you use PHP you accept the risk that PHP is generally troublesome in regard to security, and you have to make sure your application has good code [17:43] man, that harden php thing is so much less secure than the default [17:45] oh? [17:46] I will say, the disable_functions is nice, but with exec disabled, you won't be able to use wordpress/jombla/.... [17:47] register_globals=off has been default since 5.2? or was it 5.1 [17:47] expose_php, ok, doesn't matter [17:47] just googled the magic quotes [17:47] magic_quotes_gpc, this is just evil, I would never use it, it causes all kinds of \'s all over your stuff and sql columns [17:48] if your program is made for php 3.x, sure use it [17:48] but seriously [17:48] it's an attempt at, we know php programmers won't validate user input, so this could help [17:49] yeah [17:49] but now you don't know what the real user input was, was that \ them, or php [17:49] had a database with that all over it :) [17:49] between that, and magic_sql_quots, and stuff [17:49] and years of server upgrades and changes [17:49] there are upto 8 \'s in sql [17:50] had to scrub the database [17:51] as far as, disable_functions, the php.ini I installed like 2 weeks ago, had like 20+ things listed on it [17:51] qman__: well I deployed simple ruby on rails application where people just add some data - sport data is for sport league so it should be safe. Passwords are good(randomly generated) [17:55] Trudko_, with the exception of the php magic quotes of course, it's not to say that doing those things is a bad idea, but that you have to weigh whether it will be beneficial to you in your application [17:55] it will break some applications [17:56] fail2ban is generally a good idea but if you make a lot of SSH connections you need to tone it down or you'll have problems [17:56] qman__: well personally i happy that application is working [17:56] i just want to make sure that client wont call that something f*ked up with server it self [17:58] Trudko_, if this is going to be a set and forget server, I recommend using fail2ban [17:58] the other stuff is really not necessary === bastidra1or is now known as bastidrazor [21:45] can anyone point me to a netinstall.img that I can dd to a usb stick for installing ubuntu-server? cannot find it on webpage [21:54] useless-eater: https://help.ubuntu.com/community/Installation/MinimalCD [21:59] RoyK: thanks [22:03] hi guys any application that will email for any downtime for server..? when the serer is unreachable [22:03] !icinga [22:04] RoyK: whats that..? [22:05] it's a nagios fork [22:05] works well [22:05] !nagios [22:10] RoyK: how install it should it be on the same server or different [22:10] the server can't know if it's dead [22:11] RoyK: so it should be on seaparate [22:11] must be [22:12] if you have an alarm set to alert you if you're dead, how can you press the alarm button? [22:21] hey, sorry if this is off topic, i couldn't find a better place to ask about dnsmasq :) anyone have experience using ptr-records in dnsmasq? specific names works, but i'm looking for a "wildcard" solution, is it impossible in dnsmasq? [22:24] not sure about dnsmasq - should work with bind [22:26] RoyK: ok, that's fine, i can use bind. something like 1 IN PTR one.example.com => *.*.*.1 -> one.example.com? [22:28] aandy: that'll be spoofing a bit too much [22:31] that was just an example. what i'm looking for is only LAN addresses - 192.168.0.1/24 for instance [22:32] just register those rfc1918 addresses [22:33] right, sorry i wasn't clear. i meant if the syntax was right ;) as in, i specify the surfix, so 0.168.192.in-addr.arp. IN PTR lan.company. would match 192.168.0.1-192.168.0.255 [22:34] try #bind [22:34] I don't now [22:34] know [22:34] ah, thanks === gondoi_ is now known as gondoi === VD is now known as Guest41408 === Nolar2_ is now known as Nolar2 === irv_ is now known as irv === nonotza_ is now known as nonotza === WaVeR` is now known as WaVeR === F3Speech_ is now known as F3Speech === _croop is now known as croop [23:26] hello everyone. does anyone know how to start upstart session jobs without login. the documentation says to run init --user, but from where and how? thanks === Myrtti_ is now known as Myrtti === SpamapS_ is now known as SpamapS === cs278 is now known as Guest20395 === Laogeodritt| is now known as Laogeodritt [23:47] for a given process id, how do i find its memory/cpu consumption (for it and its child processes)? [23:47] I'd prefer to keep an eye on its network usage as well [23:52] hi [23:52] how do I stop this Enter passphrase for key '/home/foo/id_rsa' from showing up when I try to ssh? === bradm_ is now known as bradm === ikonia_ is now known as ikonia