=== Aww is now known as NotAww [00:58] roaksoax, just pushed a first pass the template-driven https reconfig to lp:~gandelman-a/charms/precise/cinder/pyrewrite [00:59] roaksoax, one gotcha i ran into is that we need to a2ensite new apache configs after tempaltes have been rendered, but before the restart_on_change wrapper restarts things. [02:01] zul, any word on kombu? requirements.txt got updaed across all projects (i think) and it broke us good === pgraner-afk is now known as pgraner [02:14] Can anyone advise me on which version of server has apache 2.4 support [02:19] None of them [02:19] It isn't in debian, you can build it yourself from source. I asked this same question a while back, and this was the answer I got. [02:20] STurtle, ^ [03:01] can anybody tell me why port 21 is not listening on my 12.04.2 lts server when I got vsftpd installed [04:55] I want to setup my 1st HA cluster. Anybody have an opinion on best storage options and why? GlusterFS, corosync, or pacemaker? [08:01] zul, adam_g: hows havana looking in staging? I'd quite like to get something out to updates this week if possible [09:18] hi, i am trying to adding access to a host folder on an guest I am getting this error when trying to start the guest: Virtio-9p Failed to initialize fs-driver with id:fsdev-fs0 and export path: [09:24] I have a general question in how to setup my server. I got one physical ethernet connection on the server. I would like to use this connection both in plain and have it connect to a VPN service. Next I would like my webservices to traffic the plain connection while other services use the VPN connection. How is this managed? [09:36] sebrock: you'll need to setup routing for that [09:36] Yes I noticed, on my way :) [10:02] Is there tcp server network stress test tools ? [10:34] Senor, iperf is useful for benchmarking but not really for stress testing === _thumper_ is now known as thumper [10:51] jamespage:so how do I do stress test for my tcp server ? simulate? [10:52] Senor, with iperf you run iperf -s on one host and then iperf -c on another [10:52] it transfers data between the hosts and measures the network performnce [10:55] Does this reflect the stress holding capability? [11:16] Senor, no - its just a benchmark [11:49] Can you give a definition for stress holding ability ? [11:56] jamespage: im ready needs some testing === eagles0513875_ is now known as eagles0513875 [12:37] Hi guys [12:38] I've been handed an ec2 server running 8.04 LTS, which is obviously EOL now [12:38] I'm looking to upgrade via `sudo do-release-upgrade`, but keep hitting problems [12:39] it's failing to fetch the lucid listings [12:40] https://gist.github.com/markbate/caa93cd62521e1146d3a [12:40] any ideas? [12:43] maruq: IIRC there are legacy apt repos that you can use to "step" up through the versions till you hit support [12:44] maruq: but may be quicker just to rebuild [12:45] RobCWDudley: I think it was actually the apt sources. they were set as us.ec2.archive.ubuntu.com, I changed to archive.ubuntu.com & can update apt [12:46] RobCWDudley: yeah, if I could, I'd just deploy a 12.04 server, but need to keep this one going :( [12:46] maruq: ah ok guess the amazon mirrors are kept pretty well pruned back then. [12:47] RobCWDudley: I think also there might be separate us-east & us-west ones now, but not sure [12:48] RobCWDudley: I updated apt & installed apparmor, things seem to be upgrading now [12:50] maruq: cool - good luck getting it up to 12.04 :) [12:50] RobCWDudley: haha, thanks. === wedgwood_away is now known as wedgwood [14:08] hey guys, i have a quick question, how can i add access to a certain directory to a specific user? [14:24] g0tcha: chown [14:27] smoser: around? I have a cloud-init hostname setting question. "getent hosts `facter fqdn`" seems to fail by default with cloud-init and Openstack. [14:28] RobCWDudley, can you be more specific please? im not that savvy with that [14:29] g0tcha: not without more info. Which directory, which user and what kind of restirciton [14:30] RobCWDudley, the directory is called /data/ , its in /var/www/owncloud/data/ .. its owned by www-data www-data with drwxr-xr-x [14:30] i want to keep the same permission but add access to user 'gotcha' [14:31] ok does www-data need write perms? === aaa is now known as koolhead11 [14:34] RobCWDudley, owncloud says the ownership of the folder should have full access to run php as owner so it sets the apache user for it [14:35] g0tcha: ok well a folder can only have one owner so you can't keep those perms and add access to another [14:35] g0tcha: you need to add write perms to the group and add your new user to that group [14:36] eg chmod 775 /var/www/owncloud/data [14:36] g0tcha: and adduser gotcha www-data [14:36] chmod 775 doesnt make it less secure by any chance? [14:37] g0tcha: only to the group level. Gives Owner and Group RWX perms. World still has RX [14:37] it's already able to be written by the main attack vector, your web server :P [14:37] ^ [14:39] so what youre saying is giving ownership to the apache user is vulnerable? [14:39] of course [14:39] i thought its the best way of doing it :p [14:39] best of a bad lot? [14:39] only if you a) don't have updated apache or b) have vulnerable scripts accesible from the web [14:40] b) is much more likely tbh [14:40] yeah b) is 99% of it [14:40] and if you're worried then that's why things like Chroot exist [14:40] but still not 100% secure [14:41] i believe nothing is 100% secure, but i also believe that someone should do their best to make it atleast 99% secure [14:41] and those scripts youre talking about could be some WordPress plugin or anything like that, am i right? [14:41] g0tcha: absolutely [14:41] ouch [14:42] of courze wordpress will work fine with no write to the web directory [14:42] yeah ofcourse.. just an example [14:42] but you lose a lot of handy stuff - auto update, plugin & theme install and caching get's trcky [15:04] jdstrand: ping ufw question for you [15:05] zul: fire away [15:06] jdstrand: so apache-2.2-common has gone away in saucy mind if i stick things in /etc/ufw/applications.d/apache2/ [15:07] /etc/ufw/applications.d/apache2/? you mean /etc/ufw/applications.d/apache2? [15:07] yes [15:07] zul: sure, that's fine [15:08] jdstrand: cool just checking [15:08] zul: thanks [15:29] jamespage/roaksoax: https://code.launchpad.net/~zulcss/swift/swift-1.9.0/+merge/172597 [15:48] zul, +1 [15:52] jamespage: thanks [15:52] zul, np - lets get that uploaded to havana staging ASAP as well. [15:53] jamespage: ack [15:56] Hello, I'm trying to setup auto screen with ssh login for my ubuntu server using http://taint.org/wk/RemoteLoginAutoScreen an when ever i input the code at the end of the bash file i always get a syntax error [15:57] I dont know what im doing wrong [15:57] Can someone shed some light on this? [15:58] jamespage: http://people.canonical.com/~chucks/ca/ [16:00] zul, just spotted "Nump" but that was an earlier change [16:00] jamespage: heh [16:02] jamespage, havana is in a tough spot atm since a bump to kombu > 2.4.7 last week [16:02] adam_g, upstream bump right? [16:02] jamespage, yea [16:02] adam_g, was that post h1? [16:03] i.e. is what's in staging OK whilst we fix that up [16:03] jamespage, ya. wasn't sure if you meant you wanted to get h1 out to updates or to resync staging with more recent first [16:03] adam_g, first option (h1->updates) [16:04] 12:04:13 PM - stevePage129: need help with setting up a cluster server / high availability / NFS / etc, post is on askubuntu, and would appreciate help. thanks guys! [16:04] 12:04:15 PM - stevePage129: http://askubuntu.com/questions/315491/setting-up-cluster-configuration-using-an-existing-web-server-as-a-primary-node [16:05] jamespage, ah, ok. running a smoke from -staging now to see whats what. [16:05] adam_g, thanks v much [16:08] I want to setup my 1st HA cluster. Anybody have an opinion on best storage options and why? GlusterFS, corosync, or pacemaker? [16:09] zul, jamespage https://code.launchpad.net/~gandelman-a/ubuntu/saucy/cinder/anyjson_min/+merge/172455 + http://people.canonical.com/~agandelman/ca/havana/python-anyjson_0.3.3-1~cloud0/ if you get a sec [16:10] adam_: +1/+1 [16:12] adam_g, just as an aside - you don't need to bump the package version number if the branch is still marked as UNRELEASED [16:14] jamespage, ah, ya. 'dch -i' [16:14] adam_g, dch -t is the trick [16:14] ty [16:15] for team stuff [16:15] yolanda, ipxe fix uploaded - thanks! [16:16] great! [16:30] hello friends [16:31] I have an SSD that is throwing tons of I/O errors. I'm pulling an image from it now to put on another SSD, but the disks utility is showing me that, so far, 45 MB of data is unreadable and replaced by zeros. Is there any way to match up what areas are unreadable and what data resides there? I'm betting no, but, figured I'd ask in case anybody has any tricks. [16:43] hallyn, poke [16:43] Setting up lxc (0.9.0-0ubuntu16) ... [16:43] chfn: PAM: System error [16:43] adduser: `/usr/bin/chfn -f LXC dnsmasq lxc-dnsmasq' returned error code 1. Exiting. [16:43] dpkg: error processing lxc (--configure): [16:44] hallyn, did you ever encounter something like the above ? (thats inside a chroot) [16:47] ogra_: jikes. no. [16:47] ogra_: what does /var/log/dpkg.term.log or wahtever show? any actual error from the chfn ? [16:48] hallyn, well, hard to tell, thats during a package build [16:48] what the... why is package build doing that? [16:49] it is a kind of weird setup ... it is a scritp inside a source package that debootstraps a fakechroot, installs a few packages and then runs update-initramfs [16:49] ubuntu-touch-generic-initrd [16:49] any opinion of using swap on an SSD for a server? [16:49] my last change added a package to the packages installed inside the chroot that depends on lxc [16:49] cluster/NFS/HA question (any help would be greatly appreciated....): http://askubuntu.com/questions/315491/setting-up-cluster-configuration-using-an-existing-web-server-as-a-primary-node [16:50] ogra_: it looks like it's missing some quotes around "LXC dnsmasq" [16:50] lemem check the saucy source [16:50] ogra_: so that's coming out of lxc.postinst. package build should nto be doing that [16:50] hallyn, i wonder if the lxc.postinst probably just needs single quotes [16:52] on the other hand there is a "PAM: System error" above [16:52] ogra_: but why is postinst being executed during package build? [16:52] yeah [16:52] something's messed up [16:53] it is executed inside the fakechroot i use for building [16:53] not during package build [16:53] oh, well the PAM error may just be from a hook at chfn [16:53] lxc is simply installed as a dep [16:53] 16:48 < ogra_> hallyn, well, hard to tell, thats during a package build [16:53] oh i see [16:53] right [16:53] gotcha [16:53] ok lemme try building and see what i get [16:53] oh, do you have a custom pam stack? [16:53] note that this is armhf only [16:54] nope [16:54] all i do is: debootstrap under fakechroot ... then chroot into that and apt-get install three packages [16:55] run update-initramfs and then dpkg collects the resulting initrd from inside of the chroot [16:55] ok, i'll try building on arm too (but amd64 first - who nows i may have effed it up) [16:55] lxc is simply pulled in as dep of one of the three [16:56] note the same should be true of libvirt which does the exact same thing [16:57] well, the only thing that comes to mind is the space in the gecos data ... the error doesnt really look like the quotes are respected at all [16:57] agreed [16:57] but i don't see why ' would be respected if " was not [16:57] it soudns to me like some script is doing the wrong thing [16:57] ' are always higher level than " [16:58] they prevent expansion of variables inside them, but we're talking about something else not respecting them... [16:58] yeah [17:03] my($gecos_name,$gecos_room,$gecos_work,$gecos_home,$gecos_other) [17:03] = split(/,/,$gecos); [17:03] thats what adduser uses internally t call chfn [17:03] *to [17:13] Hi to all [17:14] i have a question ... [17:14] Anyone know how to put confirmation when replacing files in ubuntu server? [17:16] cyberjose: During what sort of operation? [17:19] Hi Pici, yes, for example when i replace a file "cp file1 file2" .. cp: overwrite `file2'? [17:19] in ubuntu server only be replaced without any confirmation [17:20] in ubuntu server I do not see "cp: overwrite 'file' ?" [17:21] and in red hat is usuary see that confirmation [17:22] cyberjose: use cp -i instead [17:22] ohh... i want to test [17:23] cyberjose: cp -i /etc/passwd /tmp ; cp -i /etc/passwd /tmp [17:24] THANK YOUUUUUUUUUUUUUU [17:24] :-) [17:25] :) [17:25] ogra_: I can't reproduce it on amd64 at least. does stgraber have the same setup you do so he can try? [17:25] * hallyn goes to find his arm laptop [17:26] hallyn, i cant reproduce it in a local build either [17:26] (on arm) [17:26] i just gave back the package ... https://launchpad.net/ubuntu/+source/ubuntu-touch-generic-initrd/0.7/+build/4764556 ... [17:27] probably it is a byuildd hiccup [17:27] *buildd [17:27] ok [17:30] bah [17:30] same error [17:32] ogra_: looks like all the chfn calls fail but it's only fatal for lxc [17:32] hmm [17:32] ogra_: dnsmasq-base's adduser call fails too (a few lines before lxc's) [17:33] hmm [17:33] auth sufficient pam_rootok.so [17:34] might be that [17:34] (from /etc/pam.d/chfn) [17:34] i'm running under fakechroot inside a builder chroot [17:37] i dont really get why i cant reproduce it alt all [17:46] Hello friends. Problem with Ubuntu Server 12.04.2. When I log into it via CLI @ main screen, it just loops back to login. Is this a home dir issue? [17:47] roasted: probably a lot of things can lead to this. can you log in via ssh and look through logs? [17:48] sarnold: I can't SSH at the moment to it. I p ulled the SSD out of it to take with me and run a full scan on my laptop as I'm on the go today. The scan failed so I did an image backup and deployed it to an identical unused SSD I had available. [17:48] sarnold: then I found a spare desktop, put it in, fired it up, and here we are. [17:48] roasted: ah, so you could mount the thing from another machine and check logs that way? [17:49] sarnold: good call. Let me try that [17:50] sarnold there's nothing in the syslog beyond 4 hours ago. [17:50] earlier than 4 hours ago, I should say [17:52] roasted: -nothing-? o_O [17:52] not in /var/log/syslog [17:52] my SSD was dying, mind you [17:52] the image pull left out 108 MB of unreadable data and replaced it with 0's [17:52] /var/log/auth.log ? [17:52] roasted: ouww :( [17:52] but I deployed it anyway on the off-chance that maybe it would work [17:52] it was one of those 'why not' things [17:52] hehe [17:53] authlog stops around the same time syslog did [17:53] me thinks I might be burned to do a fresh install :( [17:53] I cannot put into words how little interest I have in doing that. [17:54] I thought maybe my home dir got messed up [17:54] and I'd have to recopy skel or something [17:54] but maybe that's just on the regular GUI variants of distros [17:58] hallyn: is there an easy way I can, from the host, run a command in an already-running system lxc container? Or do I have to go the route of arranging something over ssh or similar? [17:59] hallyn: nm. I found lxc-attach. [18:01] sarnold: can you think of any reason as to why the login would fail? I'm at a loss. [18:02] roasted: locked account in /etc/shadow, missing account in /etc/shadow or /etc/passwd, non-executable shell in /etc/passwd, one of the shell's dynamic libraries fails to load at link time, shell .rc files exit rather than continuing on, apparmor MAC rules may be confining shell or getty or pam_apparmor could be invoked in the PAM stack... [18:03] roasted: perhaps home directory missing or incorrect permissions, but that seems less likely [18:04] home dir is intact, but I cannot tell permissions from my laptop [18:05] oh, if the filesystem is busted, a process trying to traverse directories and open files might cause the kernel to kill the process in the event of kernel crash.. [18:06] I'm in root recovery. Things look good on the home dir front. [18:07] I need help debugging NFSv4. I have created some exports on the server. I can see the mounts on the client using showmount -e. When I try to mount shares, however, it just hangs on the client. I mount with: mount.nfs4 corvina:/exports/video /net/video I have disabled firewall. I do not see anything in the logs. What to do next? [18:08] jamespage, b1 in havana-staging is a bit roughg [18:08] *rough [18:09] sarnold: I see at 9:48 AM this morning an entry says Kernel logging (proc) stopped. [18:11] roasted: machine shutdown? or .. otherwise? [18:13] rbasak: ack [18:13] sarnold: at 9:48 AM this morning the system was running. That could be when the SSD began crapping out again. [18:13] sarnold: I didn't pull the drive until about 11 AM [18:20] jamespage, deployment fails on install-errors on keystone and nova. keystone packaging issue addressed since b1, this addresses the nova: https://code.launchpad.net/~gandelman-a/ubuntu/saucy/nova/pyparsing_min/+merge/172639 [18:20] zul, ^ [18:21] not sure if it makes sense to retroactively fix whats in -staging now, or press on trying to get -staging updated with something more recent [18:22] adam_: i think it makes more sense getting ready for havana2 rather than havana1 [18:24] zul, ya. so whats the plan with kombu [18:25] adam_: well i uploade da new py-amqp this morning, get that reviewed by an archive admin, then get the MIR, promote it, and upload a new kombu [18:27] adam_: sound good? [18:27] zul, ah, cool [18:27] zul, when does h2 come? [18:27] adam_: next week i think [18:28] zul, is that enough time? [18:28] adam_: yeah [18:28] or do we patch requirements.txt? [18:28] adam_: it will be enough ill make sure of it [18:28] actually havana2 is on the 18th [18:33] zul, im going to propose a patch to requirements.txt so we can continue testing havana. its totally busted without, until kombu is updated [18:33] adam_: ack sounds good === _ffio_ is now known as ffio [19:49] jamespage, thoughts on setting up tarmac to land approved changes to packaging branches? we'd need to get the bot commit access to the lp:~ubuntu-server-dev branches [19:51] bbl [19:51] adam_: do it [20:00] would anyone mind taking a look at my bootchart? It seems like each node in my cluster takes forever to boot but I am having a hard time nailing down the service that is slowing it down: http://i.imgur.com/fi9Pd4r.png (warning, large image!) [21:37] hello guys, anyone familiar with NewRelic monitoring? I am trying to monitor a tomcat application but I have no idea where to put the files [21:37] jdstrand, heya, around? [22:14] adam_g: hey, for a few minutes. what's up? [22:16] jdstrand, nothin urgent just wondering if there was anything that needed to be done to progress https://bugs.launchpad.net/ubuntu/+source/python-markdown/+bug/1187191 [22:17] pinging me wsa good. I'll get someone (me or someone else) on it [22:18] jdstrand, oh, cool. :) [22:58] quick question. does the installer install the basic ubuntu server task and then run tasksel for additional packages or will installation necessarily result in having lamp? [22:59] wxl: installation gets you very little by default; you can install what you need with apt-get install or tasksel as you wish [22:59] wxl: if you're automating many installs, preseed files let you specify additional packages to include [23:00] danke sarnold [23:00] i don't want much to begin with :) [23:00] :) [23:01] is networking handled automatically or will i need to set it up? [23:01] wxl: iirc, you get asked for dhcp vs manual configuration, and it's left at that. === koolhead17 is now known as koolhead17|zzZZ [23:02] sarnold: great, thanks a ton! [23:07] wxl: have fun :) === wedgwood is now known as wedgwood_away [23:37] this could do more harm than good but I'm trying to figure out what happened. 1) installed xen 2) didn't really utilize it 3) added static IP entry in /etc/network/interfaces [23:37] 4) restarted networking 5) nothing changed (assume arp was kept around) 6) rebooted box got static IP [23:38] the strange part was that when I tried to use domain names rather than IP addresses I got hanging i.e ping google.com had no response but ping 8.8.8.8 worked as expected....anyone seen this before? [23:39] r0tha: check the resolvers in /etc/resolv.conf and make sure you can reach them -- perhaps your gateway, netmask, or default route is misconfigured [23:39] *after removing the virtual bridge / xen-tools everything "magically started working" [23:40] sarnold: before I restarted this had 8.8.8.8 [23:40] i might have to just charge this to the game and read more docs meh [23:41] can't go wrong with reading more docs, hehe :) [23:41] but it would seem funny to me if you could ping your resolver but not actually resolve hosts with the resolver.. [23:43] aha, dns-nameservers would be hella important for eth0 [23:45] ha, that's totally it if i remove it and restart networking i see similar behavior [23:46] although this time ping says "unknown host" instead of just hanging