[00:32] OT | Made me tickle ::: must be from blighty (?) :::: http://www.youtube.com/watch?v=DzlH5SDGoyA [05:54] ubuntu is for niggers, [05:54] ubuntu is for niggers, [05:54] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [05:55] ubuntu is for niggers, [06:48] morning everyone [06:49] morning knightwise [06:49] hey brobostigon [06:49] how are you today [06:50] knightwise: not bad, busy day, jobcentre etc. and you? [06:50] pretty ok, also a busy day , meetings and shit [06:51] :) :( [06:51] its ok .got an ssh tunnel to my machine at home to keep me busy when its boring [06:51] currently writing some simple backup scripts. [06:51] :) [06:52] rsyncing my itunes library and making a monthly zip file and stuff [06:52] hello all [06:52] hey MooDoo [06:52] :) [06:52] morning MooDoo [06:52] btw : whats the best compresiion , zip or tar ? [07:07] knightwise: technically tar isn't compressed. [07:07] tar is gzip'd or bz2zipped subsequently to being tar'd [07:08] bz2 give higher compressions ratios that zip IIRC [07:08] Morning all BTW [07:08] Sun in Farnham again today :-) [07:10] rain here, :( [07:10] Morning all [07:11] morning TheOpenSourcerer and diplo [07:11] Lets get some chatting going here so I don't have to see the messsages from earlier :) [07:19] TheOpenSourcerer: so I would be better of b2z 'ing the entire directory [07:20] Takes a fair bit longer, also dependant on what compression you set- default is 5? maybe i think and can go up to 9 [07:20] But yes bzip gives better compression but using more cpu etc [07:21] you can tar with a -j to bzip2 the tar as you go, e.g. # tar jcf mytarball.tgz mydir/ [07:21] I generally just use gzip tar zcf [07:22] Moi aussi :) [07:22] tar -cvzf === dwatkins_ is now known as dwatkins [07:29] what does the f do ? [07:31] Filename for the archive you're creating I believe [07:35] yeah [07:35] it also serves to remind me where the filename goes (immediately after the options) [07:35] ah ok [07:35] as opposed to the spec of files to include in the archive [07:36] trying it out now on my entire itunes library [07:36] I suspect the minus sign and possibly the 'f' are unnecessary, but I've been using tar so long, I forget where I started with those options, probably an RS6000 in 1994 ;) [07:36] "f" must be the last switch before the filename. tar fcz mtfile.tgz mydir/ won't work. [07:36] The - is not required, but is a throwback to long, long ago... [07:37] You can use it or not as you wish [07:37] I always find it strange that commands are so inconsistent with each other, some needing the minus, some not, etc. [07:37] man tar has lots of useful information [07:37] At least tar is adaptable, I suppose. [07:37] (as is ps) [07:37] tar is one of the few left that do not require it from what I have noticed. [07:38] ah ok, my information is probably old then. [07:38] * TheOpenSourcerer waits to be informed... [07:38] I've waited a long time for that... [07:39] ...then I started reading the manual. [07:48] I loved the XKCD about tar :) === schwuk_away is now known as schwuk [08:14] heh yeah === Hornet- is now known as Hornet [08:20] Good morning all, happy UN Peacekeepers Day! [08:37] Goooood Morning! [08:39] * diplo is playing with ldap this morning :) [08:40] ldap's fun [08:40] Umm fun isn't a word I'd use so far :) [08:40] :-p [08:40] pita, could make it a lot clearer, but it's starting to go in the noggin now [08:40] Good morning peeps :) [08:41] Wording in it could be clearer, writing my own notes for it as well [08:42] I don't get with ldap how it manages to be entirely schemaless. with schemas [08:43] and that the schemas are stored in the db according to a schema stored in the db that wasn't there when you started [08:43] braingoo [08:44] the day I have to configure my own ldap is that day I quit life [08:44] lol === Hornet- is now known as Hornet [09:19] wifey is out for 1hr max today. chances of citylink attempting to deliver in that 1hr window? high [09:19] VERY high [09:20] :'( [09:20] though i hear the depot is v nearby [09:28] put a note on the door [09:28] usually works [09:29] "leave with neighbour?" [09:29] "wifey gone shopping. please please please wait for her!" [09:30] leave in , yeah [09:30] that's one thing I do like about Amazon's otherwise alarmingly insecure deliveries === BigRedS_ is now known as BigRedS [09:31] i got a DPD mail today giving me the exact 1 hour window it will be delivered in [09:31] 16:16-17:16 [09:31] nice [09:32] i know its out for delivery :-\ [09:33] I decided to buy something right before I fell asleep last night [09:33] and now I can't remember what it was [09:33] \o/ [09:33] bacon [09:33] was it sheep? [09:33] oh yeah, homebrew stuff [09:34] got put off the diea after my student days and a foul tasting conconction [09:38] *like* [09:38] foul tasting concoctions are great when you're a student [09:40] I like student towns when you go out on the piss they come round near the end of trading with lashings of shots - usually either green or red and often in testtubes [09:40] I have no idea what's in them, but they're awesome :-p [09:40] ☻ [09:40] I've made some quite drinkable stuff from kits [09:41] lies! [09:41] want to step it up to choosing my own ingredients [09:41] I am jealous of kirkland's setup [09:41] they're building a distilliary near where I grew up in freefolk/laverstoke - nr basingstoke [09:42] http://www.ubrewtu.com/ [09:43] http://www.basingstokegazette.co.uk/news/9554536.Gin_project_is_a_tonic/ [09:43] Laney: No match for "UBREWTO.COM". [09:44] Nafallo, or ubrew.to [09:52] best package for drawing diagrams in ubuntu? [09:52] (or web based) [09:52] http://www.asciidraw.com/ [09:52] that's my usual goto for wiki pages. [09:53] this is more visio related [09:53] i guess draw, dia or caligra [09:55] mungbean: dia === alan_g is now known as alan_g|tea [09:55] doh, i chose calligra [09:56] gah [09:56] gah? [09:56] join/parts [09:56] gah! [09:56] annoying [09:56] \o/ [09:57] cheers Myrtti :-) [09:57] be'er? [09:57] still plagued by the debconf on window flashing up multiple times during software install [09:58] that's a strange banmask [09:59] how does it know who's got broken connections to match the @*$##fix_your_connection?! [09:59] I've been listening to a string of The Infinite Monkey Cage podcasts. All caught up so thought I'd move onto the last uupc. My brain wasn't able to process Tony's voice in my headphones, I think it was expecting Brian Cox [09:59] diddledan: it's a message [09:59] aah [09:59] er, no. [09:59] so the mask is just * [09:59] it banforwards to a channel called ##fix_your_connection [10:00] Nice [10:00] and it knows it by the nickname, see the part before the ! [10:00] andatche!*@*$##fix_your_connection [10:06] Morning all [10:06] Morning davmor2 === alan_g|tea is now known as alan_g [10:15] ello davmor2 [10:16] hulk smash! [10:18] Wish I could be in 2 places at once [10:19] Missing the LUG tonight because Hayley and I are out celebrating her birthday from yesterday [10:19] It's a shame that she doesn't see going to the LUG as a good form of celebration [10:20] Clare went to out LUG meeting _once_ [10:20] Tell her its a fountain pen converntion, then when you get there say they must have swapped the date with with LUG meeting [10:20] Hayley has been to the LUG xmas meal and is likely to attend the Pie Factory in 2 weeks. But no interest other than that [10:20] that's sad :-( [10:21] :'( [10:21] understandable, lug meets are often boring to outsiders [10:21] my kids go to them only because I drag them along and they can sit and play games while i do a talk [10:21] Yes and no. She says that it's my social thing [10:21] bigcalm: you only want to go now that you saw my name go down on the life is too hectic to attend list ;) [10:21] e.g. https://plus.google.com/109365858706205035322/posts/c12F6vLasK8 [10:22] davmor2: just seen the post the ml. How can work be too busy for you when czajkowski does everything? :P [10:22] Minecraft \o/ [10:22] would a husband go to a jewellery party? [10:22] indeed [10:22] popey: I'm guessing that your LUG doesn't meet in a pub? [10:23] (doesn't look very pubby) [10:23] the linux community gets a reputation as being male because it's mainly male and therefore only male people join [10:23] the one she went to was in a pub [10:23] she was ~6 months pregnant with sophie, too [10:23] was the beard count hgh? [10:23] thats actually one of the first times I met Tony & Laura [10:23] I think it varies on the lug tbh and the people there on the day. I met my other half at the LUG meet up. But it's not one I go back to often either. [10:24] i don't LUG because there are lots of linux users at work [10:24] i would meet up at a scale model UG though [10:24] since my friends haven't realised that this is the best hobby to do ....yet [10:25] Working from home means that I look forward to just seeing other people once a fortnight at the LUG :) [10:25] nice [10:26] drawing a diagram in calligra flow. its very visio ish but i can't change the colour of the lines :( [10:26] and buggy [10:26] got potential though [10:43] Just use paper, felt tips and a camera phone [10:46] for sending to oracle? [10:47] Maybe crack out the crayons for them === alan_g is now known as alan_g|afk === alan_g|afk is now known as alan_g [11:26] Laney: popey one for ye http://imgur.com/r/funny/dRlvEOU [11:28] czajkowski: that's screwing with my mind! [11:36] czajkowski, that's the afternoon gone.... [11:37] JamesTait: I know I have to avoid that site at all cost [11:37] s [11:37] :) [11:39] that's ay maze zing! [11:39] trippy, too === alan_g is now known as alan_g|lunch [12:21] whats this motorbike game thats in software center? [12:21] anyone tried it? [12:23] * BigRedS installs it [12:27] which game>? [12:27] oh, its actually called motorbike ☻ [12:28] "payment authorized" [12:28] uhm [12:31] yeah, I couldn't find a way to install the apparently-free bit of it [12:32] Hm, the software centre's pretty good [12:33] costs £0.00 [12:33] you get 10 free levels [12:34] heh, that is quite fun [12:34] yeah, I can see where it says that, but not where to click to make it install [12:34] without having looked at it, i just got reminded of elastomania [12:34] now that was a fun game [12:34] Though I've got distracted playing with the software centre [12:34] There are some apps that you have to go through the payment processing system and purchase at the £0.00 price, doesn't ask for a credit card or anything [12:35] i just typed "motorbike" in USC then clicked "more info" then "buy" [12:35] Ahh, that might do it [12:35] yeah, the 'Buy' wants me to log in with an account I don't have, so I figured it was the payment bit. I expected a 'Download free bit' button somewhere [12:35] I'll try DJones' theory [12:35] Oh, it's just a launchpad account it wants [12:35] BigRedS: Isn't the login using a launchpad account? [12:36] yeah [12:36] something else in the software centre wanted a software centre account, I must've conflated the two [12:36] it's an Ubuntu SSO account really [12:37] not a launchpad account [12:37] Heh, the software centre is not responding... [12:37] but if you've been around a while then it's technically your launchpad account which was migrated to an Ubuntu SSO account ☻ === alan_g|lunch is now known as alan_g [14:03] and there is a difference [14:03] if you have a SSO issue the folks in #canonical-isd can help you though [14:04] we get lots of confusion as from an end user point of you can't tell the diference. [14:34] anyone know how I could use terminal to extract the number in "refs/heads/feature/8494-saq-survey"? ...feature/[0-9]+-... would be a good pattern [14:35] dogmatic69: extracting the number from a string is easy, yeah === alan_g is now known as alan_g|tea [14:35] dwatkins: you going to keep me in suspense? :/ [14:37] make sure you escape the relevant slashes, but it should be fairly easy, depends on what exactly you're looking for [14:38] how are the digits shown in general, for example, and can other digits be present? [14:41] would a blunt sed 's/[^0-9]//g' work? [14:42] shauno: that's why I'm asking, does dogmatic69 mean "remove" or "display only" the numbers [14:43] and if there are other numbers present, what should happen with them, nice way to negate the search, though :) [14:43] yeah, I'm skipping a few assumptions :) 'blunt' is my usual methodology. start with something violently simple, and tune it for why it doesn't work [14:44] dwatkins: get just the numbers in a var [14:45] shauno / dogmatic69 - indeed, that may well work, but what if other parts have numbers? [14:45] shauno: that sed does the trick [14:45] dwatkins: doubt it [14:46] fair enough, just saying as I've been caught out by sed in this manner before [14:46] its a git branch feature/-description [14:46] it gets as much as it can [14:46] and if someone calls a feature "mything123"? ;) [14:48] Personally, I'd write a script for it [14:48] in something more capable than bash [14:48] perl is probably best for this, yeahy [14:48] *yeah [14:49] yeah, "something more capable than bash" is my current euphemism for "Perl" [14:49] * dwatkins grins [14:50] ooh, I didn't know that .. you can use | as a delimiter in sed instead of / [14:50] or a hash [14:50] I think you can use all sorts of punctuation as delimiters [14:50] if its anything like php you can use whatever you like as a delimiter [14:50] * bigcalm does everything in PHP and cares not for sanity === alan_g|tea is now known as alan_g [14:51] BigRedS: you don't care about your sanity? [14:51] Bwuahaha [14:51] *I* do. But I don't use PHP [14:51] :) [14:51] Tab strikes again [14:51] hehe [14:51] oops, sorry [14:51] * diplo has moved from perl to python recently for my scripts [14:51] actually, I do use PHP occasionally. But it does drive me bonkers [14:51] how did I live this long without knowing that :/ makes replacing paths a whole lot tidier, because then you don't need \/path\/to\/foo [14:51] I clearly havn't used PHP enough to see how insane it is. [14:52] shauno: I know the feeling [14:52] much prefering it, only downside I have is that certain features I code for in 6 don't work in centos4/5 :( [14:52] haha, yeah, I use hashes by default now. Though (in perl) you do need the m beforehand - if ($var m#/some/path/#) rather than if ($var #/some/path/#) [14:53] dwatkins: my main issue is with all the preg_* functions not being as easy as doing the same thing in Perl [14:53] I suspect I should be glad I don't know about this, BigRedS ;) [14:54] my solution to this is simply to not understand how things are supposed to work in perl. that way I'm not injured when they don't [14:54] shauno: yeah, that's why I intend never to go to Ireland and have a Guinness [14:54] I'm quite enjoying my ignorance of how much better it is over there [14:55] oh now here's a dirty secret. I can't tell the difference [14:55] haha, I suspect I'd not be able to. But it's not a risk I'm willing to take [14:56] most of it seems to be in guinness having QA chaps in wee vans doing inspections here, so you suffer the wrath of Guinness if your lines aren't clean enough [14:57] ie, good housekeeping, rather than any magical quality inherent to the liquid itself [14:58] That sounds like a cushy job [14:58] Ah, actually, I guess they don't just spend the day driving from quaint pub to quaint pub tasting a pint at each one [14:59] seriously, these guys are a very common sight here .. http://farm1.staticflickr.com/25/193675508_7511627bb6_z.jpg?zz=1 [14:59] omg, the channel started moving while I wasn't watching [15:00] how dare you exist outside of my consciousness! [15:00] seems to me they're more likely contributors than the traditional myth/legend [15:01] yeah. I do like the notion that it "doesn't travel well" yet seems to make it to anywhere in Ireland fine, but not just across the water to Liverpool [15:01] and last bit before I drop the topic and go back to housework .. if you ever want to fluster an irishman, remind them that guinness (Diego) are a british company ;) [15:01] diageo [15:01] that's the one [15:02] boddingtons tasted lovely in manchester. beer snobs in the south don't believe me [15:02] they will only drink something if its called wagglebadgerfoot [15:02] I love that one [15:02] it's very tasty [15:03] you grow a beard while you drink it [15:03] I've already got a beard [15:03] did you drink some? [15:04] yeah, I really like wagglebadgerfoot, it's awesome [15:04] reminds me of something I came across in slovakia. beer snobs who have only ever drank pilsners. shocking [15:04] wtf? [15:04] how can you be snobbish over pilsners [15:04] ? [15:04] I've a friend who is [15:04] well, he's snobbish about *all* beers [15:04] german? [15:05] including pilsners [15:05] nah [15:06] people get snoobish about everything: coffee, beer, wine, distros [15:06] irc clients.. [15:06] irssi! [15:06] /ban * [15:06] >.< [15:06] bikes [15:06] I'm using smuxi atm [15:06] oh you can't possibly ride THAT bike [15:07] I'm an awful bicycle snob :( [15:07] bike == dyke? [15:07] And, er, completely the opposite with motorbikes. I appear to have no standards there [15:07] lol [15:07] I guess if you're used to bicycles, all motorcycles are default jealousy ;) [15:07] i like all bikes except for bromptons [15:08] Even Dahons? And the cheapo imitations? [15:09] anything that looks like an adult stole a childs bike [15:09] * popey hugs his brompton [15:09] says the guy who is waiting for his kick scooter to arrive [15:09] which he no longer has [15:09] Ah, that's BMXes you're think of [15:09] nah bmxes don't pretend to be anything else [15:10] They're kids bikes [15:10] adult bikes look the same but aren't built for a child [15:10] there's a bromptonites bunch at work [15:10] at least bromptons have diddy wheels for a sane reason [15:10] and proprietary everything [15:10] the left pedal is pretty standard [15:10] OK, to butt in with a linux based question :) [15:10] bromptonites at work hang around together to validate their poor choice of bike [15:10] yeah, had to have my bedal replaced [15:11] We have maybe 80+ customers [15:11] wow [15:11] you selling bikes diplo ? [15:11] thats harsh mungbean [15:11] And we connect to them very insecurely at the moment [15:11] bah.. loonikes sucks [15:11] i'm being tongue in cheek, you just can't see me doing it [15:11] riight [15:12] What I'd like to know is, how do others connect to multiple linux boxes with multiple users and manage keys [15:12] i'd use a brompton if i had to commute [15:12] diplo: a gateway box [15:12] We have maybe 17 devs that can connect to multiple sites, some use there own machines so could have ssh keys on there [15:12] by public transport [15:12] if each customer has several machines, have a bastion host at each site, ssh to that and then on [15:12] i jape about it to their face, just a bit of banter really [15:12] use puppet/chev/scp+cron to distribute the keys [15:13] Mainly a single machine [15:13] I have debated that BigRedS, I'm not the sysadmin, but the guys that are aren't that great :) [15:13] We're a very small company and trying to get them to use best practise etc is proving slow/difficult [15:14] One of my thoughts was to have a single user on a machine that has ssh keys for the customers [15:14] each of devs ssh's to that user and we could then just revoke the key from that authorized_keys [15:15] it depends how much you want to split these things up. We all log on as root with passwords to the huge majority of our machines. Internally it's logged who requested the password and when, and we're expected to log what we do. This is only permitted from one host, though, which everyone key-auths onto [15:15] it's not so great for auditing, but nor is `sudo su`, and it's a good deal less fragile than it might eb [15:15] yeah pretty much what I was thinking BigRedS, hadn't debated the logging though but also an idea [15:16] can you store authorized keys in ldap? [15:16] heh, even if you can I gave up on ldap for today.. :D [15:16] lol [15:16] I'm going to have to google that now [15:16] yeah, knowing that your log-in has been documented is a pretty good incentive to go on to document what you did. Else the next problem is immediately blamed on you when it's checked who was last to fiddle :) [15:16] diddledan: I think that's enough wagglebadgerfoot for you :p [15:17] >.< [15:18] you can use a different key for each customer though, which gets surprisingly sane once you start using IdentityFile ~/.keys/customer.pem in ~/.shh/config [15:18] One of my biggest issues is this company doesn't document *anything* !!!! [15:18] yeah I do that on my own machine, until I joined everyone was still using telnet :/ [15:18] haha [15:18] These guys have been doing the same thing for 20 years and it's a pain to get anything to change [15:19] most are old and against it [15:20] well, using SSH and passwords isn't *bad* [15:21] We implemented svn just before I joined, apparently there was uproar.. so one of the guys wrapped the commands in bash so it looked like the old way they did things [15:21] it's still way better than telnet, for example. And with fail2ban or denyhosts you can make a brute-force attack pointless [15:21] We don't use ssh very much though :/ mainly on new sites where I've been involved. [15:21] I was going to break into a customers site from home to show them how easy it would be.. [15:22] I wonder how transparent you could make it with ssh's ProxyCommand directive. have ssh from the developers box go via a middle-man on your site, have the remote sites only accept connections from the middle-man, and then you've got a central point you can revoke access at, without changing their workflow [15:22] shauno: thats exactly what I was going to try and acheive [15:23] Wasn't sure if it was good practice though [15:24] shauno: might be smoothest to configure a VPN, and just mandate that they all connect with that first. [15:24] I think it kinda depends. if the remote machines only need to accept connections from you, then firewalling ssh down to a single point of entry seems very sane [15:24] yeah, I meant have them VPN to your single host, and then ssh from that to the other hosts [15:24] rather than proxying SSH [15:25] if they need to accept connections from some vague definition of 'everywhere', you don't save yourself anything because the developers can still connect directly [15:25] just that ProxyCommand seems a less-well-tested system than both a VPN and SSH [15:25] ssh can be its own ProxyCommand, which reduces complexity a lot [15:26] "how do others connect to multiple linux boxes with multiple users and manage keys" - i don't understand the question [15:26] i just put my public key on the server and then forget about it [15:28] yeah, so I have 80 sites, some with more than 1 machine all with a users ssh pub key on it [15:28] something like "Host Remote, ProxyCommand ssh bastion -W %h:%p", and then 'ssh Remote' will ssh to 'bastion' and from bastion to Remote [15:28] If a member of staff left and the key was from a personal pc he'd still have access to all those customer servers [15:29] diplo so your question is simply "how to revoke keys" [15:29] Or what is the best set up in that situation, it would be a pain to revoke that many keys and to check them [15:30] "that many keys" - no, one key [15:30] Which is why I was asking about a single server connection, and we locally ssh to that server via a key, so only one server to revoke from [15:30] sounds like a plan [15:31] of course if someone wanted to be malicious they could just install their own keys on the other servers [15:31] and then avoid the central server [15:31] yeah that is very true.. :) [15:31] if you try to firewall it then they can set up a reverse tunnel [15:32] not sure they would, but it's just when I set it up I don't want to do it more than once :D [15:32] ali1234: only if they could get in to set it up [15:32] i would probably go for some kind of system where there is a central authorization server [15:33] if you have a single server which is the only place SSH to the other servers is permitted from and you deny someone access to that, then they cannot ssh to the other servers [15:33]