/srv/irclogs.ubuntu.com/2013/05/13/#ubuntu-server.txt

=== iarp_ is now known as iarp
codepython777anyone who knows how to do bandwidth management per user basis when the network is near full utilization?01:35
=== EntropyWorks_ is now known as EntropyWorks
=== blackjack is now known as 14WAASOBI
=== Ursinha is now known as Ursinha-afk
=== jussi01 is now known as jussi
=== megha is now known as Guest401
=== smb` is now known as smb
=== HackeMate is now known as Guest66661
=== schmidtm__ is now known as schmidtm
=== huats_ is now known as huats
psivaahallyn: we get http://pastebin.ubuntu.com/5660610/ again in the lxc smoke tests for the last few days08:45
psivaahallyn: hmm possibly the queue is too big and its still waiting.08:50
=== andol_ is now known as andol
=== megha is now known as Guest37767
=== yofel_ is now known as yofel
=== gema_ is now known as gema
=== DasIch_ is now known as DasIch
=== Guest66661 is now known as hxm
=== gary_poster|away is now known as gary_poster
webwurst1hi! i'm using a Intel network-adapter (I350-T2) with sr-iov-capability. finally virtualized ubuntu-server work fine. but on windows an adapter lacking drivers is shown.. the Intel driver for the adapter aborts installation; maybe it is only for host-systems? do i need special windows-drivers for sr-iov adapters?12:30
hxmhi12:33
hxmi have configured a smtpd in a dedicated server, then i send email using sendmail and google and hotmail detect it as spam12:34
hxmi checked the reputation in trendmicro (as someone asked me) and is not blacklisted12:34
hxmindeed is not still being used12:34
hxmi think is a problem of my configuration related with the DNS txt records12:34
=== wedgwood_away is now known as wedgwood
=== Sprockt is now known as Sprocks
=== marlinc_ is now known as Marlinc
=== e_t__ is now known as e_t_
=== ppetraki_ is now known as ppetraki
KatafalkasHey. I am quite a noob and this is probably very noobish question, but what happens when you do not set a password for user. in /etc/shadow file there is "*" what does that mean ?13:20
=== mjeanson_ is now known as mjeanson
=== smoser` is now known as smoser
mardraumKatafalkas: yes, 'man shadow'13:25
gyre008is there a way to list changelog of INSTALLED package on Ubuntu ?13:28
gyre008I dont mean to list changes of the deb file available on the server..13:28
Katafalkasmardraum: danke <313:28
gyre008I thought apt-listchanges --apt <pkg_name> would do the job but boy was  wrong13:28
hallynpsivaa: ok, i've temporarily switched the lxc testsuite to branch the raring lxc bzr branch which works13:39
=== iarp_ is now known as iarp
psivaahallyn: ack13:41
=== iarp is now known as Guest45042
=== Madkiss_ is now known as Madkiss
=== lyda_ is now known as lyda
hXmhi again13:57
=== wizonesolutions is now known as 45PAACJIE
Davieybladernr`: hey, are you around?14:11
bladernr`Daviey: I am14:13
Davieybladernr`: hey, just found - https://blueprints.launchpad.net/cloud-testing/+spec/servercloud-1305-cloud-testing14:15
Davieybladernr`: can you mark me the approver please?14:16
bladernr`sure14:16
=== roasted_ is now known as roasted
Davieybladernr`: i think it also needs associating with the ubuntu project14:16
bladernr`Daviey: possibly, I need to check with ara on that but probably so14:17
=== gstudent2 is now known as germanstudent
=== gary_poster is now known as gary_poster|away
=== gary_poster|away is now known as gary_poster
Davieybladernr`: Well, it is a ubuntu deliverable.. no?14:29
bladernr`Daviey: ok, it's re-targeted14:31
bladernr`:)14:31
Davieybladernr`: thanks muchly14:33
=== _croop is now known as croop
=== wizonesolutions_ is now known as wizonesolutions
=== coffeedude_ is now known as coffeedude
=== baggar11_ is now known as baggar11
=== SpamapS_ is now known as SpamapS
bladernr`Daviey: did you schedule a UDS session for that testing BP?15:04
Davieybladernr`: not quite yet.. but that is the plan15:08
bladernr`we werent' going to schedule it initially (it's already on there for Wednesday)15:09
bladernr`mainly because a lot of the discussion for htat is internal and has already occurred15:09
Davieybladernr`: Ugh, surely some primary stakeholders are absent fro the discussion ?15:10
BAMbandaHas anyone had success in installing dropbox on ubuntu server?15:10
=== chuck_ is now known as zul
TheLordOfTimewho decides what's "default" or available through tasksel or on the ubuntu-server images?15:13
TheLordOfTimeor better question, who decides the "default" httpd software in the ubuntu images/repositories15:13
TheLordOfTime(i kinda assumed there *was* no 'default')15:14
DavieyTheLordOfTime: Apache is mostly the default, but the world is changing a bit with the advancement of juju charms.  There are a few factors which drive the decision process, but I feel the weight of this.  Wassup?15:16
TheLordOfTimeDaviey:  Launchpad Bug 1177919, comment #315:17
uvirtbot`Launchpad bug 1177919 in nginx "Merge nginx 1.4.1-1 (universe) from Debian unstable (main)" [Wishlist,Confirmed] https://launchpad.net/bugs/117791915:17
TheLordOfTimetrying to figure out how to answer them :/15:17
BAMbandaAnyone install dropbox successfully on ubuntu server?15:17
TheLordOfTimeDaviey:  key issue is they are like "Can we make nginx the default"15:17
TheLordOfTimemy concern: "It's not modular",  "It has no easy-configured "default" php integratoin"15:18
TheLordOfTimeand a thousand others15:18
TheLordOfTimenot to mention that nginx is kinda unofficially guardian'd by me :/15:18
TheLordOfTimeoh, and universe.15:18
TheLordOfTimeDaviey:  can you dump me a list of the factors which drive the decision of what is "default"15:19
DavieyTheLordOfTime: Are you free in 24hrs + 40 mins?15:19
TheLordOfTimeDaviey:  um...15:19
* TheLordOfTime checks15:19
TheLordOfTime24hrs + 40 minutes is... 12:00 here...15:20
DavieyTheLordOfTime: we have our team meeting then, and it would be great to discuss at the Open Discussion part near the end.15:20
TheLordOfTimeshould be, unless comcast does some stupid crap with the internet15:20
TheLordOfTimeDaviey:  server team meeting i assume?15:20
Davieyyeah15:20
TheLordOfTimei *should* be here15:20
TheLordOfTimecan't guarantee it though15:20
TheLordOfTimein the mean time i'd like to give this guy an answer15:20
TheLordOfTimewould a simple "It's not something we can decide on a whim, and will need further discussion" suffice?15:20
TheLordOfTime(or similar)15:21
tom_ilsinszkiHey! Some of my cron jobs won't execute (depending on the time settings for the command in crontab). For example if I have a command like this: * * * * * CMD or */5 * * * * CND, then CMD will execute, but if I have it set like this: 54 17 * * * CMD, then CMD will not execute. Can someone help how to run commands in cron whenever I want…15:21
DavieyTheLordOfTime: For 'main' the Ubuntu project tries to make opinionated decisions on what it considers to be the best of free software.  'Best' Is determined by a number of factors, including supportability (inc security) and popularity.  On occasions, we do support more than 1.15:22
TheLordOfTimeDaviey:  i'd say that the security aspect is the key factor here15:22
TheLordOfTimeDaviey:  there was a discussion at a prior UDS of moving nginx to main15:22
TheLordOfTimebut i don't think that went anywhere15:22
TheLordOfTimeso it's still "universe"15:22
DavieyTheLordOfTime: whilst personally I am an apache fan, i am well aware nginx is gaining more popularity - so we should consider it.15:22
TheLordOfTimeagreed, but the only "ubuntu" maintainer in an unofficial capacity is me, upstream doesn't care and their debian maintainers don't really care much15:23
* resno supports nginx15:23
DavieyTheLordOfTime: Well, kees (formally ubuntu security team tech lead) was hesitant to support it, but that was 2 years ago IIRC.  Things might have changed since then15:23
TheLordOfTimei'll try and make it to the meeting, no guarantees I'll remember to bring this up, so if you can jot down about this and then remind me if i'm not /away at the meeting that'd be awesome15:24
DavieyIt seems to have a better security vulnerability handling procedure than i did then15:24
TheLordOfTimeat least upstream.15:24
Davieyok, thanks TheLordOfTime15:24
TheLordOfTimeDaviey:  just as an fyi, two years ago i wasn't handling the nginx bugs :P15:24
TheLordOfTimeDaviey:  most of the nginx bugs end up fixed in debian, and when they don't i tend to go searching upstream :P15:25
* TheLordOfTime has become the unofficial adopted maintainer of nginx in ubuntu *shrugs*15:25
DavieyTheLordOfTime: That sounds super15:26
DavieyTheLordOfTime: If you ever need to look for sponsorship, or help - do give me a shout.15:26
TheLordOfTime... that reminds me, note to self, apply for nginx PPU rights.15:26
TheLordOfTimeDaviey:  I tend to go poking -motu for the sponsor uploads, usually don't get to getting things included unless Medium or higher because otherwise "I'll include it in a batch update"15:27
* TheLordOfTime yawns15:27
TheLordOfTime... bleh coffeetime15:27
Davieyo/15:27
TheLordOfTime... oh crap i just realized i forgot to include the bugfix for bug #1162177 in the nginx team's ppa for 1.4.115:28
uvirtbot`Launchpad bug 1162177 in nginx "nginx-light: invalid parameter "ipv6_only=on"" [High,Fix released] https://launchpad.net/bugs/116217715:28
TheLordOfTimewhoopsies.15:28
=== megha is now known as baba
=== markthomas1 is now known as markthomas
=== VD is now known as Guest63668
=== jiriki- is now known as jiriki
=== stgraber_ is now known as stgraber
zuladam_g:  i just approved the folsom sru branches for the CA btw17:03
zuladam_g:  https://code.launchpad.net/~zulcss/nova/havana-pbr/+merge/16357817:09
=== Madkiss_ is now known as Madkiss
shiki-Does anyone have experience with Wifi (WPA2) and Ubuntu Server?17:13
=== horjulf is now known as h0rjulf
=== bean__ is now known as bean
=== guampa_ is now known as guampa
=== marlinc_ is now known as Marlinc
=== markthomas is now known as 16SABGG4T
=== Psi-Jack is now known as Guest31682
=== blkperl_ is now known as blkperl
=== _croop is now known as croop
=== justizin_ is now known as justizin
=== io is now known as IdleOne
=== SpamapS_ is now known as SpamapS
=== cedr is now known as Guest55365
=== pelle2_ is now known as pelle2
=== gary_poster|away is now known as gary_poster
=== Guest31682 is now known as Psi-Jack
=== Guest55365 is now known as cedr
=== blair is now known as Guest16957
=== kirkland` is now known as kirkland
=== justizin_ is now known as justizin
=== iarp_ is now known as iarp
adam_g_zul, what do we do about the cinder 2012.2.4  update? re comments on https://code.launchpad.net/~gandelman-a/ubuntu/quantal/cinder/2012.2.4/+merge/16105719:17
zuladam_g_:  ill double check the SRU19:17
=== yofel_ is now known as yofel
zuladam_g_:  *sigh* we need to open up an SRU for that one19:17
zul(for paramiko)19:17
adam_g_zul, there already is one open19:18
adam_g_https://bugs.launchpad.net/cinder/+bug/115072019:18
uvirtbot`Launchpad bug 1150720 in cinder "[SRU] There is now a dependency on paramiko v1.8.0" [High,In progress]19:18
adam_g_though im having a really hard time testing the fix19:18
adam_g_dont know if im using an unrealted test case and cannot reproduce the original, or if the fix is inadequate19:18
adam_g_whatever happens with the paramiko update, the pip-requires of cinder needs to be patched regardless19:18
zuladam_g_:  agreed ill take a look at it better19:19
=== ScottK2 is now known as ScottK
gyre008can someone tell me when I start acct service...how can I grep its PID ??19:54
RoyKgyre008: ps? pidof?19:56
Picipgrep?19:57
gyre008hah RoyK Pici but what should I be grepping for!20:14
gyre008I tried grep for acct acc ct20:14
gyre008notthing found arrgh20:14
gyre008yet the log file is being updated20:15
gyre008maybe acct does not actually run anything in the userspace ?20:18
shaunoprocess accounting is handled in the kernel.  accton is used to turn it on or off, but doesn't run as a daemon20:19
sarnoldkernel accounting is indeed done by the kernel as processes die20:19
sarnoldor maybe its as process statuses are reaped?20:19
gyre008I see ...yeah I was guessing the same...20:20
gyre008sarnold: how do I know if the accounting is enabled ?20:22
gyre008I know I can turn it on and off but would be handy to know if its enabled...20:22
=== xnavor_ is now known as xnavor
=== wizonesolutions_ is now known as wizonesolutions
=== guampa_ is now known as guampa
hXmi configured stmpd, im able to send emails but i got treated as spammer, my reputation is clean and i think is a dns txt record because the machine is multidomain21:04
hXmwhat can i do?21:05
hXmi stuck at this21:05
jacobwhXm: Many providers require DKIM now21:21
hXmyes, i configured it21:21
jacobwhttps://help.ubuntu.com/community/Postfix/DKIM21:22
jacobwhXm: Have you tested the mails from your server with the opendkim tools?21:23
hXmhm not, thanks there i go21:23
jacobwThere's some tools in the opendkim package that take a mail with DKIM headers, and the public key file and try to verify the mail21:25
sarnoldgyre008: I'd assume something like : ls -l /var/log/acct ; /bin/true ; ls -l /var/log/acct ; and see if the timestamps have changed21:32
sarnoldgyre008: note that's a pretty big assumption on my part :021:32
sarnold:)21:32
hXmhttp://dkimcore.org/c/keycheck this asks for a Selector and i dont know what is that21:32
luminousthis may be better suited for ubuntu-server, so apologies on the cross post for anyone in #ubuntu..21:33
luminoushello! I am following http://code.google.com/p/bigbluebutton/wiki/InstallationUbuntu and after adding their .asc key to apt, my apt-get update breaks with: "W: GPG error: http://ubuntu.bigbluebutton.org bigbluebutton-lucid Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 705F9EED328BD16D" - what ought to be done?21:33
hXmjacobw: i sent a test mail to autorespond+dkim@dk.elandsys.com and i got this (host megawatt.resistor.net[208.69.177.116] said: 450 4.7.0 Greylisted by Eland Systems - Please retry after 8 minutes (in reply to end of DATA command))21:37
hXmin the mail.log21:37
hXmdo i really need wait 8 minutes or it is a missconfiguration?21:37
sarnoldwait 8 minutes21:37
sarnoldgreylisting relies upon spammers being too greedy to have deployed decent MTAs to their botnets21:38
sarnoldthey want raw sending speed, not RFC compliance :)21:38
hXmaha21:38
luminousany thoughts on properly adding keys to apt in 10.04?21:38
hXmthese are the slowest 7 minutes in life21:38
jacobwluminous: apt-key-add21:38
sarnoldhXm: haha :)21:39
sarnoldluminous: you should verify from some trusted source that 705F9EED328BD16D is the correct key for whichever repository you are trying to configure21:39
luminousjacobw: the instructions I'm following (see link above) sent me through: echo "deb http://ubuntu.bigbluebutton.org/lucid_dev_08/ bigbluebutton-lucid main" | sudo tee /etc/apt/sources.list.d/bigbluebutton.list21:39
sarnoldluminous: the wget command immediately before is the important one21:40
sarnoldluminous: if and only if you trust this group to have root access on your computer.21:40
luminoussarnold: err, sorry, I meant to post that21:40
anepanal1ptosnot really ubuntu related, but do dual cpu server motherboards _need_ two cpus? or can i put one and 'expand' later?21:41
luminoussarnold: as in, who knows what is in that wget download.. or..?21:41
sarnoldanepanal1ptos: should run fine on just one CPU..21:41
anepanal1ptossarnold: thank you.21:41
sarnoldluminous: that wget downloads their public key from their web server21:41
sarnoldluminous: and the apt-key-add command adds it to your apt repository's list of trusted keys21:41
luminoushow am I giving out root access then?21:42
sarnoldluminous: because package installed on a server using that key can provide their own postinst scripts that run as root21:42
sarnoldluminous: that came out wrong :) packages, downloaded from APT repositories with lists signed by that key, can run arbitrary postinst scripts as root21:43
luminousok I can see that21:43
jacobwdpkg runs as root21:43
luminoussarnold: isn't that the same issue with any ppa you add?21:44
sarnoldluminous: yes.21:44
luminousok21:44
luminousgood to know21:44
sarnoldand knowledge is power!21:44
luminousanyway to verify post-instal scripts as/before they run?21:44
sarnoldnot easily; download packages, unpack, read scripts :/21:44
luminous:(21:45
luminousand going back to the original question, provided I copy/pasted those three commands correctly, from their install doc, I should not end up with that error, no?21:45
luminousor what am I doing wrong there?21:45
jacobwIf the package is signed, you know that it came from the PPA associated with the key, beyond that there's no way of verifying that a maintainer script is not malicous without reading it21:45
sarnoldluminous: re-run the wget command, and paste any errors..21:46
luminousjacobw: it'd be really cool if ubuntu were smart enough to show you something like that for confirmation, when it knows the package is not coming from official repos21:46
hXmi think i found the problem21:47
luminousah, I see the problem..21:47
hXmgoogle uses spf21:47
jacobwluminous: apt does that, if you try to install a package it can't verify it'll warn you and prompt you whether to install it or not21:47
hXmbut can i add a spf record for ipv6?21:48
luminousjacobw: that isn't what i mean.. I mean that a post-install script be shown for verification/confirmation, if the pkg is not from an official repo21:48
luminousnot just "do you want this package"21:48
luminoussarnold: I ran the first wget through my salt master, and it didn't get to run on the minion for a different reason21:48
jacobwYou should read the maintainer script if your worried anyway :)21:49
sarnoldluminous: well, the postinst is just the easiest to describe.. if you wind up running code from the package as root (quite possible via many other mechanisms), you'll be giving them vast amounts of power regardless of their scripts..21:49
jacobwRootly powers21:49
luminoussure21:49
luminousbut that is why it is good to run your own pkg repos21:49
luminousand verify what goes in there21:49
luminousexcept few of us have ever had the time to do it proper like that21:50
jacobwI do :D21:50
luminous:)21:50
shaunohXm: of course.  you can use ip6:2001:db8/32 just as with ip:10.0.0.0/8.  you can also simply add 'mx' so that anything that's returned as an MX is spf-valid21:50
jacobwluminous: I import packages from PPAs manually after testing them21:51
luminousi'm jealous21:51
luminousdo you have any handy sciprts that help you with that, and which you could share?21:51
jacobwreprepro, mostly, which is quite a common package21:52
luminousjacobw: and do you use salt (saltstack.org) at all?21:52
jacobwluminous: I use Puppet which has a much larger community21:54
luminousah a puppeteer21:54
luminousI used to do so as well21:54
luminousI find salt fits my needs, with a MUCH larger feature set21:55
luminouslarger/more helpful21:55
luminous:)21:55
luminouseither way, thanks for the assistance here21:55
jacobwA larger feature set?21:56
sarnold"run random command on N machines without a specific recipe" sounds both tempting and terrifying :)21:57
luminousjacobw: well, as an example, salt states covers the vast majority of what puppet cna do on its own. you need mcollective to get some of salt's built-in remote execution capabilities21:57
luminoussarnold: it's a game changer, wrt how we admin boxen21:58
luminoussalt-cloud is another game changer, for example22:00
hXmshauno: just for understand it, the domain sender, i add it a txt record with this "v=spf1 mx -all" ?22:04
hXmor i should add that to the ipv6 who is the smtp server22:04
shaunohXm: that'd work, if outbound email only originates from the same addresses as your MX addresses22:05
hXmdo i need configure something in the server ip?22:06
hXmfor allow that record22:06
shaunoshould be just that record in dns.  you may find http://www.kitterman.com/spf/validate.html  useful22:06
hXmthanks22:06
hXmSPF record passed validation test with pySPF (Python SPF library)!22:07
hXmdid it ok?22:07
hXmoh, oh22:07
hXmwell thanks to you22:07
shaunothere's two tests there; whether it's syntactically correct, and further down, whether a given address matches it.  you want good news from both22:08
hXmyes, i fail the last part22:12
=== wedgwood is now known as wedgwood_away
=== adam_g_ is now known as adam_g
dewdropHi is there a log file where I can look the server reboot timestamp?22:16
sarnolddewdrop: 'last reboot'22:18
dewdropsarnold: perfect, there were 2 reboots done, and it shows both, thanks.22:23
hXmok now google says Received-SPF: pass (google.com domain of test@mydomain designates ip.server as permitted server22:37
hXmbut the email is still in spam folder22:37
sarnoldtry adding dkim?22:40
hXmin the original message google says nothing about dkim, i just sent an email to a hotmail account for see what happen22:41
hXmand then recheck dkim22:41
hXmhotmail mark as spam too, but it says about dkim=none22:43
=== shirgall is now known as Guest10813
hXmdkim requires to create _domainkey.<mydomain> and dkim._domainkey.<mydomain> thats all?22:45
hXmwith the private rsa key generated22:45
WeThePeoplehi just installed ubuntu-server 13.04 x64 in vbox, how to i connect to it using ssh22:50
WeThePeoplewhen i try to connect it says no route to host22:55
=== airtonix_ is now known as airtonix
chilicuilWeThePeople: by default ubuntu-server doesn't install ssh, log in manually and install it, 'sudo apt-get install openssh-server', and later re try22:57
WeThePeoplechilicuil, that is what i selected to install in the prompt22:58
WeThePeopleopenssh22:58
WeThePeoplenow i am getting connection refused22:58
three18tiin the ubuntu "expert install mode" I have the choice between linux-virtual linux-image-virtual kernels. what's the difference?23:00
three18ti(virtual server install)23:01
chilicuilWeThePeople: enable -v to produce more output, example: 'ssh -v user@machine'23:01
chilicuilthree18ti: afaik, both of them refer to the same package, but dont take me too seriusly23:02
* three18ti flips coin23:03
three18tithanks chilicuil23:03
WeThePeopleim logged in23:04
three18tiguess the worst that happens is I have to reinstall :)23:04
WeThePeoplethanks23:04
three18tihmm... I just did a non "Expert" install and the install went pretty quickly.  I just selected the virtual-image kernel and the install appears to be taking significantly longer.23:26
=== shirgall_ is now known as shirgall

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!