=== Ursinha-afk is now known as Ursinha === Ursinha-afk is now known as Ursinha === resno_ is now known as resno === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === arrrghhhAWAY is now known as arrrghhh [02:25] What would be the most simple/correct entry in an OpenLDAP DIT for an account that will be used by third party software to bind, search, create and modify objects in a certain base? objectClass=simpleSecurityObject? === Jikan is now known as Jikai [03:02] hallyn: virsh migrate is broken in saucy, but it's apparently a known issue with libvirt that will be fixed in 1.0.6 - http://libvirt.org/git/?p=libvirt.git;a=commit;h=d6670a64e1067f29da3c3e032739e140280b763d === Jikai is now known as Jikan [03:36] qman__, you there? I was thinking about how I can solve this... is there a way to "force" ssh or port 22 to always use eth0 or my 192.168 IP? [03:37] Given that Ubuntu Server 12.04 uses the slapd-config (RTC) configuration method, should I still change ACLs via slapd.conf, or is there some other way to modify them? [03:38] arrrghhh: You can specify listening interfaces in /etc/ssh/sshd_config [03:39] tohuw, what about for the response out? I have openvpn running as a client, and that is the "preferred" route in my table when that is up === Jikan is now known as Jikai [03:42] SSH itself transceives on a single port. If you have a route redirecting traffic on port 22 from the host to a destination, you'll need to rework this route appropriately to make it do what you want to do. [03:42] well I don't have any specific routes yet [03:42] when the tunnel is up, I see a new default route and my "normal" default route is given a metric of 100 [03:43] which is fine, I would prefer all the traffic go over the VPN... except for ssh haha :) [03:43] Ah. Then make a route for SSH. [03:44] hm. I found a tip on using iptables to "mangle" the packet === arrrghhh is now known as arrrghhhAWAY [04:53] how do i change run levels to boot into a window manager or console mode when system starts [04:55] mike00: it's set in /etc/init/rc-sysinit.conf. See man init(5) for more information. [04:55] awesome. thanks. === arrrghhhAWAY is now known as arrrghhh === Jikai is now known as Jikan [05:10] Hey, I am trying to list all environmental variables. with commands like printenv and end, I can see majority of them. But I do not see the variables I set pyself. Lets say i have a " export MY_ENV=development ", but it is not listed in the env or printenv command [05:11] myself ** [05:16] Katafalkas: have you tried "set"? [05:16] just did [05:16] it does not show the varieble either [05:16] I don't know whether that works on Ubuntu Server. It may depend on your shell. [05:17] i also tried echo $MY_ENV [05:17] it prints nothing eithert [05:17] Katafalkas: printenv displays all variables present (when called with no arguments) If it isn't there, it is not set. [05:17] anyone familiar with cups and lpr in here? [05:18] !anyone | mike00 [05:18] mike00: A high percentage of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll. [05:18] Katafalkas: Hang on, I'll try it on my daughter's PC [05:20] if I do it in terminal - export MYENV=dev - it shows up in all of the commands. But when I do it in a script.sh - it does not seem to work ... kinda wierd [05:20] cheers ball [05:21] So on my server 13.04 i have it auto login to a user and have a .xession loads window manager and browser. works great. Now how would I have ubuntu desktop read my .xession and load window manager/browser? it seems to boot into normal window manager. [05:22] Katafalkas: Ah, I know why that is. [05:22] Katafalkas: Try ". script.sh" === tjaalton_ is now known as tjaalton [05:22] ...instead of just "script.sh" [05:22] Katafalkas: I think you're spawning a subshell in which to run your script. [05:22] Katafalkas: in which case the environment variable might die with your child shell. [05:23] ok. got it. [05:23] how do I set it globally got the entire machine ? [05:23] * ball shrugs [05:23] Katafalkas: Did that work though? === Jikan is now known as Jikai [05:23] sec. will try in a moment [05:25] it did work. That is coool. [05:25] cheers [05:25] ". script.sh" asks your shell to run the script in your current shell. [05:25] ...without spawning a subshell. [05:25] awesome. [05:26] Katafalkas, to add it permanently, put the variable in ~/.bashrc for your user [05:27] then restart that terminal, environment var sticks :) [05:27] arrrghhh: cheers. I just read to add it to /etc/environment. [05:27] whcih is better ? [05:27] cool [05:27] I think /etc/environment would be the machine [05:28] my method is user-based [05:28] I've always done .bashrc myself, but that is interesting, applying it to the whole machine [05:30] ok. so it worked like a charm system-wide in /etc/environment [05:30] cheers all for help [05:37] np, thx for the tip actually on /etc/environment [05:37] there's some things I would like global haha ;) === arrrghhh is now known as arrrghhhAWAY [06:48] How can I be certain a conf file in /etc/apache2/conf.d is loading and being used? === racedo` is now known as racedo [07:59] jamespage: re: mongodb 2.4 patch - I emailed you the quilt patch [07:59] rbasak, yeah - I found it in the end :-) [07:59] (see last upload to saucy) [08:00] Great - thanks! [09:02] jamespage: do you think SRUs for bug 1185908 might be an idea? My though is that people using slapcat for backups may be getting inadvertent data loss. [09:02] Launchpad bug 1185908 in openldap "slapd: slapcat output truncated every now and then" [Undecided,Fix released] https://launchpad.net/bugs/1185908 [09:02] jamespage: perhaps the submitter could prepare the SRUs? [09:03] jamespage, saw the failure on freeradius, what is causing that? [09:04] yolanda, 'chroot problem' [09:04] * jamespage hits the retry button [09:04] rbasak, blimey [09:04] rbasak, yes [09:05] rbasak, do you do patch piloting yet? you should btw [09:08] rbasak, bug 1185573 [09:08] Launchpad bug 1185573 in mysql-5.5 "apparmor profile denies read access to /run/mysqld/mysqld.pid" [Low,Triaged] https://launchpad.net/bugs/1185573 [09:08] I think the proposed change sounds sane to me - but would appreciated your opinion as well [09:13] jamespage: it seems entirely sane that mysql should be able to read its own pid file. Perhaps the original profile was generated in a way or at a time that mysql didn't read it. [09:14] rbasak, more that likely === acidflash__ is now known as acidflash [09:15] jamespage: I'm not a developer yet, so no patch piloting yet. My application meeting is 1 July [09:15] rbasak, that does not preclude you from piloting - comments and review are helpful for the proposers/reporters and for pilots with upload access [09:15] Hmm, OK [09:25] hi [09:25] someone told me a tutorial about create a git server [09:25] does anyone remember a tutorial for get that or just something where i can get started [09:26] also exists a git server which doesnt publish the code? [10:28] Hello guys, Could we make ubuntu 10.04 server iso, using 3.0 kernel? === bradm_ is now known as bradm === klaas_ is now known as klaas [11:37] zul: whats the status on your python3 updates -> Debian? [11:37] see bug 1185739 [11:37] Launchpad bug 1185739 in python-json-patch "setup.py stumbles about an umlaut in jsonpatch.py when running under Python 3" [Undecided,New] https://launchpad.net/bugs/1185739 [11:37] (just sponsored the fix) [11:37] delayed will be pushing them this week [11:48] zul, okay [11:51] jamespage: i backported a bunch of packages for the cloud archive on friday however i left ceph for you since you are more familar than i am with it [11:51] zul, yeah - looking at that now - needs libunwind and google-perftools for arm support now [11:59] mardraum: feh, it was just fixed in 1.0.5 :) do you need the fix cherrypicked into saucy today, or can you wait for the merge? [12:00] hallyn: it's no worries, thanks, I can wait [12:00] I'm only using saucy to test vm's === acidflash__ is now known as acidflash === wedgwood_away is now known as wedgwood === wedgwood is now known as Guest21017 === wedgwood_ is now known as wedgwood [13:14] I'm having an issue with excessive performance lost when running more than 1 vm using libvirt in 12.04. Both VMs are running 12.04 as well. When I ssh into them, the terminal constantly freezes and losses connection if I have more than 1 vm running. Anybody have any ideas? [13:15] ...addition info on the setup, I'm not having the VMs process anything when the performance loss happens. Each vm is getting 2gb of ram (out of 16gb total on the host) and each vm gets 2 cores (out of 4) [13:17] ...I'm wondering if it might be a disk access or network issue, but not sure where to start. I'm using RAW img files for the virtual drives, parted and formatted ext4. Using virtio for the network, bridged to the host's adapter [13:24] zul, http://people.canonical.com/~jamespage/ca-updates/ [13:24] I've run them through the backport_package in the lab - all built OK [13:24] libunwind -> gperftools -> ceph [13:25] jamespage: +1 [13:25] zul, also had some response on ovs 1.10 from upstream/quantum [13:25] general +1 that 1.10 was the right way to go [13:25] coolness [13:25] just looking at the patches required for the 3.9 kernel now [13:26] jamespage: this is foobared pbr and 2to1 have been backported to precise but it still ftbfs since it cant find pbr [13:27] jamespage, zul: https://code.launchpad.net/~yolanda.robla/keystone/havana/+merge/167038 [13:27] and https://code.launchpad.net/~yolanda.robla/ubuntu/saucy/nova/dep-8-tests/+merge/166995 [13:28] jamespage: do you want to have a look: ^^^ (i dont want to duplicate work) [13:29] zul, I will do after I look at ovs [13:29] zul, if you do keystone I'll do nova [13:29] ack [13:29] jamespage: i think i figured out the precise-pbr stuff though [13:29] zul, good-oh - what was the problem? [13:30] jamespage: well the clients work because it has the ">=" but nova etc doesnt so i think thats foobared (ill have a patch to test it first) [13:31] also we need a newer subunit for precise [13:31] just a theory first i think [13:34] yolanda, nova branch has a changelog conflict [13:34] let me see [13:35] ok, let me correct it [13:41] yolanda: commented on keystone as well [13:41] ok === arrrghhhAWAY is now known as arrrghhh [13:52] jamespage: https://code.launchpad.net/~yolanda.robla/nova/havana/+merge/167041 [14:06] yolanda, one more tweak for nova I'm afraid [14:06] no problem [14:11] jamespage/yolanda: https://code.launchpad.net/~zulcss/nova/nova-fix-setup-deps/+merge/167048 [14:23] yolanda, +1 [14:24] great! first autopkgtests for openstack! [14:24] i missed one test,the spice proxy because it was failing because of websockify dependency [14:24] yolanda, nice work btw [14:24] if we can get that level of base testing across all packages that would be great [14:25] simple tests, not testing any functionality but at least the basic things [14:25] yeah - but that is really important [14:25] yes, i will be focusing on it these days [14:25] we are moving from 'does it build' to 'does it build and at least run from packages' [14:28] yes, sometimes it wasn't like that :) [14:55] jamespage: hey - so i have a test qemu package with the rbd async flush patch. [14:56] jamespage: you wanted to try and sru this for raring right? it's purely for performance, is that right? [14:56] hallyn, yes - I think so [14:58] do you have a test setup where you could easily do a comparative perftest? [14:59] Daviey: sgabios is in debian's NEW queue. we'll want that in ubuntu so smoser can use it with qemu asap :) [15:00] daviey is out. [15:00] this week. [15:01] ah. thanks [15:01] hallyn, I don't - I can poke the reporter - I'm sure he will have/be able to test [15:03] jamespage: the packages are in http://people.canonical.com/~serge/qemu-rbd-async/ [15:09] smoser: for bug 1134036, the third possibility I'm alluding to is that it's our responsibility to make sure that the locale is not broken - in which case I'm suggesting that cloud-init fix the problem, eg. by arranging to reset an invalid locale to C (or C.UTF-8), or perhaps by generating the correct locale on login (tricky!) or something. [15:09] Launchpad bug 1134036 in maas "Failure when using ssh with a locale that is not configured on the server" [Medium,Confirmed] https://launchpad.net/bugs/1134036 [15:10] rbasak, impossible to ensure that locale not broken [15:10] and its not cloud-init's job to do so if you think it should be done. [15:11] ie, this problem is by no means specific to "cloud" systems [15:12] cloud-init warns you though, doesn't it? Whatever the solution, it should be aligned with that warning. [15:25] rbasak, right. cloud-init does warn you. [15:25] and basically that was all i ben and I decided to do after considering other options. [15:26] anything more than that warning, immo really is probably something "policy" for debian and or ubuntu (and work for foundations). [15:26] not something that *shouldn't* be fixed, but not something i wanted to dive into and fix right. [15:26] smoser: OK. I'll start a thread on ubuntu-devel. [15:26] but there should be a clear definition that says "that is not a bug" [15:26] I imagined that we'd need to go there anyway - but wanted to know your opinion first. [15:27] (pitti pretty clearly said that, closing postgres bug as invalid, but that is not dfinitive) [15:27] Hi guys.. I noticed dhclient for renewing an IP lease nolonger works with Ubuntu 12.04 servers. not even service networking restart works. How is one suppose to renew an IP with ubuntu 12.04 [15:27] it should "just work". [15:28] the dhclient daemon should handle it. [15:28] hallyn: ill do 1.0.6 today [15:28] smoser: well like I said it doesnt work. I ran dhclient (like I have always done with previous LTS server versions) and it just returned me to my prompt [15:29] define, no longer works, cause it works for me :) [15:29] zul: awesome! [15:29] ifconfig showed I still have same IP [15:29] zul: there's qemu 1.5-3, but i'm going to wait on that for a few things. [15:29] such as? [15:30] bigbrovar, you should have a pid like this running. [15:30] dhclient -1 -v -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases eth0 [15:30] smoser: and this was a vannila installation... just freshly booted up after a pxe install. the only way I was able to get a renewal was after restarting the server. [15:31] i'm geussing that pid died if it isnt working. [15:32] smoser: this is what I get when I do a sudo dhclient RTNETLINK answers: File exists [15:33] you aren't suppost to run dhclient yourself [15:34] patdk-wk: ok. But how am I suppose to renew and IP lease? [15:34] you don't, dhclient running in the background will do it, at the times it was told to, by your dhcp server [15:35] now, if like smoser said, if dhclient died/crashed, it won't [15:36] patdk-wk: so the who process is suppose to just happen without user input (on a server) and if I changed the IP allocation on to a system from the dhcp server.. I either have to wait for dhclient to reflect the change or just reboot? [15:36] zul: sgabios to hit universe, and actually for 1.5-4 with a low prio cve fix [15:37] cool [15:37] bigbrovar, if you change the allocation on the dhcp server, you should know what your doing === Jikai is now known as Jikan [15:37] normally the dhcp server says what it gives out, is valid for like 1 to 7 days [15:37] if it told your client that, the client won't check for a new ip till that 1 to 7 days is up [15:39] patdk-wk: this would not work for a setup where dhcp listens to ldap for ip address allocation using systems mac address .. if the IP were to change in Ldap then the only way to reflect the change in the machine is a reboot [15:40] it doesn't matter how you want it to work [15:40] understand the protocols and set the options correctly [15:40] if you want ip address changes to take effect imidently, set the dhcp lifetime to like 1second [15:40] bigbrovar, you dont have to reboot. [15:41] and understand that your dhcp server will be very busy [15:41] if you did: sudo sh -c 'ifdown eth0; rm -Rf /var/lib/dhcp/leases*; ifup eth0' [15:41] it would probably work [15:41] (the rm i'm not sure of, i just typed it, so i'd be careful:) [15:41] patdk-wk: different network have different configurations. removing the ability to renew lease from a client is not.. wise [15:41] smoser: thanks .. *you* at lease helped [15:41] heh? who said anyone removed the ability [15:41] it's just simple dhcp server options [15:42] dhcp was not made to have instant changes [15:42] patdk-wk: u assume I have control of the dhcp server [15:42] bigbrovar, if the client was told that its lease was good for 7 days, and you restart networking, its "doing the right thing" if it says "oh look, a valid lease, I'll use that" [15:42] deleting its cache is just forcing it to forget that. [15:42] bigbrovar, if you have no control, it's a non-issue, cause no matter what you do, it's going be an issue [15:43] smoser: live was just much better when dhclient did what it always did. anyway thanks [15:43] i really doubt anything changed here in 12.04 [15:43] it may have, though. [16:06] hi all, is there a non-cobbler deployment method that ubuntu recommend for bare-metal provisioning? [16:06] (not MaaS either please!) [16:06] gray--: nope, only MAAS is the recommended remote deployment method [16:06] gray--: why don't you like maas? [16:06] gah [16:07] gray--: you can setup your own tftp/pxe server + dhcp server to do remote deployments, but that's too much work when you have maas [16:07] i can't seem to find a deployment method whereby ubuntu will accept an IP and hostname properly. if i hand-roll dhcpd, kickstart and preseed, then i need to make a preseed file for each host i want to install [16:07] just feels… 'incomplete' [16:08] gray--: MAAS sets hostnames properly, but uses DHCP for the hosts [16:09] yo would need to configure MAAS to manage DHCP/DNS though [16:09] perhaps make the dhcp server give it its name, and then if i can make it use that hostname in the kernel options to select the preseed file… that could work [16:09] smoser, the only thing that's changed in dhclient is now it isn't verbose by default; it still does the same thing, and you just add -v to see it [16:10] (haven't tried maas on raring btw) [16:10] gray--: maas tells the hostname to use on the kernel options [16:11] cobbler does seem to be unloved from an ubuntu perspective [16:11] aha, so it wasn't the weirdest idea i've ever had :) [16:11] gray--, you should give maas on raring a chance. [16:11] gray--: we used to use cobbler for 'orchestra', but we decided to move on [16:11] with managed dhcp, it is pretty reasonable. [16:11] indeed [16:11] and it uses some sort of apache outputfilter to spit the preseed back or something? [16:11] i will give it a go, thank you [16:12] and i'll report back [16:12] :) [16:12] gray--, well, it renders template files. (which, unfortunately aren't really easily user-editable) [16:12] preseed files you mean? [16:13] it renders django template files into preseed files [16:13] gray--: yeah, so the preseeds are tempita based templates [16:13] oo, sounds interesting [16:13] yeah, s/django/tempita/ sorry. [16:13] wonder if i can write that as an apache output filter in, perhaps, perl [16:14] old skool [16:15] thanks for the advice guys, will give maas a go over the next 24 hours, appreciated [16:16] roaksoax, do we have usage of the dhcp nouid patch in maas in raring ? [16:17] looks like no [16:17] https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570 [16:17] Launchpad bug 1069570 in isc-dhcp "1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think..." [Undecided,Fix released] [16:18] 1 mac, 2 ips, sounds like a interweb viral vid waiting to happen === ogra_ is now known as ogra [16:23] hallyn, my reporter sucks at raising bugs - so I raised bug 1187046 [16:23] Launchpad bug 1187046 in qemu "rbd driver uses sync flush which blocks qemu thread/causes guest latency" [Undecided,New] https://launchpad.net/bugs/1187046 [16:24] I've asked him to comment with a test case and try out your packages (mikedawson on #ceph @ OFTC irc) [16:24] jamespage: thanks [16:26] jamespage: i'll wait until he does that before i mark it fix released and finish the sru details === hatch_ is now known as hatch [16:36] hey ubuntu [16:37] win 2 [16:39] how do I set the default permissions for a user on my system? every file they create has rw-r--r--. I've tried setting UMASK 002 in /etc/login.defs but when I 'sudo -u ' I'm still creating files with the old permissions. [16:42] How do I specify a custom command for stop in an upstart job? [16:43] I mean a task. [16:48] marshall: umask [16:48] oh [16:49] marshall: in su, there's su - user to get the user's environment [16:49] ok [16:50] so when i do "sudo -u bash" what am I doing? [16:50] running bash as that user with your existing environment, I think [16:51] marshall: try sudo -i -u username [16:51] take note also of sudo -i and sudo -s [16:55] rbasak, as a special treat can I ask you to take a look at https://launchpad.net/ubuntu/+source/golang/2:1.1-1/+build/4578681 [16:55] I *think* its doing something odd with sf/hf but I'm not 100% sure [16:57] hallyn: wow...most painless one yet http://paste.ubuntu.com/5729918/ [16:57] sweet [16:58] jamespage: oooh, my favourite type of treat! I'll look at it tomorrow. [16:58] rbasak, thanks v much [16:59] zul: strict monthly releases should hopefully make it easier, yeah [16:59] hallyn: ill swing it up to my ppa so you can test it out [17:01] hm, will need to find a box [17:16] I have a supervisor conf that runs as "user=mcn", and it seems that everything created by this process has the permissions 644, when I'd like it to have 664. How should I make it so? here is a paste of my supervisor.conf http://pastebin.com/AF8CT4BF [17:18] marshall: can you edit start_gunicorn.sh to add 'umask 0002'? [17:43] jamespage: i think i narrowed it down to subunit [17:49] xnox: ping === james_ is now known as Guest54452 [18:46] hallyn: https://launchpad.net/~zulcss/+archive/libvirt [18:47] zul alrighty [18:47] will set that up soon as i finish testing loopback driver in lxc [18:53] oh no, no zul [18:58] jamespage, all charms merged except glance, which required some non-trivial changes to resolve conflicts. see comments on https://code.launchpad.net/~openstack-charmers/charms/precise/glance/ha-support/+merge/166335 [19:03] hi. i'm attempting to update from 12.10 to 13.04 with do-release-upgrade, but getting an error: http://dpaste.com/1209938/ [19:03] i'm trying to figure out what i can do to further troubleshoot this [19:13] aha, figured it out. python-apt is needed, but i guess there's some deficiency in dependency handling and it was allowed to be removed [19:13] lunaphyte_: nice, thanks [19:13] lunaphyte_: can you file a bugreport? :) [19:14] well, that's actually where i found the reference :) https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/994152 [19:14] Launchpad bug 994152 in ubuntu-release-upgrader "do-release-upgrade says it can not run the upgrade" [Undecided,New] [19:15] i didmark it as affecting me though [19:15] *did mark [19:18] it's too bad that python-apt drags in old versions of python though [19:19] hunh [19:19] Can anyone give me some server help? [19:21] when attempting to run "sudo apt -get install mmap" I'm getting error messages such as "Failed to fetch http://us.archive.ubuntu.com/..." [19:25] cppCzar: 'apt' isn't a command... perhaps you should pastebin what you typed and what happened.. [19:25] Has anyone got OpenSSh6.2 for Ubuntu12.04? [19:29] http://pastebin.com/28sB49MD [19:29] sarnold: http://pastebin.com/28sB49MD [19:30] sounds like dns problems to me [19:30] what does dig us.archive.ubuntu.com say? [19:30] pastebin input and output [19:31] cppCzar: hrm. I can resolve us.archive.ubuntu.com just fine.. [19:31] do you have a static ip address? [19:31] Oh okay [19:31] just pastebin the command and output [19:32] connection timed out, no servers could be reached [19:32] paste binning [19:32] oh man :/ [19:33] also pastebin cat /etc/resolv.conf [19:33] cppCzar: perhaps the DNS servers in your /etc/resolv.conf are dead / missing [19:34] lunaphyte_: http://pastebin.com/RWSVi2xk [19:34] cppCzar: if you're responsible for those, you'll have more work to fix them. if you're not responsible for those, perhaps you can just put "nameserver 8.8.8.8" into the file and continue your work today.. [19:35] lunaphyte_: http://pastebin.com/0ZceGr20 [19:36] oh, heh. [19:36] It's just a server at home I'm trying to set up for a project [19:36] empty. [19:36] are you running a gui? [19:36] no [19:36] I also don't have a static ip address [19:36] and don't know if that has anything to do with it [19:36] if it were me, i'd just remove resolvconf, and put my nameservers in resolv.conf [19:37] lunaphyte_: I don't know what that would do [19:37] lunaphyte_: doesnt resolv.conf reseton reboot [19:37] lunaphyte_: Do you have a static ip address? [19:37] resno: if the resolvconf package is installed, yes [19:37] oh, yeah, if you're a dhcp client, then you'd [likely] want to make sure that the dhcp client software was properly populating resolv.conf [19:38] I don't know how to set up my network configuration [19:38] meaning change it to dhcp [19:38] I tried to get a static ip address and it didn't work- my iso doesn't do that [19:38] so now I have to do dhcp [19:39] your iso? [19:39] oh, isp? [19:39] heh [19:39] yeah [19:39] isp* [19:41] well, dhcp should work fine. [19:42] okay, well I'm changing it back to dhcp [19:42] in the /etc/network/interfaces file [19:43] it wasn't? [19:43] i thought you said you were using dhcp. [19:44] I had tried to change it to static [19:44] my apologies [19:45] oh. well that would likely explain why resolv.conf was empty, unless you had included provisions for its configuration in /etc/network/interfaces [19:46] It's working this time [19:46] :D [19:46] Now I've gotta get it connected to the outside world using dhcp [19:46] is that possible? [19:46] Meaning that I'll be able to ssh into it from wherever? [19:53] cppCzar: if you're behind a NAT firewall (most consumer routers..) then you'll need to configure port forwarding on your router / firewall [20:01] sarnold:Okay [20:02] sarnold: do I need to install a Dynamic Update Client? [20:02] cppCzar: if your ISP changes your publicly routable IP address often, yes [20:02] well, you don't *have* to :) [20:03] yeah. in theory my ISP changes my IP address on occasion, but I'm content to just change my /etc/hosts file before travelling, if needed :) [20:16] is it known when Quantum 2013.1.1 will be released in the Ubuntu Cloud Archive? [20:22] zul: ^^ [20:22] adam_g: ^^^ [20:23] swaT30, waiting for the correpsonding ubuntu SRU to be released. its been verified, just waiting for SRU team to release it. once it has, it will be promptly backported to cloud archive [20:23] swaT30, subscribe to https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1179626 if you're interested in tracking [20:23] Launchpad bug 1179626 in quantum "Meta bug for tracking Openstack 2013.1.1 Stable Update" [Undecided,Fix committed] [20:23] adam_g: great, thanks for the info! is there an approximate ETA? will subscribe for sure [20:24] swaT30: we are hopping that the SRU will be released this week [20:25] swaT30, in the next day or two i hope [20:25] great, so we should be good to go next week? [20:25] Daviey, ^^ FYI verification-done on both openstack SRUs, if you can help move along before they get trumped by another security update. :) [20:26] swaT30, ideally, yes. its a matter of someone releasing the update via ubuntu SRU. currently quantum (and the other openstack point releases) are sitting in queue with other ubuntu updates waiting to be released (http://people.canonical.com/~ubuntu-archive/pending-sru.html) [20:27] swaT30, the cloud archive packages are aligned with those in ubuntu, so as it progresses in ubuntu it will in the cloud archive [20:27] swaT30: so in order words, it is just matter of administrative processing [20:28] adam_g: ahh, gotcha. so once the SRU for Raring is out, it will be ported into the cloud archive? [20:28] swaT30, yup [20:29] adam_g: great, thanks for the insight. still getting my head wrapped around all of the release cycle stuff [20:30] roaksoax, adam_g: appreciate the info guys [20:31] swaT30, np :) i'll be packaging up the 2013.1.2 update when it is out friday, so ideally the 2013.1.1 will have been released by then [20:31] any idea why my encrypted home directory unmounts itself after every logout and I have to "ecrypt-mount-private everytime I login? [20:31] adam_g: great! hard to keep up with those OpenStack folks eh ;) [20:39] Hey. Does anyone know a good ressource what could cause slow network speed with an ubuntu-server. I have a new root server, I did not change touch anything and the bandwith is really low. When I boot the same server in the resque system speed is as it should be. interfaces looks right to me [20:43] adam_g: which openstack SRUs are you referring to? I have keystone for quantal and raring I am trying to get out today? [20:44] jdstrand, jeez, yah. both raring and quantal still have SRUs waiting to be released [20:45] jdstrand, everything has verification-done so they should be good to go [20:45] I wanted to have these out last week, but the testsuite was all messed up so it took me forever to get it to work [20:45] crap [20:46] so I have to rebase on this? I am all tested *and* on holiday all week [20:46] I guess the updates will have to wait til next week [20:46] jdstrand, hmm. this seems like a good enough reason to pester someone to get the verified releases out. any ideas who i should ping? [20:47] well, not really, I will have to redo all my testsuite fixes and I can't do that and test before I don't have internet access anymore so it doesn't matter [20:48] the security fix will just have to wait [20:48] jdstrand, is the security issue public? [20:48] yes [20:49] bug #1179615 [20:49] Launchpad bug 1179615 in keystone/folsom "[OSSA 2013-014] auth_token middleware neglects to check expiry of signed token" [Critical,Fix committed] https://launchpad.net/bugs/1179615 [20:51] it seem like a simple fix, except ssl certs expired and have to be regenerated and there are year 2038 bugs in the upstream testsuite [20:51] jdstrand, if im reading that correctly, it is a security update for keystone folsom/quantal and python-keystoneclient raring? python-keystoneclient is not part of our MRE updates, so that should be okay [20:51] you read that correct. ok so raring could go out [20:52] raring is the more important one, since PKI is enabled by default there [20:52] jdstrand, also, i hit the same expired certs and had it fixed upstream, see https://review.openstack.org/#/c/30147/ [20:53] year 2038 bugs are new to me, tho [20:54] adam_g: yes, that uses the year 2112 [20:54] I saw either that patch or some variation on it [20:55] if I build it locally in and amd64 schroot, it works, if I do in an i386 schroot, it does not [20:55]