=== Aww is now known as [[Aww]] === [[Aww]] is now known as Aww === LargePrime is now known as Guest54294 [02:47] anyone here who runs powerdns/any other dns server? [02:47] I'm running pdns and it dies in the middle - cant find anything suspicious in the logs [02:48] grep "error" /var/log/daemon.log = nothing [02:53] I've never heard of this powerdns [02:53] bind logs to /var/log/syslog [02:54] qman__: never? o_O I thought you were a DNS -guy-! [02:55] will installing a wm (openbox) on a server affect the security? [02:55] yes [02:56] why? [02:56] every piece of software you install will have an effect on security [02:56] ok [02:56] ty [02:56] and X tends to have more than its share of security surfaces.. [02:56] in regard to X and supporting apps in particular, X11 uses network sockets internally [02:57] it's a complex system and unless you've got a default deny firewall, I would strongly recommend against it [02:57] qman__: This one logs to /var/log/daemon.log. grep "error" shows this error in the current log file : Jul 31 14:21:05 machine1 snmpd[1966]: net-snmp: 33 error(s) in config file(s) [02:57] true. good to know. [02:57] thanks [02:58] codepython777: here's google's cache on the logging part of the pdns syslog docs: http://webcache.googleusercontent.com/search?q=cache:KTOMeQoYlsQJ:doc.powerdns.com/html/syslog.html+&cd=1&hl=en&ct=clnk&gl=us&client=ubuntu [03:00] sarnold: when the crash happened, it was logging into daemon.log - the only line that looks bad is that net-snmp line [03:01] am not sure that killed the pdns daemon thou [03:01] codepython777: yeah, snmpd errors don't seem likely.. :/ [03:01] codepython777: maybe check dmesg, see if there's segfaults? [03:02] dmesg | grep seg - but i did reboot after the crash. [03:02] null there [03:02] I tried syslog as well - no luck there === thumper is now known as thumper-afk [05:30] ls : cannot access /usr/lib*/librt.so*: No such file or directory [05:30] how to fix this problem? === koolhead11|away is now known as koolhead11 === smb` is now known as smb === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === thumper-afk is now known as thumper [09:37] ikonia: I am now :-) [09:43] Hi - are there any tools that will allow me to compare what packages are installed on a number of servers? [10:07] stetho: it's a really common question. Try AskUbuntu, and look into "dpkg -l" and "dpkg --get-selections". [10:08] rbasak: The question is about comparisons - are there any tools? I can get the lists but I've got 17 servers to compare. [10:09] stetho: I don't know about dedicated tools. I've always used general Unix tools to do this sort of thing. sort, diff, comm, etc. [10:09] IMHO, they serve the task perfectly. [10:10] rbasak: That seems to be the answer I'm finding. Cross referencing 17 text files is going to be a pain. [10:10] stetho: you might be interested in meld. It's a nice GUI. Not sure if it does things 17 ways, but looking at two side by side works well. [10:10] I'll have a look. Thanks [10:12] Beyond that, there are services like Landscape that manage packages across multiple servers. But that's commercial. [10:14] smoser: I'm interested to hear your thoughts on http://irclogs.ubuntu.com/2013/08/01/%23ubuntu-quality.html#t09:47 [10:14] smoser: for nested KVM, we'd like to provide a read-only cloud image disk to a guest, so that it may use that to start nested guests. But it screws up because (we think) of duplicate filesystem labels. [10:47] Here's a mystery.. process list http://sprunge.us/hFiF memory http://sprunge.us/GACa http://sprunge.us/VXTG ... where is all the memory going? [10:47] I killed everything I could kill and still the free memory has not come back [10:48] ipcs -m is empty and slabtop looks much the same on this and another server in the pool which is using very little memory [10:49] df shows about 360K in tmpfs [11:10] Anyone know if I can use the same cert / key / chain SSL files for both nginx and apache? [11:20] <_ruben> chmac: sure [11:20] <_ruben> chmac: well, assuming they're in a format understood by both [11:27] _ruben: Awesome. What are the apache equivalents of nginx's ssl_certificate and ssl_certificate_key? [11:27] The key one is obvious, but the ssl_certificate is the tricky one, I can't find an apache equivalent [11:27] On nginx the ssl_certificate contains, in this order, server's cert - intermediary - ca [11:34] <_ruben> chmac: i think the trick is to have both SSLCertificateFile and SSLCACertificateFile point to that file [11:34] _ruben: Ok, let me check that out, thanks [11:36] _ruben: Do you mean SSLCertificateChainFile instead of SSLCACertificateFile? The latter is for Client Authentication according to my reading of the docs https://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile [11:48] <_ruben> chmac: interesting, that's how I read it too, but SSLCACertificateFile is what we use on our servers [11:48] _ruben: As far as my experiments go, I can't put more than one cert in the SSLCertificateFile directive or apache fails to start with "Init: Multiple RSA server certificates not allowed" [11:48] <_ruben> chmac: hmm .. I played with a similar setup some time ago. If only I could recall which server that was ;) [11:49] _ruben: Are you sure your server is actually serving the intermediate certificates? I understand that most browsers work fine without the intermediaries... [11:49] _ruben: lol [11:49] _ruben: If I had a penny for every time I thought, oh yeah, I've done that, now where was it… :-) [11:52] <_ruben> heh, yeah [11:52] <_ruben> the joys of central configuration management .. if only our nginx/apache configs were part of it ... :) [11:59] morning ya'll.. i have a question.. when i login to our boxes, we get the notification from the motd, that 'x' # of packages are available for update.. is there a command to run to see which packages are available for update? [11:59] or a file to read that would show this [12:00] <_ruben> chmac: i know it's possible, just forgot how. and dont have the time to dive into atm :/ [12:00] _ruben: You're sure the server is sending the intermediary certs also? [12:01] I'm not sure how to actually check / verify that, over my head at this point! [12:01] <_ruben> brendan-: apt-get dist-upgrade would show that for instance [12:01] <_ruben> chmac: pretty sure i tested that [12:01] but then you need to have user interaction to deny the upgrade [12:01] <_ruben> chmac: testing it is trivial if the site's reachable over the internet. tons of ssl checkers out there [12:01] brendan-: There is a command, give me one sec... [12:02] ok ty [12:02] brendan-: /usr/lib/update-notifier/apt-check --package-names [12:02] my goal is to have a cron that runs and grabs the list which is either emailed over or just dumped to a text file [12:02] brendan-: That script is the workhorse of all that stuff, it has a few options [12:02] brendan-: Then what you need is security-update-notifier my friend! [12:02] ok great. thanks. let me check it out [12:02] http://github.com/chmac/security-update-notifier [12:02] :-) [12:02] lol [12:03] shameless plug [12:03] :D [12:03] brendan-: There's even a puppet module! http://forge.puppetlabs.com/chmac/security_update_notifier [12:03] brendan-: It's an ugly hack, but it does the job [12:03] very nice [12:03] we use PE here [12:03] <_ruben> if only i could time to dive into puppet :/ [12:03] brendan-: Just pings me when there are security updates outstanding [12:03] you need some examples on the forge [12:03] brendan-: But if you want to know every time any update is available, apt-get install apticron will do the trick [12:03] brendan-: I look forward to your pull request ;-) [12:04] <_ruben> our current homegrown config management stuff is become way too limited over time [12:04] and i dont want to pay for landscape [12:04] brendan-: http://github.com/chmac/puppet-security-update-notifier [12:04] too expensive for [12:04] only needing patch management [12:04] brendan-: We're using scaleXtreme, for $10/server/month they'll do all that jazz for you [12:05] _ruben: FWIW, a year or two into my puppet experience, it's a bloody nightmare. augeas is supposed to be great, but honestly, just managing 3 servers, it gets outrageously complicated figuring out what goes where [12:05] we have 35 VMs with PE [12:05] and adding more [12:06] brendan-: We're using the free version, but for maybe even $5/mth/server then you can push updates to them all automatically [12:06] chmac: but you can control what gets pushed? [12:06] brendan-: Yeah, there's a web interface and all, shows what's outstanding, etc [12:06] brendan-: It's a little scary, you can run anything you want on all / some of your machines! [12:06] hmm, /usr/lib/update-notifier/apt-check --package-names gives packages, any way to see the versions its going from and to? [12:06] Give them a command and they'll run it as root on all boxes, not sure I like somebody having that much power, but hey, it's free! :-) [12:07] brendan-: Not sure, try running it with --help [12:07] i can see yeah, man apt-check didn't work [12:07] :D [12:07] brendan-: There's also unattended-upgrades I think [12:07] Right, there's no man page, and it's not in the path, took me a while to dig it out [12:08] brendan-: If you do end up using security-update-notifier, I'd be grateful for a heads up [12:08] i need to read through the module and see what it does [12:08] I built it out of frustration, and it's pretty ugly, but nice to know if it's useful anywhere else [12:08] brendan-: The puppet module only installs the script, in a pretty ugly way, it uses a file{} to copy the script onto each machine and then throws it in cron I think [12:09] brendan-: It's *very* crude, but it works on our ubuntu machines, can't promise on any other flavour! [12:09] no luck with the --help. options for that are (-h/--help, -p/--package-names, --human-readable, and --security-updates-unattended) [12:11] fair enough chmac [12:11] i got modules like that as well [12:12] as long as it works [12:12] can go back and refactor [12:12] brendan-: Ooh, maybe --security-updates-unattended is new, don't recognise it, which ubuntu version? [12:12] 12.04.2 [12:12] --security-updates-unattended [12:12] Return the time in days when security updates are [12:12] installed unattended (0 means disabled) [12:13] brendan-: My bad, I have it, just ignored it [12:13] I thought it might actually install the updates [12:18] the /usr/lib/update-notifier/apt-check --package-names is a big help though [12:18] to at least see what types of things are pending updates [12:18] brendan-: Yeah, only challenge is that it doesn't separate security / regular updates [12:18] true [12:18] but ehh [12:18] brendan-: I generally ignore non security updates on our production machines [12:19] brendan-: Only way around that I can figure is by modifying the apt-check script, it's python I think [12:19] yeah, looking at the script it is python [12:23] brendan-: If you find a way to get only the security updates, or if you're interested in collaborating on doing that, let me know [12:24] i saw def isSecurityUpgrade(ver) [12:24] in the script which is a function but its a matter of looking where that checks [12:25] line 124 [12:25] then 136 [12:26] so its getting a list from somewhere then doing a comparison and doing a count [13:17] rbasak, correct. [13:17] it will screw up because of duplicate filesystem labeles [13:39] smoser: is there any better way to get it not to do that, but still pass the image through so the guest can use it? For now, we're hotplugging the disk after the system has booted. I feel that there should be a better way, because passing an arbitrary disk image seems reasonable, even if it does have a conflicting label, provided we can flag it as such. [13:39] smoser: nm, just seen #ubuntu-quality. [13:58] For a 64 bit ubuntu server install any idea how much memory\space is consumed after install without running anything extra [14:50] Does anyone know if there is a JeOS equivalent in the latest Ubuntu? I want a minimal server installation with no services running. I want to make a VM that people can download from my site and the smallest I am able to build now is about 800mb :( [14:56] marcoceppi: Hey, if i wanted a python 2to3 conversion lint test for all *.py files in charms.. would you be the right person to poke? [14:57] Daviey: you mean an automatic 2to3 conversion test in the jenkins testing scheme? [14:57] marcoceppi: Testing that conversion cleanly happens [14:58] Daviey: Me or mims would be good to talk to, but mims is on vacation [14:59] marcoceppi: Ok, great - i think you will rock my world [14:59] marcoceppi: Basically, we want to make sure that all *.py files in charms cleanly convert.. for when we move to 3 in the future [14:59] Daviey: Sounds simple enough [14:59] hi, good day, just a quick question, can someone please recommend a good PCI approved network scan program/package? [15:00] worms: have you considered using the cloud images? I'm not sure about nothing running an services at startup but theyr'e about 200MB in size [15:00] http://cloud-images.ubuntu.com/releases/ [15:00] they are pretty stripped down [15:00] I will have a look. Thanks! [15:03] Daviey: so we can add a task to the charmtester to make it an arbitrary job, or I can make a juju plugin that just attempts a 2to3 conversion on all .py #! python files [15:03] Daviey: what are the requirements you had for this? [15:03] marcoceppi: umm...what? [15:04] Daviey: 2to3 is a nice tool but it doesnt catch everything [15:05] s/2to3/whatever tool makes sense/ [15:05] It'd probably be something like 2to3 then run unit tests/functional tests in charm if they exist [15:08] zul: Wat do you suggest? [15:08] zul: I really just want a smoke test, if there is something better.. make it so :) [15:09] Daviey: i use python-modernize in conjunction with 2to3 [15:11] zul: can you work with marcoceppi to get this nailed? :) [15:11] Daviey: uh...i only got the tail end what do you want to do? [15:12] zul: Daviey so the tool to run is a bit irrelevant, the method it what's more important to me. Do you invision doing a one-off run or do you want it part of the regular daily charmtester stuff? [15:12] a bit irrelevant for me* [15:18] marcoceppi: Either. Probably regular [15:18] marcoceppi: Maybe just part of the lint tooling you are doing? [15:19] Basically, an easy to identify status on conversion ability [15:19] And impartiality, harder to regress [15:19] Daviey: I'm not doing any lint tooling directly, more like testing-helpers [15:20] marcoceppi: Hmm, that could be it [15:20] Daviey: So charmtester will be getting an overhaul after this week, I'll keep this in mind and just add a job to test all python files based on zul's recommended methods for linting 2to3 [15:20] charmtester == jenkins [15:21] Daviey/marcoceppi: porting python charms should be pretty easy shouldnt it? its not like they are overly complicated [15:21] (or shouldnt be) [15:21] zul: well, a good portion of charms are pretty straight forward, but some can be quite complex [15:22] marcoceppi: true [15:22] Identifying conversion problems will provide more visability to charm authors of what they need to fix [15:22] right! [15:23] chmod +x, isn't hard to do.. but seems people forget :) [15:25] Daviey: like disabling a patch before a build and then forgetting to re-enable it after? [15:26] zul: who would possibly do such a thing? :) [15:26] Daviey: surprising it happens a lot [15:27] zul: Are you ready to cry? [15:28] Daviey: yes [15:29] zul: pep8 has been refreshed, as policy. Which means that openstack will need a pretty big refresh, i suspect :) [15:29] http://hg.python.org/peps/rev/fb24c80e9afb [15:30] Daviey: something to push and increase our contributions ;) [15:31] zul: nah, don't need that. [15:32] Daviey: well they use flake8 now which uses pep8 (i think) so the point is mute [15:32] and we dont run the pep8 tests anymore during the builds eitther [15:34] marcoceppi, i had a TODO item that i just remembered.... [15:34] adam_g, also maybe important to you. [15:35] we're writing charms in python, right? (ie, the openstack charm cleanup) [15:35] if we're writing new code, we really need to be making sure that that new code is python3 functional. [15:35] are we doing that ? [15:37] zul: right, but flake8 will be refreshed. And agreed, it's an upstream issue, not a package building issue [15:39] smoser: I think that's Daviey's point. Check the charms for python3 compat [15:41] However, this is important. I don't think python3 compat is that important. [15:42] well, it sort of is. [15:42] Charms do whatever they want, as long as there is a python2.x in the archives an install hook could easily install it if written in a language that installed by default [15:43] at some point in the not so distant future, the "How can I get /usr/bin/ruby in the image to write charms in ruby", will also apply to '/usr/bin/python' [15:43] Are you moving to python3 default in the next LTS [15:43] s/are you/are we/ [15:43] ? [15:43] i suspect that we will not be completely rid of python in images in 14.04. but i would like to be. [15:44] but its not so much that you can pick any language you want to write charms in [15:44] (thats acceptable / a-good-thing) [15:44] smoser: Oh. This is a more interesting issue. So really we need to address the "How can I preinstall packages needed for hook exec" [15:44] its that at this point in the history of the world, writing *new code* that is not python3 compatible is a-bad-thing. [15:45] smoser: Right, I think it should be considered a best-practice for those writing hooks in python. I'd be interested to see the results of the constant checking [15:45] Not sure I'd make it a physical blocker for charms anytime soon though [15:46] i personally dont care about anyones efforts other than canonical's here. [15:46] ignoring that now costs money later. [15:46] if that is someone elses money, i dont care :) [15:46] smoser: its still going to be a long while until openstakc is python3 compat [15:46] smoser: right, I'm just thinking from a charm community pov [15:47] so its just somethign to be aware of. [15:47] smoser: ack [15:47] even if 14.04 has /usr/bin/python [15:47] 14.10 or 15.04 probably doesnt. [15:47] and 16.04 does not. [15:47] (by default) [15:47] right, so for 14.04, that's important for us since we're writing charms against LTS by default [15:48] barry may have significantly strong feelings that differ with my statements above :) [15:57] marcoceppi: I am expecting stock ubuntu images to be python3 only for 14.04, but many non-default packages easiy pull it in. [15:57] marcoceppi: Our strategy to convert to py3 is mostly around making sure we have supporting for auto-conversion [15:58] So, we need to make sure that autoconversion has some basic lint testing [15:58] Breaks/Replaces issue with /usr/bin/juju? Bug 1206539. [15:58] Launchpad bug 1206539 in juju "package juju (not installed) failed to install/upgrade: tentative de remplacement de « /usr/bin/juju », qui appartient aussi au paquet juju-core 1.11.4-1~1514~precise1" [Undecided,New] https://launchpad.net/bugs/1206539 [15:58] Daviey: Right, but we made the mistake from oneiric -> precise where we just pushed all the charms forward. We likely won't be doing that this time. Instead having authors manually re-submit for the next LTS [15:58] Daviey, cloud-init is the biggest thing that i'm aware of. [15:58] This could be part of that process though [15:58] marcoceppi: For reference, upstream openstack is now gating on py3.3 compatibility.. We are pretty near the py3 switch :) [15:59] It'll be at least a week before I can take a look at this, but when I do I'll just have an extra jenkins job run so we can start gathering data [15:59] marcoceppi: Hmm, I want a BIG warning if auto conversion isn't looking clean [15:59] marcoceppi: What do you mean by, "we made the mistake from oneiric -> precise where we just pushed all the charms forward" ? [16:00] purely curious: anyone here with substantial experience with packaging and packages know how Debian package policy violations are handled in Ubuntu?P [16:02] TheLordOfTime: best to mention a specific bug really [16:02] https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1206878 [16:03] Launchpad bug 1206878 in nginx "Configuration should be purged only in nginx-common" [Undecided,Confirmed] [16:03] SpamapS: also privmsg'd the bug to you [16:04] TheLordOfTime: looks about right :-P [16:04] TheLordOfTime: we can cherry-pick that patch if it matters, otherwise pick it up from Debian on the next merge/sync? [16:04] SpamapS: at this point, there's a patch in Debian that was adopted and probably is usable, the only thing I need to worry about right now is getting the bug to Triaged/[SomePriority] [16:04] rbasak: this affects Precise [16:04] AFAICT... [16:04] Found in version nginx/1.2.0-1 [16:04] Fixed in version nginx/1.2.1-1 [16:04] Looks like it needs an SRU then :) [16:04] ^ from Debian BTS [16:04] TheLordOfTime: Error: "from" is not a valid command. [16:04] shut up you bot [16:05] rbasak: what about the bug priority? [16:05] If I set up dhcp peers, will they share lease information? Or does the peer system just keep all but one of the peers from responding to lease requests? [16:05] I'll handle the SRU after i'm back from vacation, but right now I"d like to set that to Triaged/[somepriority] and I'm unsure of the relationship between level of the violation and ubuntu bug priority [16:06] IMHO, it's not really about the level of policy violation, especially for a stable release. The priority should be based on the impact it has to real users. [16:07] t's subjective, I'd go with Medium, since it's not going to affect that many real users, as it's an edge case. [16:07] Thanks for volunteering for the SRU! [16:08] * SpamapS raises the bug to Critical [16:08] throwing peoples' configs away == Critical [16:08] * patdk-wk raises a beer [16:08] ^ that [16:09] TheLordOfTime: Error: "that" is not a valid command. [16:09] SpamapS: while you're there, you able to approve the Precise nomination? [16:09] TheLordOfTime: somebody did :) [16:09] cool. [16:11] SpamapS: note: 1.2.1-2 was in Quantal and the fix in Debian was in 1.2.1-1 so Quantal and later are Fix Released [16:11] (bug set as such) [16:14] SpamapS: no harm in setting "In Progress" and assigning myself, then sitting on my hands until I'm back at home to create the SRU, right? [16:14] (you can expect me to ask for sponsoring :P) [16:16] TheLordOfTime: the only harm is that nobody else can work on it whiel you sit on your hands. [16:17] your hands really that cold? [16:17] hehe [16:17] SpamapS: honestly, i'll have a debdiff soon enough, probably before i'm home from vacation... [16:17] but the internet on my phone is so flaky here... I'm not sure it'll be uploaded until two days from now [16:17] when i'm either at a hotel with good wifi or already at home [16:18] (flaky wifi is flaky) [16:18] good hotel wifi is flaky. :( [16:18] SpamapS: premium hotel wifi at a four star hotel, costing $9.99 for 24 hours with a consistent 54Mbps downspeed is flaky? [16:18] o.O [16:21] TheLordOfTime: They're getting better all the time at the good ones. [16:21] TheLordOfTime: for a long time the 4-star's were worse than the 2-star's [16:22] It was like, best western was giving me 10Mbits but the Hilton wouldn't even give me enough wifi signal. [16:53] roaksoax/adam_g: https://code.launchpad.net/~zulcss/keystone/refresh/+merge/178127 === natefinch is now known as natefinch-lunch === natefinch-lunch is now known as natefinch [17:45] roaksoax: refreshed https://code.launchpad.net/~zulcss/ceilometer/refresh/+merge/177898 [18:09] Evening! I just installed a new nic. I doesnt light up, but ifconfig displays eth0 eth1 eth2. What to do? [18:10] added a new one that is, I didnt replace my old card. [18:11] lightweight: try another wire? try another port on the switch? [18:12] sarnold: both wire and port on switch worked fine yesterday on another computer, same goes for the NiC [18:12] as you understand, Ive moved this stuff to a new computer now [18:12] lightweight: re-seat the nic in the computer? [18:21] Maybe check /etc/udev/rules.d/70-persistent-net.rules to see which of them are getting what designations of eth0 eth1, eth2 and so on [18:22] heh, he pinged out, wonder if he was ircing from that machine? [18:30] Probably [19:58] If I set up dhcp peers, will they share lease information? Or does the peer system just keep all but one of the peers from responding to lease requests? [20:32] I'm trying to install mongo extension into PHP after upgrading to 5.5 but it's looking in the wrong place, or it installed the shared object to the wrong place [20:32] I get PHP Startup: Unable to load dynamic library '/usr/lib/php5/20121212/mongo.so' [20:33] Sure enough it's not in that location, it's in /usr/lib/php5/20100525/ instead [20:33] But I don't understand what those date folders mean or where they're configured [20:35] OK figured it out ;3 [20:37] you did pecl install again? [20:45] Yes, but also php5-dev [20:45] Both are needed to be updated [20:46] good to know. Iḿ gonna upgrade next wekk. :) [20:46] *week+ [22:17] is there a way to track e-mail messages being sent from or from what user? [22:28] ssfdre38: I expect so, which email server are you using? [22:28] sendmail [22:37] heh, the section on logging in the sendmail manual is surprisingly short. :/ [22:38] ssfdre38: if you don't get the information you need in the logs by turning up the logging level, you might be able to get there by using a milter. [23:13] Hi Everybody! [23:15] I would like help with drbd. [23:17] Starting DRBD resources [ d(r0) 0: Failure: (104) Can not open backing device [23:40] hi [23:41] can someone help me please get the gui running on my server? [23:41] I have a vac, installed ubuntu-desktop too, but gnome-classic fails to run via lightdm and startx cannot even start. [23:41] *vnc [23:43] multiHYP: investigate xvfb [23:45] what is xvfb? [23:47] sarnold: can you elaborate? [23:47] multiHYP: xvfb is an X server that does not require hardware to function. it might be just the thing for you, if you want to use vnc. [23:47] my internet is in 1 word, crap (china like crap) without going into too much details. [23:47] multiHYP: oh man :( [23:48] i would really like to use what I already have installed [23:48] i.e. ubuntu's own desktop [23:48] without going into detail? you just well [23:48] hey Patrickdk :) [23:49] hi everyone! [23:49] well I'm behind a firewall that blocks proxies and vpns [23:49] so if this gui works might be my only chance of checking some banking stuff. [23:49] can any one can help with drb? [23:49] Brian21, till you state the issue, not really [23:51] Basically I followed this guide https://help.ubuntu.com/12.04/serverguide/drbd.html and get the following error [23:52] [ d(r0) 0: Failure: (104) Can not open backing device. [23:53] do your disks actaully exist? [23:53] and did you skip step 4? [23:53] Brian21: what command did you run that you got that error? [23:54] sudo /etc/init.d/drbd start [23:54] Brian21: did you execute step 4 on both servers? [23:55] yes [23:55] no errors [23:56] Brian21: can you paste the drbd.conf file that you used to a pastebin? (redact the secrets if you need to) [23:57] yes === gary_poster is now known as gary_poster|away [23:59] Sarnold, here's the link http://paste.ubuntu.com/5938163/ === gary_poster|away is now known as gary_poster [23:59] the whole disk?