/srv/irclogs.ubuntu.com/2013/05/14/#ubuntu-server.txt

WeThePeoplehi, filezilla wont delete files from the server because of a permissions, how do i access permissions to delete and upload files00:05
sarnoldWeThePeople: understanding unix permissions is integral to being able to use linux well.. you may wish to study these three quick overviews: http://www.sal.ksu.edu/faculty/tim/unix_sg/nonprogrammers/file_sys/permissions.html http://oldfield.wattle.id.au/luv/permissions.html http://en.wikibooks.org/wiki/A_Quick_Introduction_to_Unix/Permissions00:11
sarnold(as a side-note, it's amazing how many 'introduction to unix permissions' don't cover _directory_ permissions, which is just as important as file permissions. sigh.)00:11
WeThePeoplesarnold, i think i need to chown  /00:19
WeThePeoplewith -R00:20
patdk-l2you could, if yo uwanted to totally destroy all permissions on that server00:20
WeThePeopleok, is " cd /var/www/ " the correct way to cd dir. in the server?00:26
WeThePeoplei cant get passed /var00:27
WeThePeopleinto www00:27
sarnoldWeThePeople: you might want to pastebin the results of ls -ld / /var /var/www /var/www/*  -- and describe what you're trying to do00:28
WeThePeoplesarnold, i am trying to delete the index.html from /home/var/www/ >>> http://imgh.us/Screenshot_from_2013-05-13_17:31:29.png00:32
WeThePeoplefrom filezilla, and am getting permission probs00:32
=== Sargun_ is now known as Sargun
WeThePeopleit is a chown issue00:35
WeThePeopleok i think filezilla doesnt have the correct permissions then00:43
WeThePeoplehow do i set the permissions for filezilla?00:45
sarnoldWeThePeople: what account did you use to log in?00:59
sarnoldWeThePeople: .. and why not just sudo rm /var/www/index.html ?00:59
WeThePeoplesarnold, i did00:59
WeThePeoplei am working on a solution to upload now00:59
sarnoldaha. what user account will you use to upload?01:00
WeThePeoplewhat i ssh into01:00
sarnoldace?01:00
WeThePeopleidk what user account01:00
WeThePeopleyes01:00
WeThePeopleace01:00
sarnoldsudo chown -R ace:ace /var/www01:01
sarnoldthat'll change /var/www and all its child directories to owned by ace01:01
WeThePeoplesarnold, i did that and still filezilla would not let me delete that file01:02
sarnoldWeThePeople: really? o_O01:04
WeThePeopleyes01:04
WeThePeopleits a command issue in filezilla, its only "ls" listing it01:14
WeThePeoplesarnold, >>> http://imgh.us/Screenshot_from_2013-05-13_18:15:23.png01:17
sarnoldWeThePeople: figure out for certain what user account you're using in filezilla..01:18
WeThePeopleim using ace01:28
WeThePeoplesarnold, im using ace01:28
sarnoldWeThePeople: pastebin the ls -ld / /var /var/www  again...01:29
patdk-l2really, just add ace to the www-data group01:30
sarnoldpatdk-l2: it was owned root:root before I suggested ace:ace ...01:30
patdk-l2oh? odd01:30
sarnoldpatdk-l2: indeed. (not that I like www-data owning files, but I'm sure you're sick of hearing that particular rant :)01:31
WeThePeoplepatdk-12, how do i do that01:37
WeThePeoplepatdk-l2, ^^01:39
WeThePeoplesarnold, http://paste.ubuntu.com/5663113/01:41
sarnoldWeThePeople: aha. your chown didn't actually work.01:42
sarnoldWeThePeople: it's still root:root01:42
WeThePeopleah yes i see01:42
WeThePeopleinteresting01:42
patdk-l2sarnold, well, www-data owning files depends, but ya01:42
sarnoldWeThePeople: time to run :) you can either fix things up as patdk-l2 recommends or you can change evreything to be owned by ace. either way.01:43
WeThePeoplethanks for the help01:43
sarnoldWeThePeople: just be sure to spend some time with those three introduction to unix permissions I pasted earlier -- knowing how to fix this stuff is important, even if it does take a bit to understand initially...01:44
sarnoldhave fun and good luck :)01:44
=== Ursinha is now known as Ursinha-zzz
WeThePeopleis it possible to have a gui come up in ubuntu-server03:11
qman__WeThePeople, it's possible to install a desktop, but then that's not ubuntu server anymore03:56
WeThePeoplethanks03:56
=== flebel is now known as Guest71621
adam_gzul: http://people.canonical.com/~agandelman/ca/grizzly/python-glanceclient/06:39
adam_gjamespage: ^06:40
_PehdeN_anyone here06:58
CoreyJust you.06:58
_PehdeN_Good. Error duplicat sources.06:59
_PehdeN_lol06:59
_PehdeN_I dont remember how to clear the cache I think thats what i need to do06:59
Corey...wat06:59
_PehdeN_apt-get cache   or some there was a command that clears the cache07:00
CoreyYour DNS cache, your disk cache, your web cache, your proxy cache, your LDAP cache, your apt cache, etc...07:00
Coreyapt-get clean?07:00
_PehdeN_right07:01
_PehdeN_apt cache07:01
_PehdeN_i asked you then remembered man. lol07:04
_PehdeN_Can i pm you Corey07:06
_PehdeN_or07:06
_PehdeN_nvm here > https://pastee.org/h2s2307:07
_PehdeN_im lost07:07
=== racedo` is now known as racedo
_PehdeN_thats the only ones that fail, i am not sure what the issue is it seems like everything else tuns smooth07:08
Corey_PehdeN_: Your sources list may be nutty, check /etc/apt/sources.list and sources.list.d/ for duplicates.07:08
_PehdeN_https://pastee.org/r522g07:11
_PehdeN_corey ^07:11
_PehdeN_looks like there is something odd here07:11
_PehdeN_https://pastee.org/dht4q07:12
_PehdeN_the second is sources.list.d07:13
_PehdeN_have to love clex right07:13
=== Guest80863 is now known as BenyG
alkisgHi, server packages are supported for 5 years and desktop packages for 3 years. But how can I find a list of which packages are considered "server packages"?07:37
railsraidercan anyone help with upstart07:40
railsraideri am trying to create an instance07:41
railsraiderenv PIDFILE="/var/www/shared/tmp/pids/resque_worker_0_instance_$ID.pid"07:41
Jeeves_alkisg: IIRC, everything in 'main'07:41
railsraiderbut the file being created with the $ID not being parsed07:41
alkisgJeeves_: apt-cache policy kde-l10n-el => main, apt-cache show kde-l10n-el => Supported: 18m07:42
alkisgBut some packages don't have a "supported" entry in apt-cache show... :-/07:42
Jeeves_alkisg: So that's correct then07:46
alkisgJeeves_: so there are packages in main that are supported for 5 years, other packages in main supported only for 18 months, and also some packages don't have a "supported" entry in their control file... ...so I'm at a loss on how to tell which packages are supported for 5 years and which not07:47
Jeeves_alkisg: If it's in main, and you're on a desktop: 18m07:49
Jeeves_18m?07:49
alkisgLTS desktop packages are supposedly supported for 3 years07:49
Jeeves_That's not correct :)07:49
alkisgNot for 18 months, although that's what the package says, 18 months07:49
Jeeves_Miscalculation on my part07:49
alkisgOn 12.04: $ apt-cache show kde-l10n-el | grep Supported07:50
alkisgSupported: 18m07:50
alkisg$ apt-cache show kde-baseapps | grep Supported07:50
alkisgSupported: 5y07:50
alkisg...I don't understand the difference there :-/07:51
alkisgdpkg -l | awk '/^ii/ { print $2 }' | xargs apt-cache show | grep ^Supported | sort -u07:53
alkisgSupported: 18m07:53
alkisgSupported: 5y07:53
alkisg...I don't have any package at all that is supported for 3y07:53
=== Adri2000_ is now known as Adri2000
sander^workHow do I make it possible to send mail from my server.. when I have another mail relay server I can point the configuration to?08:39
=== ENOSLEEP is now known as greppy
Davieyjamespage: I guess https://blueprints.launchpad.net/ubuntu/+spec/servercloud-r-seeded-qa-workflow needs refreshing?09:08
maruqHi guys10:05
=== Ben66 is now known as Ben64
hXmhi again10:50
hXmcan i paste real ips or it is unallowed?11:00
hXmhttp://pastebin.com/LpZFfnRK11:02
mardraumhey? here is a real IP - 1.2.3.411:02
hXmmardraum: :)11:02
hXmi dont see the probelm11:02
hXmthe 12345 error is not (i bet)11:02
mardraumyou have told postfix you are running a milter on localhost:1234511:02
mardraumbut you are not11:02
mardraumfix your config11:03
hXmyes, i just did it11:03
hXmbut thats the reason because i get my emails as spam?11:03
mardraumI don't follow what you are getting at, sorry11:04
mardraumwhat exactly is the problem?11:04
hXmi have a server with various domains, the main domain is sudoers.so which i use for send emails, conoced.me is an other domain i want to send emails from11:04
hXmbut when i send emails from conoced.me they are treated as spam11:05
mardraumby whom?11:05
hXmi send an email from conoced.me trought sudoers.so to librepensamiento.es (which is really a gmail account)11:07
hXmjust for testing, i dont have more accounts11:08
hXmanyway i tried some @gmail.com and i get the same result, is the pastebin11:08
mardraumhXm: I don't see any spam problems in the pastebin?11:12
hXmeither me! but the mail is stored in the spam folder in the gmail11:13
hXminstead the normal inbox11:13
mardraumtry some different text in the email?11:14
hXmhttp://cl.ly/OwHf still11:17
hXmoh wait11:17
hXmit uses ipv6 now11:17
hXmReceived-SPF: fail (google.com: domain of testing@conoced.me does not designate 2001:41d0:8:3d62::1 as permitted sender) client-ip=2001:41d0:8:3d62::1;11:18
hXmi used telnet this time11:18
hXmanyway i added this to the dns  Non-authoritative answer:11:18
hXm conoced.metext = "v=spf1 a ptr ip6:2001:41d0:8:3d62::1 -all"11:18
hXm conoced.metext = "v=spf1 a ptr ip4:176.31.118.98 -all"11:18
mardraumI don't think submitting an email via telnet is a good test of the gmail spam system somehow11:19
hXmis because i dont a client email for this domain11:19
hXmsending this email body: hello this is a testing is also treated as spam11:23
mardraumI'd treat you telnetting as spam too if I were gmail.11:24
mardraumit stinks of some custom code written by a spammer they got to run on a botnet11:24
hXmok so i go to configure a thunderbird for send11:25
sk1pperhi all, i am trying to restrict authorized_keys to use just rsync, can someone explain me this line?  command="rsync --server --sender -vlogDtprz . /var/backup"11:26
sk1pperactually the --server and the .11:26
mardraumsk1pper: man rsync the search for server by typing "/--server", and the . refers to "here", ie, pwd11:29
=== unreal_ is now known as unreal
sk1ppermardraum: thanks, is it possible to use to restrict the ssh key to just command="rsync" without any parameters?11:30
mardraumsk1pper: authorized_keys has nothing to do with rsync afaik?11:41
hXmwait, i cant send emails to internet without tls?11:41
mardraumyou probably want some sort of restricted shell11:41
RoyKsk1pper: rssh11:43
mardraumanyway, you seem to be rsyncing inside a system, why not just use cron?11:43
mardraumno need to connect remotely to run a local command.11:44
jamespageadam_g, reviewed and uploaded - thanks!11:59
jamespagezul, oh great "/usr/src/modules/openvswitch-datapath/openvswitch/datapath/linux/datapath.c:65:2: error: #error Kernels before 2.6.18 or after 3.8 are not supported by this version of OpenvSwitch"12:03
jamespagesaucy #bang12:03
zuljamespage:  im lauging so hard that im crying12:04
jamespagezul, I'll poke it with 0.10.0 release and see if that fixes stuff12:06
zuljamespage:  by the end of the release cycle i can call you a kernel hacker then ;)12:06
jamespagezul, I think you could call me that already12:06
jamespagehad to hack it last cycle as well!12:07
zulim going to go get saucy built this morning12:09
jamespagezul, 1.10 might not be the right thing todo; 1.9.x is the lts release12:11
jamespageI suspect its just a quick patch to fixup the kernel version check12:11
zuljamespage:  im sure it is12:13
swaT30http://cloud-images.ubuntu.com/releases/ down?12:14
jamespagesmoser, utlemming: ^^ re cloud-images12:14
jamespageswaT30, let me see what I can find out12:15
swaT30jamespage: thanks12:15
=== Psi-Jack_ is now known as Psi-Jack
jamespageswaT30, should be back now - was impacted by some datacenter issues earlier today12:38
swaT30jamespage: cool, just wanted to make sure you guys were aware12:38
swaT30thanks!12:39
jamespageswaT30, thanks for reporting the issue - much appreciated!12:39
swaT30no worries!12:39
=== wedgwood_away is now known as wedgwood
Davieyzul, adam_g, jamespage: Who is running servercloud-s-openstack-havana ?12:43
Daviey(vUDS session)12:43
zulme i think12:43
jamespageDaviey, zul is12:43
jamespagegenerally Drafter == Lead12:43
jamespageDaviey, we start in just over 1 hour right?12:44
gyre007is there any way how you can update all packages BUT ONE...or all but certain group ?12:44
zulDaviey/jamespage: apparently i can run the qa session as well12:44
jamespagew00t12:44
patdk-l2gyre007, make it sticky12:44
gyre007patdk-l2: how ?12:44
patdk-l2by setting it's priority12:44
gyre007so pinning12:44
gyre007?12:44
patdk-l2yep12:45
gyre007pinning in Ubuntu is UTTER pain12:45
gyre007literally12:45
gyre007but yeah12:45
gyre007thats the option12:45
patdk-l2heh? thought it was pretty simple12:45
gyre007cheers12:45
patdk-l2atleast every time I have done it, it is12:45
gyre007patdk-l2: hah! if you have like 6 different PPAs and each provide the same package..different versions etc..12:45
gyre007no fun12:45
gyre007i had my share of this fun...12:46
patdk-l2dunno how that makes a difference12:46
gyre007trust me it does ...12:46
patdk-l2you increase the prority of the one you want, done12:46
jamespagezul, someone already proposed a 3.9 kernel fix upstream - I'll let that land and then pull into saucy12:46
gyre007patdk-l2: http://serverfault.com/questions/506772/prioritise-repositories-in-ubuntu/506938?noredirect=1#50693812:46
patdk-l2you could always rebuild it into your own ppa, adjusting the version number12:46
zuljamespage:  cool12:46
zuljamespage:  cmd2 version mismatch with cliff so thats why quantum is failing12:47
=== zeppo_ is now known as zeppo
jamespagezul, great12:48
jamespageoh well - it gonna be like this for a bit yet!12:48
smoserjamespage, did someone fix ? swaT30 i guess?12:51
jamespagesmoser, there was a datacenter issue earlier - fixed now12:51
Davieyjamespage: kick off plenary starts in 1:54, but i don't think our prescience is required.12:54
=== Overand_ is now known as Overand
zuljamespage:  yay we have a clean cinder (no more patches)13:04
sudobashhas anyone ever setup ubuntu server as a network virus scanner to scan all PC's on a domain plus network shares13:08
TheLordOfTimeDaviey:  server meeting @ 16:00GMT right?13:14
TheLordOfTimeserver team meeting*13:14
* TheLordOfTime kicks his computer13:14
DavieyTheLordOfTime: Erm, about that.13:14
TheLordOfTimeDaviey:  cancelled, changed, etc.?13:15
DavieyTheLordOfTime: I forgot we canceled it, due to having virtual UDS13:15
DavieyTheLordOfTime: Sorry about that.13:15
TheLordOfTimeDaviey:  no problem, i wasn't up *just* for the server meeting, just making sure of things :)13:15
TheLordOfTimeDaviey:  TBH I forgot about vUDS o.O13:15
TheLordOfTimeand that's uncommon since i'm usuallly keeping track of those13:16
TheLordOfTimeDaviey:  when's the next server team meeting, i assume sometime after vUDS13:16
DavieyTheLordOfTime: same time next week13:16
TheLordOfTimei'll make sure to be around :)13:16
sudobashno idea on a samba / clamav network virus scanner?13:16
DavieyUgh, vUDS times are all out by 1hr.  It's all off by 1hr.13:18
Davieyjamespage / smoser ^13:18
smoseroh?13:18
smoserwhat now?13:18
smoserthe schedule is not showing utc you mean ?13:18
smoserDaviey, what did you mean13:19
Davieysmoser: No, the UTC timings are correct. Many people thought it was starting now.13:19
smoserah.13:20
TheLordOfTimeDaviey:  got a link to the vUDS schedule?13:20
* TheLordOfTime can't find it even though he looked13:20
smoserhttp://summit.ubuntu.com/uds-1305/2013-05-14/13:20
TheLordOfTimei blame my crappy cache13:20
TheLordOfTimesmoser:  thanks13:20
smoseryou can see server/cloud only also13:20
smosergo "up" to http://summit.ubuntu.com/uds-1305/13:21
koolhead17hello all13:21
sudobashguess I have to figure it out myself13:21
TheLordOfTimesmoser:  i actually was looking for everything, i occasionally attend non-server stuff :)13:22
TheLordOfTimesudobash:  we might just be busy and not have gotten around to answering you13:22
TheLordOfTime!patience > sudobash13:22
ubottusudobash, please see my private message13:22
Davieyrbasak: did you see foundations-1305-checkbox-arm-server ?13:29
lambdak0rehow I upgrade the driver for HP Smart Array Controller P420?13:30
* rbasak looks13:30
rbasakDaviey: thanks - I'll attend. Not sure why it's in Foundations. I guess there's no specific QA track?13:33
Davieyrbasak: QA is EVERY track :)13:33
koolhead17hi all14:01
TheLordOfTimeDaviey:  do we still have the server team mailing address?14:04
TheLordOfTimes/address/list/14:04
=== Ursinha-zzz is now known as Ursinha
zuljamespage:  interesting in cinder if i do fakeroot debian/rules clean setup.cfg gets blown away14:06
=== mahmoh1 is now known as mahmoh
arosalesTheLordOfTime, were you looking for ubuntu-server@lists.ubuntu.com ?14:15
TheLordOfTimeprobably14:15
TheLordOfTime:P14:15
TheLordOfTimebut i'll wait to the next server team meeting :)14:16
Davieysmoser: Have you lower 3rd "How To" handy?14:18
sudobashhas anyone ever integrated clamav and samba for a network virus scanner?14:32
=== _croop is now known as croop
=== jiriki- is now known as jiriki
=== mikehale_ is now known as mikehale
hallynppetraki: doe the problem lie in md or in udev?  I wonder if new libudev in saucy is meant to fix that14:42
ppetrakihallyn, no, it's just plain incomplete14:43
ppetrakihallyn, we use udev to respond to things like lvm, but don't use event driven scanning for any other block devices14:43
ppetrakihallyn, once an md array starts, you would have to inspect whatever new disk was hotplugged, determine which array it belongs to and insert it14:44
hallynppetraki: but where are the races comin from?  who's trigging two device up events?14:44
ppetrakihallyn, scsi probe is async, it can scan N buses, the first one can complete before the md scan, the next one can complete a year from now14:44
hallyn(this might be better discussed on ubuntu-devel)14:44
=== koolhead17 is now known as koolhead17|afk
hallynand so the dups are for the same device on different channels?14:45
hallynat different completion times?14:45
ppetrakilet me try my hack first :) http://pastebin.ubuntu.com/5664678/14:45
hallynok14:45
ppetrakihallyn, they are unique devices, on different channels, might as well be different hbas14:46
ppetrakihallyn, and they all are required for this RAID 10 I built, sometimes I just get half, other times I don't get enough to start14:46
hallynhm, why the upstart job, as opposed to adding scsi_wait_scan to your initramfs or something?  is there  atrick you're doing there?14:47
ppetrakihallyn, mdadm runs as rc.d script, so this should be good enough, or I read it wrong14:49
ppetrakihallyn, you're probably right, I should address this in ramdisk14:50
hallynppetraki: ok - that can be worried about later then, i was just wondering if i was missing something cool14:52
ppetrakihallyn, we could make something cool :)14:53
=== blitzkrieg3 is now known as jmleddy
ahs3hallyn: a quick ping...is netcf ready for promotion to unstable from experimental yet?15:07
hallynahs3: I should think so15:08
hallynwe've been using it in ubuntu for some time now15:08
ahs3hallyn: nod.  now that the Debian freeze is over, i'll likely do that this week15:08
hallynahs3: cool, thanks15:08
hallynhappily, not much going on upstream there for now :)15:09
ahs3:-)15:09
hallyn(it does what it needs to - /me doesn't enjoy needless churn)15:09
ahs3ack15:10
=== resno_ is now known as resno
=== dannf` is now known as dannf
=== yofel_ is now known as yofel
=== jiriki- is now known as jiriki
=== NomadJim_ is now known as NomadJim
=== k1ng440 is now known as k1ng
=== medberry is now known as med_
NginUSI have 2 LUKS volume groups, OS & cinder-volumes, but only OS prompts for decryption at boot. How do I make it prompt for the other, too?16:16
=== wizonesolutions is now known as lefnire
=== lefnire is now known as wizonesolutions
=== wizonesolutions is now known as lefnire
=== lefnire is now known as wizonesolutions
=== wizonesolutions is now known as lefnire
=== blitzkrieg3 is now known as jmleddy
pmatulis_NginUS: why did you not put them in the same volume?  you will need to do it manually, which is not a biggie16:58
pmatulis_write a shell script16:58
pmatulis_http://askubuntu.com/questions/21025/mount-a-luks-partition-at-boot17:00
Davieyadam_g, zul, jamespage: bug 117975017:02
uvirtbot`Launchpad bug 1179750 in python-glanceclient "python-glanceclient requires python-keystoneclient <0.2 but 0.2.3 is installed" [Undecided,Confirmed] https://launchpad.net/bugs/117975017:02
DavieyThe latest comment confuses me17:03
Davieyis it that glance needs to depend on glanceclient?17:04
Davieybut.. surely it would have updated regardless?17:04
zulDaviey:  im confused as well ill take a look17:06
adam_gDaviey, thats what prompted my question re dh_python2/overrides17:07
adam_gDaviey, glanceclient functions fine even with the unsatisfied hard version requirement in requires.txt17:08
Davieyinteresting.17:08
adam_gDaviey, i noticed the same thing yesterday with cinder, which has a requires.txt of paramiko > what is installed. does not error out with the standard distutils errors17:09
Davieyadam_g: Have you identified why this passed ok in CI?17:10
adam_gDaviey, no, as i said.. none of this is causing any functional errors17:12
Daviey:(17:12
NginUSpmatulis_: I found it in /etc/crypttab17:14
NginUSWhy doesn't my WiFi show up after bootup? It's only present if I have the wired connection plugged in at boot, which defeats the purpose.17:15
adam_gDaviey, at least not with new installs.t he bug states there is an issue upgrading glance and it not pulling in the correct, newer glanceclient version.17:15
adam_gDaviey, that sounds like a legit bug (d/control doesnt specify a version requirement on python-glanceclient)  still doesn't explain why  everything works when requires.txt deps are not satisfied (or overridden in pydist-overrides)17:16
Davieyyeah17:18
pmatulis_NginUS: nice17:22
NginUSI just wish my WiFi would work now17:24
NginUSOk it was the F2 key, on linux you have to reboot after toggling the radio17:25
NginUShooray my WiFi works again17:26
=== blkperl_ is now known as blkperl
=== blitzkrieg3 is now known as jmleddy
gumaI am having horrible time enabling multicast (well getting it) on multi home machine. I have both NIC configured as static IP (p4p1 default gateway) and (p1p1 to receive multicast) I added static route "route add -net 224.0.0.0 netmask 240.0.0.0 dev p1p1". AppArmor is disabled (/etc/default/apport) enabled=0. When trying to listen using my app bound to p1p1 I am not getting any mcast data. When running netstat -g I see "p1p1            117:46
guma 224.0.25.67".17:46
gumaI do not have SELinux installed17:46
sarnoldguma: apparmor has nothing to do with apport. different tools.17:47
gumaAlso I have another machine with just one NIC connected t othe same router as p1p1 and this machine can get mcast data just fine with same application and settings17:47
gumasarnold: ok. So how do you go about finding out what is wrong. I am on 12.10 x6417:47
sarnoldguma: are you confident you need to be manipulating the multicast routes by hand?17:48
sarnold(it's out of my experience either way, but it sounds odd..)17:48
gumaI am king of out of ideas. Been reading docs and can't find anything. I just moved from CentOS and my app server was working. Well Different Linux...17:48
gumasarnold: At this point my confidence is very low :) I am really out of ideas...17:49
DandalionHi, I'm installing for the first time the server version of Ubuntu onto a Dell Poweredge 840 server, where can I find out if the hardware is fully supported?17:50
gumaI do not have iptables running....17:50
gumaIs there a better channel to ask such question?17:51
RoyKDandalion: which ubuntu version? what problems are you seeing?17:51
Dandalion13.04, I haven't installed it yet, I'm just trying to read before I install it since this is my first time installing server.17:52
DandalionDoes server have a GUI also or just shell?17:52
RoyKDandalion: servers generally doesn't have a GUI - what's the use?17:52
RoyKDandalion: also, I'd recommend using an LTS release, 12.04, for a server17:52
DandalionI want to create a nagios server17:52
Dandalionfor my windows domain17:52
PiciJust shell.17:53
Dandalionin order to monitor our servers and notify me by email when any of them go down17:53
RoyKDandalion: then use LTS, really17:53
DandalionOk17:53
RoyK13.04 has 9 months worth of support IIRC17:53
RoyKLTS is 5 years17:53
RoyKDandalion: that server is pretty old, so it should be well supported. chipset support issues usually happens on newer stuff17:55
hazmatsmoser, did the jstack stuff ever end up being useful for real ostack dev?17:56
smoserno.17:56
smoser3 thigns stop it17:56
hazmatsmoser, ignoring screen/tmux for the moment.17:57
smosera.) io killed it17:57
gumaBTW what is the TLS release cycle? When is new TLS release? Just wondering. I am new to ubuntu...17:57
adam_gjamespage, i know we're busy but to get a head start on the new cadence:  http://people.canonical.com/~agandelman/ca/grizzly/2013.1.1/ & http://people.canonical.com/~agandelman/ca/folsom/2012.2.4/  i have (quantal, raring)-proposed versions of each, ready to go into queue there as well17:57
adam_gzul, Daviey ^17:57
smoserb.) openstack componnts (nova and others) expect basically full access to hardware and to kernel (modprobe)17:57
hazmatguma, the next LTS is 14.04, the last was 12.04 with 5 years of support, they come out every 2yrs17:57
zuladam_g:  ill have a look in a bit about to head into another sessopm17:58
smoserso the only way that you could really do this stuff is have the charm declare "I need these modules, and access to these devices"17:58
smoserand have juju set that up during deployment17:58
smoseranyway...17:58
gumahazmat: thanx. is TLS considered more stable for production? Or jsut longer support17:58
hazmatsmoser, i ask b/c the guy asking about btrfs/juju is apparently trying out openstack w/ local provider juju17:59
Piciguma: we're less likely to make crazy decisions during a cycle if we're going to be releasing an LTS17:59
gumaI see.18:00
hazmatguma, fwiw, most people deploy production on LTS.18:01
hazmatsmoser, thanks18:01
PiciMy personal servers are running the latest releases, but at work I stick to LTSes.18:02
gumaAlso what solutions (possibly free tools) are available or recommended to stage/update servers to some version or better date. Lest say I have one dev server and two small prod servers. I always want to update dev first and do some testing. That take some time so when ready I would like to update prod to same version/time as dev instead of latest which could be newer at that time.18:03
RoyKguma: LTS is rather conservative, when 14.04 arrives, 12.04.x installations won't upgrade to 12.04 with do-release-upgrade until 14.04.1 is released, some months later18:06
RoyKguma: meaning it'll be generally safer, although not bulletproof, of course18:06
gumaRoyK: sure. You talking about major upgrades. I got it. But what about my above point related to apt-get update or distro upgrade18:07
RoyKguma: stuff like redhat/centos/scientificliunux is very conservative, so is debian, but then, they lack new stuff added later18:07
RoyKguma: generally, an LTS release doesn't add much new, mostly bugfixes18:08
RoyKthat is, the updates to an LTS release18:08
gumaRoyK: That is why I am giving a spin :) and see what is going on hee ...18:08
RoyKin 12.04.1, a new kernel was added for new installs, though, to add better hardware support for new stuff18:08
RoyKguma: I somewhat doubt that machine will have problems running 12.0418:09
sarnoldguma: you could install without -updates or -security, and then later, install your second system without -updates or -security -- but that feels entirely too conservative to me, you'd probably want at least the security updates, and probably the normal updates as well18:09
gumabut even bug fixes in system updates could possibly break or uncover my app server updates.18:09
RoyKobviously, yes18:09
RoyKbut that rarely happens18:09
gumaSo what you saying it is "ok" when you on TLS to update to latest even that updating prod TLS might happened little later then initial dev TLS box.18:11
RoyKTLS == transport level security, LTS == long term support ;)18:11
sarnoldguma: that is the goal and so far as I can tell, the reality as well :)18:12
gumaRoyK: I was looking for some sort of mirroring service or app that can be added to dev box and them prod point to it and update to same version that dev box is. Dev box is also very controlled. So not one is messing with it.18:12
RoyKguma: rsync?18:12
gumaopps LTS :)18:12
sarnoldoof, rsync feels wrong for that :)18:13
kermitshould i use ldap or salt for user management?18:13
RoyKguma: just don't turn on automatic updates and test on a dev box first. usually that's paranoia, but if you have specialised applications it may be needed18:13
gumaI never used rsync for that. But I got a bad feeling about it. But then again i like to heat what works and what does not.18:14
RoyKguma: what sort of systems do you use on this thing?18:14
gumait is a price feed18:14
RoyKwell, java, php, what?18:14
gumaC++18:14
RoyKthen there really shouldn't be a problem. never seen API changes on LTS updates18:15
RoyKwith php, perhaps, since php is rather slack on version control, but c++? not likely18:15
gumaok thanx for info. too bad apt-get does not have option like update to specific date/time18:16
RoyKguma: have you experienced apps broken by a an apt-get update?18:16
gumaso other machiens can be updated to same date/time dropping anything new.18:16
RoyKguma: I've been using debian/ubuntu for more than a decade,  and I've never experienced userspace stuff broken by an update that wasn't major (as in do-release-upgrade)18:17
gumaOne while back on CentOS. Well it was really problem in my app. But still found out too late :) That is why I am extra carful now ...18:17
gumarelease upgrades I prefer "full clean reinstall" it is quite quick for me since I keep it to minimum. So that is my preference. Perhaps over kill. But I feel more safe... I just realized how paranoid I am LOL18:19
hXmif someone remembers me because im configuring a smtp for life, i just want to say: the main domain can send emails without any spam mark, so im so happy18:25
hXmbut the second domain is still filtered18:25
hXmat this point i just can imagine is a txt record in my dns?18:25
hXmbtw i configured dkim too18:26
sarnoldhXm: excellent :)18:27
hXmthanks, is a step18:28
hXmbut i still need send emails from the secondary domain name because is the main project18:29
=== TREllis_ is now known as TREllis
hXmand i still wont think about dovecot and roundcube18:29
jamespageadam_g, do you think we should lock step the entry of packages into each pipeline18:30
jamespagei.e. the CA package only gets accepted into -proposed once the associated SRU upgrade does18:31
adam_gjamespage, i think they should both be uploaded in lock step (to ubuntu queue and CA stagin), and we can use the acceptance into ubuntu -proposed as trigger to promote to CA -proposed.18:32
jamespagesmoser, do you intend on attending the Kernel topics session in the next slot?18:32
jamespageadam_g, agreed18:32
hXmdoes postfix requires a special configuration for multidomains?19:24
hXmin $myorigin19:24
hXmit only allows one domain tough19:24
RoyKhXm: the origin shouldn't matter much - the From: header in the envelope sets that and whatever the MTA does shouldn't be an issue19:25
hXmusing this tool for the second domain http://www.kitterman.com/spf/validate.html? all tests are ok but i get this19:29
hXmResults - None SPF records must start with 'v=spf1' please use the back button your browser and try the Mail From record again.19:29
hXmwhich im not sure if thats an error or just an info, the last message is this HELO/EHLO Results - PASS sender SPF authorized19:30
RoyKdunno - try #postfix19:32
=== bradm_ is now known as bradm
jdstrandjamespage: fyi, bug #118008419:59
uvirtbot`Launchpad bug 1180084 in nova "nova-conductor should be in main" [Undecided,New] https://launchpad.net/bugs/118008419:59
jamespagejdstrand, gah - yes - of course19:59
jamespageI'll sort that out19:59
jdstrandthanks19:59
jamespagejdstrand, thanks for pointing it out20:00
jdstrandnp, I was setting up grizzly and couldn't figure out why nova-manage service list wasn't listing compute. bingo :)20:00
=== aarcane_ is now known as aarcane
=== Bass10 is now known as Bass10_
=== Bass10_ is now known as Bass10
=== JanC_test_ is now known as JanC_test
=== wedgwood is now known as wedgwood_away
savidOn a standard apache install, are logs rotated by default by apache, or is log rotation handled by another config somewhere else?21:22
savidoh, nm. I just saw /etc/logrotate.d/apache221:24
=== JonnyNomad_ is now known as JonnyNomad
wdillyHello, I am attempting to have nfs home directories mounted upon users login (users are authing against sun LDAP) I am able to Create the directory using pam module common-session "session required  pam_mkhomedir.so umask=0022 skel=/etc/skel" LDAP works but the NFS mount doesnt work until a restart. I would like it to work without a restart because I am building a private cloud. Thanks so much21:43
=== huats_ is now known as huats
GrueMasterwdilly: Have you tried autofs?  Bit antiquated, but I use it at home on my network.  works ok.22:33
wdillyGrueMaster, I am using autofs.22:35
wdillyGrueMaster,  I have elaborated on my issue here:  https://answers.launchpad.net/ubuntu/+question/22889822:35
wdillythanks22:35
GrueMasterNot sure why it wouldn't work.  It may be something in your autofs configuration.  Have you tried logging in as a local user (no LDAP) and seeing if you can ls a NFS directory forcing an automount?22:38
* GrueMaster hasn't setup ldap. Just a simple autofs for different mirror mount points.22:39
wdillyGrueMaster, yes local user automounting works, and it works for the ldap user after restarting the system22:44
GrueMasterAre you using nfs4 or nfs3?22:49
wdillyGrueMaster, thanks for your help, unfortunately gotta pick kids up22:52
wdillynfs322:52
GrueMasterI'll dig around and see if I can find any solutions.22:52
wdillyyhx22:53
wdillythx22:53

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!