=== E_T_ is now known as E_T
jamespageadam_g, roaksoax: https://code.launchpad.net/~james-page/charms/precise/hacluster/v0-revert/+merge/161563 when you get a chance10:12
eutheriahi i am trying to configure a vlan interface on 12.04, i think i haven't got my ubuntu config right as my pfsense router can be seen on the switch on the .1q tagged vlan10:54
eutheriahowever my eth0.109 i assume .number is the vlan tag10:54
patdk-lapnormally, yes10:55
eutheriai've made sure the port on the switch is on that vlan10:55
sonofzeusHey there11:34
sonofzeusHow do you find httpd.conf ?11:34
greppysonofzeus: on an ubuntu server?  it should be in /etc/apache211:36
sonofzeusI installed apache2 on a ubuntu desktop edition11:36
sonofzeusforgot to mention that11:36
greppysonofzeus: should be in the same place.11:38
sonofzeusI've conf.d , mods-available modsenabled sitesavailable apache2.conf envvars magic ports.conf?11:38
greppyah, most of what was in httpd.conf is now in conf.d, mods-available and sites-available.11:38
greppymodular configuration makes things a little easier, most of the time :)11:39
sonofzeusOpen up httpd.conf (in your Apache/conf directory), find DocumentRoot and set it to be your the directory where you want your web site root.11:44
sonofzeussomeone explain waht this means pls?11:44
=== Jikan is now known as Jikai
=== Jikai is now known as Jikan
AisonI upgraded one of my test-servers to raring12:08
Aisonnow after reboot, I see grub and after choosing ubuntu, everything is black12:09
AisonI also wonder, why I have to choose something in the grub boot menu. In past, this menu was automatically closed after a few seconds12:09
jamespageyolanda, that bacula/mysql bug is a known issue; its because bacula only recommends mysql, not depends12:31
jamespageso the configuration order is not guaranteed to be mysql->bacula12:31
yolandamm, so it should be a confirmed bug?12:31
jamespageusers need to install mysql first, and then bacula12:31
jamespageyolanda, dupe it against the existing bug report12:31
jamespageyolanda, bug 32109112:32
uvirtbotLaunchpad bug 321091 in bacula "Bacula fails to install correctly if mysql wasn't installed before" [Medium,Confirmed] https://launchpad.net/bugs/32109112:32
jamespage(yes that old)12:32
Davieyjamespage: crikey, i thought that was fixed long ago12:34
jamespagethe semantics of the relationship means there is really no good way to fix it12:35
jamespagesame applies on upgrades - if you get bacula and mysql in the same upgrade transaction == #bang12:35
yolandabut why mysql cannot be forced in that case?12:36
jamespagebug 102106712:37
uvirtbotLaunchpad bug 1021067 in bacula "bacula-director-mysql *->5.2.5-0ubuntu6.1 fails to upgrade if installed alongside mysql-server and upgraded in the same transaction" [Medium,Triaged] https://launchpad.net/bugs/102106712:37
jamespageyolanda, the only way to make that happen is the make it a Depends12:37
jamespagewhich is not good as it does not allow you to split bacula and mysql onto different machines12:37
jamespagefwiw we only have this issue in Ubuntu; in Debian the default is sqllite12:38
jamespagenot mysql12:38
zulbacula is fun isnt it?12:40
jamespageUrsinha-afk, hey - I raised a merge proposal against ubuntu-reports for a bug in the cloud-archive reporting - any chance you could take a look?12:40
jamespagezul, always :-)12:40
* jamespage ponders whether we should revert back to sqlite as default12:41
* rbasak thinks aloud12:43
rbasakHow about moving the database initialisation to a package like bacula-director-mysql-init? bacula-director-mysql would Recommend bacula-director-mysql-init. bacula-director-mysql-init would Depend on mysql.12:43
rbasakThose wanting MySQL on a separate machine would break that recommendation.12:44
rbasakThis assumes that those wanting MySQL on a separate machine will need to set up the database themselves. Or they could just install bacula-director-mysql-init but only on the MySQL machine12:45
rbasakWhat have I missed?12:45
rbasakBut then again, perhaps it's no longer worth differing from Debian here.12:51
jamespagerbasak, worthy considerations12:55
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/python-keystoneclient/havana-fix/+merge/16159912:59
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/cinder/cinder-suacy-ftbfs/+merge/16160313:20
ckuerstejamespage: i'm preparing a security patch for tomcat6 and want to test it. jdstrand said you might have had a look on the tomcat6 testsuite before?13:37
=== wedgwood_away is now known as wedgwood
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/keystone/keystone-saucy-ftbfs/+merge/16160613:55
Davieyzul / jamespage / smoser: fancy raisng a BP suggesion for mysql wsrep patchset inclusion ?13:57
zulDaviey:  like percona?13:58
Davieyzul: The patches that expose plugin support :), http://www.codership.com/products/mysql-write-set-replication-project13:58
zulDaviey:  sure13:58
jamespageDaviey, hmm14:03
Davieyjamespage: ?14:05
jamespageDaviey, zul: I'm against carrying the patches in mysql itself; I think it will make life impossible for the security team14:06
jamespagewe should go via percona or mariadb with fully upstream integrated galera support14:07
Davieyjamespage: right, hence the reason to disucss it :)14:07
jamespageDaviey, yep!14:07
jamespageckuerste, hey!  sorry I missed your ping the other day - was taking a bit of time out14:08
Davieyjamespage: It might be that we can provide a supportable method in core. I don't know.14:08
jamespageckuerste, I've not looked at the tomcat6 testsuite but I did enable the tomcat7 one during quantal14:08
jacobwHi, I'm trying to preseed away everything except hostname, or set hostname as a boot paramter14:09
jamespageckuerste, what issues are you running into?14:10
eodchopI have a new 12.04 server install. When I do the initial build, I install the mailutils meta package. Ever since 13.04 came out last week, I am unable to install mailutils any more. It has a dependency on libmysqlclient, which in turn drags in mysql-common that is incompatible with mailutils and it blows up.14:11
jacobwI'm finding that the hostname is set to ubuntu if I don't set anything in the preseed or DNS, regardless of what I set as hostname= or netcfg/hosname= when I don't set anything in DNS14:12
jacobwhostname is an alias to netcfg/hostname-unavailable, which is what is set if there's no hostname from DHCP14:13
jamespagezul: you have cruft in your keystone MP14:14
zuljamespage:  which cruft?14:14
jamespagezul: test_keystoneclient.py.orig?14:15
zuljamespage: grr...ill clean that up14:15
jamespagezul: you also dropped the dep headers on that patch - was that intentional14:15
ckuerstejamespage, no problem. i enabled the testsuite like in tomcat7 but get an error about tomcat-dbcp.jar and jasper-jdt.jar can not be found to copy.14:15
jamespageckuerste, hmm14:16
ckuerstejamespage, i was not sure if i have to install them somehow. did you had anything like that in tomcat7?14:17
jamespageckuerste, not that I can see14:17
jamespagetomcat-dbcp.jar is not shipped in the Debian/Ubuntu packages; its a patched version of commons-dbcp that gets munged by tomcat upstream14:18
jamespageyou should drop in commons-dbcp in its stead - maybe link it in or suchlike14:18
jamespagejdt - hmm14:19
ckuerstehmm, okay14:19
jamespageckuerste,     -Djdt.jar=/usr/share/java/ecj.jar ?14:19
jamespagethe debian/rules in tomcat7 appears to override the default14:19
jamespage${jdt.jar} might be a clue14:19
ckuersteokay, will have a look14:20
jamespageckuerste, thanks for picking this up btw14:21
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/glance/glance-sauce-ftbfs/+merge/16161314:37
=== Ursinha-afk is now known as Ursinha
Ursinhajamespage, sure (sorry taking long to reply, I'm in Oakland in the client sprint)15:33
Ursinhajamespage, this one? https://code.launchpad.net/~james-page/ubuntu-reports/ca-cloud-fix/+merge/16138215:36
jamespageUrsinha, yes - although I note adam_g has commented on it15:44
zuljamespage/yolanda: https://code.launchpad.net/~zulcss/quantum/quantum-saucy-fix/+merge/16163015:46
zuladam_g:  when you get in can you push your python-glanceclient change into the saucy branch please15:54
hallynsarnold: there is no ability to block ioctls with apparmor right?16:11
sarnoldhallyn: not much; you can prevent opening the device file in the first place, and if the ioctl requires a capability you can also deny that, but not on a fine-grained level16:13
hallynsarnold: thanks16:21
=== deegee is now known as drussell
smoserjamespage, around?16:34
jamespagesmoser, yes16:35
smoseroh carp16:35
smoseri was going to ask you to review a change16:35
smoserbut i pushed it16:35
smoseri'll revert that and over-push16:35
jamespage'a change' ?16:35
arosalesany channel operators around to update the motd?16:48
arosalesspecifically the bug link should be  Bugs: http://reqorts.qa.ubuntu.com/reports/rls-mgr/rls-r-tracking-bug-tasks.html#server16:49
SpamapSwow, this channel's topic is.. ridiculously long16:49
parallel21Trying to reinstall the grub bootloader to /dev/sda from an ubuntu-server disc in recovery mode. I've reinstalled grub… but grub still finds the same boot files in /boot16:54
parallel21How to I rebuild the /boot folder16:54
parallel21Doh… grub-install does not rebuild grub.cfg. update-grub does though16:58
parallel21I think I solved the problem16:58
=== matsubara is now known as matsubara-lunch
rbasakroaksoax: may I take the facter merge from you to work on tomorrow please? I just want to merge 1.6.10-1 so that I can SRU bug 1173265 and thus bug 1170325.17:45
uvirtbotLaunchpad bug 1173265 in facter "facter fails to run from rebuilt source package" [High,Triaged] https://launchpad.net/bugs/117326517:45
uvirtbotLaunchpad bug 1170325 in facter "Facter 1.6.X not considering Qemu/KVM virtual type" [Undecided,New] https://launchpad.net/bugs/117032517:45
rbasakfacter 2.0.0~rc3-1 and puppet 3.1.1-1 are in experimental and can follow later17:45
roaksoaxrbasak: sure :)17:46
LargePrimeis there a toll for me to get an email when server load goes over a certian point?17:55
RoyKLargePrime: I've used icinga/nagios for that17:57
RoyKyou can probably script it easily, though, if it's only the load that matters17:58
LargePrimeima scripting noob18:01
LargePrimebut i have done coding18:01
LargePrimeperhaps i should se18:01
LargePrimehow do i get the server load?18:01
sarnoldLargePrime: uptime(1) or /proc/loadavg18:05
LargePrimecat /proc/loadavg seems to have a list.  uptime seems to give a diff set of numbers.  uptime(1)  is not recognized sarnold18:15
sarnoldLargePrime: uptime(1) just shows which section of the manpages contains the documentation... in this case, a user command in section 118:15
LargePrimeso if i was not a noob i would have known to do man uptime(1)18:19
sarnoldLargePrime: well, it'd be 'man 1 uptime', but in this case the '1' probably wouldn't be necessary. Including the manpage section is an old old habit that I've given up on trying to break... :)18:21
=== WaVeR` is now known as WaVeR
LargePrimeI am still having a problem giving my web users access to thier files, and super users access to all the web files18:22
LargePrimehow can thier not be ommong simple soluition for this?18:22
LargePrimea common*18:23
LargePrimeI am thinking to make a SiteOwnerSiteName group owner of each virtual dir18:24
=== matsubara-lunch is now known as matsubara
LargePrimeand a SiteOwnerSuperthat has all the groups in it18:24
robawtis there a way to specify the basic linux server group of packages in a debconf answer file/18:28
zerickHi everybody, what is the latest recommended version of Ubuntu to work with corosync, pacemaker, drbd or heartbeat?18:50
sudobashseriously, what is the point of taking protocols = imap pop3 in the dovecot config and splitting it into two files18:52
jcastrosmoser: if you have a second to explain that cloud images metadata stream thing ...19:06
smoserfor some time we've had data describing aws image ids at http://cloud-images.ubuntu.com/query19:09
smoserthe data there also described the .tar.gz files that could be downloaded.19:09
smoserthere were some issues with the format, though19:09
smosera.) it only described the .tar.gz files (not disk1.img files)19:10
smoserb.) it couldn't easily be extended to cover other clouds19:10
smoserc.) it wasn't easily  mirrorable19:10
smoser   and wasn't signed , relying on secure transport (https) for security.  but that meant that if you mirrored the data, then the trust couldn't "pass through".19:11
smoserd.) just not that nice of a format.19:11
smosernow we have a much nicer set of data describing both image-ids on public clouds and image downloads.19:12
smoseryou can see it by browsing data at http://cloud-images.ubuntu.com/releases/streams/v1/19:12
jcastrook so basically, a way to programatically see what's published on cloud-images?19:13
smoserbecause of the gpg signatures, you can mirror that data and trust of the cloud-image signer is still present (just like apt does that).19:13
smoserso we have that data there.19:13
jcastrook so basically, a way to programatically and secure way to see what's published on cloud-images?19:13
smoserwhich allows you to find images on public clouds (and we'll have additional public clouds data there)19:13
jcastrowhoops, butchered that sentence19:13
smoserand then there is a sample client (that is still being worked on) in 'simplestreams' package.19:14
gartralhey all, does Ubuntu Server have a set-up ssh for truly headless machines? or will I need to find another way to answer the questions at install time?19:14
jcastrook so this would make it easier for people to build tools to search the data, as opposed to say, that AMI search thing we built?19:14
smoserthat client and http://bazaar.launchpad.net/~smoser/simplestreams/example-sync/view/head:/README19:14
smoserallows you to sync from cloud-image to your local cloud19:14
smoserwell, the ami search thing we built could be re-built on top of this data.19:15
smoserand http://ubuntufinder.com/ is using (i believe) the newly formated data.19:15
=== smb` is now known as smb
jcastrogartral: you can probably preseed that during installation19:17
gartraljcastro: doesn't that preeseed configuration need to be specified at boot? or can that be automatically assumed? I'm dealing with a machine that literally has 1 usb port and 3 cat-5 ports. guess what's being put in the USB port? :P19:21
jcastrono netboot?19:22
sarnoldusb hub?19:23
gartraljcastro: not easily, what's going to happen with this machine is I'm going to put the hardware together, pop the thumbdrive into the usb port, then ship it to it's new home where some "technition" (I.E. some guy who knows about as much about Linux as a Penguin does about a Banana.) plugs it in, then about 30 minutes later I wan't to connect to it and set it up proper.19:25
uvirtbotgartral: Error: "wan't^want" is not a valid command.19:26
smosergartral, you can put a preseed configuration on the install media19:26
gartralsmoser: and that will automatically be read and run?19:27
gartralI've never used a preseed.txt before19:27
Questif i have a fiber optic but I have two separate ip pools of 8 ips each (the fiber optic wire will be still one), that is 2 separate threads (thats what i have been informed). Then each thread will be having its separate bandwidth limit. is it a fact that both threads will be unaffected by each other in terms of bandwidth and traffic? That is its almost same like I am having two fiber connections?19:31
gartralsmoser: I see a segment called "Network Console". can I preseed everything up to that point or must I fill out everything after?19:32
smosergartral, you can have completely unattended installation.19:37
genii-aroundThe only thing I don't like about preseed is the sparsity of documentation19:38
=== Ursinha is now known as Ursinha-afk
gartralsmoser: while I appreciate that, I much perfer actually answering the questions myself x.x19:48
smoseri'm confused.19:49
smoseri thought you said you wanted a penguin to be able to do it.19:49
LargePrimeI am still having a problem giving my web users access to their files, and super users access to all the web files19:50
LargePrimehow can there not be common simple solution for this?19:50
dpb1LargePrime: can you explain a bit more?19:52
LargePrimeand then i dc19:56
LargePrimedid i miss anything?19:56
LargePrimeso to continue i need www-data to server sites, useres to have mod rights, and superuser to mod all rights19:57
LargePrimeit that usually how it is done?19:57
LargePrimeowner will be the web authers19:57
=== G4MBY is now known as PaulW2U
LargePrimesuperusers will be members of all owners grups?19:58
LargePrimethink that will work?20:00
dpb1LargePrime: sorry, I'm not following.  What are server sites?  and what are "mod rights".  superuser (root) can do anything he wants whenever, so whatever you are asking there should work.20:01
LargePrimeplease ping me if you have feedback20:01
LargePrimei have several sites i host.  like mydomain.com and yourdomain.com20:02
LargePrimeI want you to have rights to yourdomain.com20:02
LargePrimeI want my web guy to have mydomain.com20:02
LargePrimeand i want my server admin to have rights to both20:03
dpb1LargePrime: ok, and by "rights", you mean be able to modify/delete a set of files on the filesystem?20:03
LargePrimeyes.  sorry20:03
LargePrimeand this is all in /var/www/  so /var/www/yourdomian and /var/www/mydomian20:04
LargePrimeand www-data needs to be the group for all the files i think?20:05
adam_gsmoser, does 12.04's cloud-init support any of those fancy merging features?20:05
dpb1LargePrime: who is the owner of the files right now?  root?20:06
smoseradam_g, no.20:06
smoserand 13.04 doesn't really... in any way that i want to advertise20:06
LargePrimedpb1: yes20:06
dpb1LargePrime: simply put, I would create one group per "site" you are hosting.  Add to that group www-data, and whoever you want to admin it.  Then, chown -R root:group /var/www/site20:07
LargePrimeif i add people to www-data, do they get all thoes rights?20:08
LargePrimeyes i think that is good20:08
dpb1LargePrime: users are the ones who permissions are applied to, not groups.  Groups just... "broadcast" the permissions to multiple people.  www-data is a group, but it's also a user.  The user having the rights is what is important.20:08
LargePrimewait no20:08
LargePrimesome of the www-data files cannot be written to by www-data20:09
LargePrimecause it seems web server can be compromised20:09
LargePrimethey can only be read20:09
LargePrimeso the web admins can mod thoes files20:10
dpb1LargePrime: doing a chown will not impact the read/write/execute bits.20:10
LargePrimebut the web admins SHOULD be able o mod thoes files20:10
LargePrimeto* dpb120:11
dpb1LargePrime: ok, gotcha20:12
LargePrimeso my idea is to replace root ownership with web site owners20:15
=== Ursinha-afk is now known as Ursinha
LargePrimebut this cant be that uncommon?  so what do people usually do?20:16
dpb1LargePrime: so then, you have three options.  1) change the owner of the file to the specific admin you are interested in granting permission. (he will then be able to do whatever he wants with that file, regardless of permission).  2) grant limited sudo access to edit these files.  3) switch to ACLs which will grant you the flexibility of assigning multiple owners.20:16
LargePrimehow do i limit sudo?20:23
markthomasLargePrime:  Ubuntu grants access to group sudo out of the box.  You can restrict access to sudo in general by controlling membership in that group.  You can implement finer-grained control over Sudo by editing /etc/sudoers with the visudo command.20:26
dpb1LargePrime: I've used something like this before: http://bencane.com/2012/02/sudoedit-securely-allow-users-to-edit-files/20:29
=== smb` is now known as smb
ScottKjamespage: DFSG #8 (License must not be specific to Debian) is also applied to Ubuntu in http://people.canonical.com/~cjwatson/ubuntu-policy/policy.html/ch-archive.html#s-ulp so your Ubuntu specific exception to link mongdb to openssl lands it in multiverse.21:18
=== jibel_ is now known as jibel
rollif ubuntu was installed with dhcp, and i want to switch to using a static ip, say, in ubuntu server (no gui), how would i go about this (permanent as well, not having to do it each time i boot up)23:08
xnoxjamespage: re: mongodb  vs boost::size. Since boost1.51 it returns unsigned int. So mongodb needs fixing. Not sure which version of mongodb your patch is.23:16
xnoxas it doesn't apply to current package =)23:16
bradmroll: https://help.ubuntu.com/12.04/serverguide/network-configuration.html#ip-addressing has an example of how to do static network config - basically you need to edit /etc/network/interfaces23:20
rollbradm: thanks, i'll take a look23:21
=== wedgwood is now known as wedgwood_away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!