/srv/irclogs.ubuntu.com/2013/08/02/#ubuntu-server.txt

sarnoldBrian21: are both disks identical?00:00
Brian21no00:00
Patrickdkthey need to be the same size00:00
Brian21physically ?00:00
sarnoldyes00:01
Patrickdkthis is one reason to use partitions :)00:01
Patrickdkbesides making it easier to replace a failed disk00:01
sarnoldyou can partition them both to make them have a same-sized partition..00:01
Brian21hmm  I was trying to create like 100 gb disk to test it out00:02
Brian21one of the server i got 3 hard drive (2) 1 tb and (1) 2 tb on server2 i have one 250 gig00:04
Brian21I'm open for any suggestions00:05
Patrickdksuggestions about what?00:05
Brian21if I can specify lower size with out using the whole disk?00:06
Patrickdkyou do know what a partition is right?00:07
Brian21yes its a logical section of the hard drive..00:08
Brian21well i guess im going to use virtualbox and c if that helps00:11
Brian21Thanks for your help00:14
sarnoldBrian21: have fun :)00:33
ssfdre38how do i do the insmod for iptables00:59
=== roasted_ is now known as roasted
ssfdre38ok im trying to use iptables and i keep on getting iptables v1.4.12: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)01:21
ssfdre38Perhaps iptables or your kernel needs to be upgraded.01:21
ssfdre38can i get some help to get it started back up01:22
sarnoldssfdre38: as a start, modprobe ip_tables01:23
sarnoldssfdre38: there's a lot of other modules you can load; 'filter' will require the iptable_filter module to be loaded. I'm curious if it'll be automatically loaded or not01:24
qman__ssfdre38, it's loaded by default, so if you didn't do something to prevent it from loading, you're seeing a red herring01:34
=== gary_poster is now known as gary_poster|away
martisjmorning02:15
martisjanybody had issues with apc 3.1.3p1-2 and apc unable to allocate memory for pool :....02:15
martisj?02:15
martisjit's filling up our logs quicker than we can delete it :)02:16
martisjon ubuntu 10.04.0302:16
martisj10.04.3 LTS that is02:17
martisjLucid :)02:17
qman__https://bugs.php.net/bug.php?id=5898202:18
qman__also, you're pretty far out of date on updates02:19
qman__the .4 point release was out a long time ago02:19
martisjqman__: thanks I am fully aware. but this is a choice senior dev dude has made, don't ask me why02:21
martisjhe was running the staging server on 12.xx02:21
martisjbut moved everything over to the one lucid server02:21
martisj?! :S02:21
qman__I'm not saying that running lucid is the problem (though you don't have much life left at this point)02:21
qman__just that your lucid server is way out of date02:21
qman__and if this bug is in an official ubuntu package, it's probably been fixed in an update02:22
qman__maybe not: https://launchpad.net/ubuntu/lucid/amd64/php-apc/02:25
qman__shows that as the latest version there02:25
Patrickdkmore likely out of shm memory02:25
Patrickdkoh, that is what that bug report is about02:26
martisjPatrickdk: according to our config it says apc.shm_size=3002:43
martisji tried doing the apc.mmap_file_mask = /tmp/apc.XXXXXX but it gave this error: apc_mmap: ftruncate failed: File too large02:50
martisjI shoujld probably install pecl02:52
monutoanybody feel like helping an ubuntu/linux noob? =)03:02
monutoim running ubuntu 12.04. trying to use the chat program empathy, and i'm having trouble with a plugin for skype.03:03
martisjmonuto: is this on ubuntu server ?03:07
=== Aww_ is now known as Aww
VsioZashibishi guys. how can i change default crontab editor from nano to vi ?03:50
thumperVsioZashibis: tried "export EDITOR=vi" ?04:25
qman__VsioZashibis, update-alternatives --set editor /usr/bin/vim04:27
LargePrimehello04:28
LargePrimeI am looking for advice on setting up a ssh user for a quick and dirty VPN04:29
LargePrimeHow can i give ssh to a user with a key, but keep them from running commands to accessing the server?04:29
qman__you can't04:31
qman__the only way to sort of accomplish that is to chroot them04:31
qman__they still have a shell though and can still run things04:31
qman__it's less effort to set up a VPN proper than to wall off a shell account in the manner you desire04:32
LargePrimethans qman__04:37
sarnoldyes, setting up a real vpn would be easier; that said, if you really want to go down the route of locking down an ssh user, here's some suggestions: http://wiki.apparmor.net/index.php/Pam_apparmor_example04:37
sarnoldVsioZashibis: I always just apt-get purge nano first thing, I never want to use nano so goodbye. :) hehe04:38
VsioZashibisI got it thanks gusy04:38
VsioZashibisguys*04:38
LargePrimeok so while we are at it, best practice for setting up a vpn?04:40
sarnoldLargePrime: I enjoyed using an ipsec vpn eight years ago, it Just Worked. the other VPNs I saw at the time were more annoying to configure and less reliable.04:43
sarnoldLargePrime: that said, I've heard good things about openvpn.04:44
qman__LargePrime, I use openvpn, the setup isn't too bad and if you use easyrsa, making the keys is super simple04:49
LargePrimepointers, tips, best practice? Links?04:50
qman__there's probably a section on it in the server guide, I set mine up about five years ago and haven't touched it since04:50
LargePrimei mean i have openvpn04:50
LargePrimehow often do you add /remove users?04:50
qman__not that often, but you just generate or delete the key sets04:51
qman__I've also never had any reliability issues, the only time it ever went down was during a hard drive failure04:51
qman__I was unable to restore the whole server so I just installed a new VM, copied my configs over, and it worked perfect04:53
sarnoldhaha :)04:53
qman__source was 8.04, destination 12.0404:53
LargePrimethanks qman__  and sarnold05:20
ssfdre38ok im trying to block an ip address from my server and i get this error http://pastebin.com/4e9MZ7MJ when i do it on iptables, does anyone know how to fix it?05:44
sarnoldssfdre38: what does lsmod | grep -i ipt   show?  What does iptables -n -L  show?05:46
ssfdre38http://pastebin.com/EE0ehp29 and http://pastebin.com/skhhEw7705:47
sarnoldssfdre38: interesting. do you know why /proc/modules isn't there?05:48
ssfdre38nope05:48
sarnoldssfdre38: try sudo mount -t proc proc /proc05:49
ssfdre38its already mounted05:49
sarnoldproc is mounted but not modules file? very curious.05:50
sarnoldis your kernel compiled without modules support?05:50
ssfdre38i didnt tell it not to be05:51
ssfdre38it was working before hand05:51
sarnoldCONFIG_MODULES in your kernel configuration..05:51
ssfdre38i dont even know where that is at as i never really messed with that05:56
sarnoldssfdre38: do you have a /proc/config.gz file? or a /boot/config-`uname -r` file?06:00
ssfdre38i do have the first one06:00
sarnoldaha, cool, how about gzip -cd /proc/config.gz | grep MODULES  ?06:00
ssfdre38http://pastebin.com/GmEdjfVC06:01
ssfdre38sorry its just one of those days06:01
sarnoldssfdre38: well, okay. you'll either need to recompile your kernel to include iptables, or you'll need to recompile your kernel to include loadable modules _and_ iptables modules.06:02
sarnoldssfdre38: if you just want to drop traffic from one IP, check this out: http://www.cyberciti.biz/tips/how-do-i-drop-or-block-attackers-ip-with-null-routes.html06:03
sarnold(I'm not sure that's the best guide, the domain name is certainly .. troubling .. but the commands look about right.)06:04
ssfdre38well its just i moved my work's sites onto my server and so some stuff has came along with it that im dealing with that crashed theirs so its just one of those days to find and remove all day06:11
sarnold:(06:11
ssfdre38yea its just one of those days with me06:12
=== jtv2 is now known as jtv
johndoe2Hi. I made a big bummer by starting  "sudo apt-get remove linux-image-3.2.0-2*". Now it's removing all my kernels in a loop, it seems. Can I interrupt it somehow? So far, I just stopped the process.08:32
johndoe2johndoe2, I found a solution :-)08:37
MACscrIf i wanted to boot ubuntu through pxe/nfs and then have it run from memory, any suggestions on doing this? Im not trying to install from pxe, I simply want to have diskless servers. I will though probably need to create some sort of custom image I would think as i do need to have certain software installed. Not 100% sure how that would work. It would be for an openstack compute node.08:40
xnoxMACscr: look into edubuntu, i think they support such installation type out of the box, using LTSP08:42
MACscrxnox: ok, these will be servers though08:46
MACscri will check into it closer though08:47
xnoxMACscr: I guess you want to boot that node from volume then for openstack. Maybe openstack specific forums is better, e.g. https://ask.openstack.org/question/49/any-hint-for-a-compute-node-diskless-setup-only-iscsi-netapp-persistant-disk-for-vms/08:48
xnoxMACscr: cause yet, edubuntu ltsp stuff is kind of geared towards a beefy server exporting ubuntu install (with desktop) to thin & fat clients.08:49
MACscrxnox: thanks for the edu link nonetheless. Cool stuff09:02
ole`01Hi. I have a problem with mime type of .webm videos. On my local machine, php gets the correct mime type, which is video/webm. But my virtual server gets it as application/octet-stream. Configuration has been made through a file /etc/apache/conf.d/mimetypes.conf which defines webm, ogg and mp4 via 'AddType video/webm .webm' ...09:42
=== smb` is now known as smb
msafiI'm using SSH to administer a server on Amazon cloud and reading a book on Ubuntu server administration12:49
msafiThe book talks about the possibility of installing a GUI...can I really install and use a GUI through SSH?12:50
* msafi doesn't wanna install a GUI and not be able to use it...12:50
mardraumyou can tunnel X11 over ssh, yes12:51
mardraumwhy on earth you would want to is another question12:51
PiciIt will be extremely slow... also, there are not that many gui front ends for things that are meant to be installed on headless servers.12:52
Piciand if there are, they're web based.12:53
msafiIt sounds complicated even12:54
msafiMany people these days administer servers using SSH, so I'm not sure why this popular book is covering GUIs12:54
mardraumbecause it's a popular book? :P12:55
mardraumwritten for noobs12:55
msafiThis is the one: http://www.amazon.com/Beginning-Ubuntu-Server-Administration-Professional/dp/1590599233/12:55
msafiAnyway, thanks for the help. I'll go ahead and skip the GUI section...12:56
=== daker_ is now known as daker
zulroaksoax:  https://code.launchpad.net/~zulcss/glance/refreshed/+merge/17829813:43
psivaahallyn: reported bug #1207675 for an lxc test failure in the saucy smoke suite. has happened twice out of 4 attempts.13:53
uvirtbotLaunchpad bug 1207675 in ubuntu-test-cases "test_lxc_api test fails during container creation " [Undecided,New] https://launchpad.net/bugs/120767513:53
resnoi have vsftpd setup but it wont let my user create a directory, but it will allow them to upload files.13:58
resnoyou cant stop apparmor?14:33
zulroaksoax:  https://code.launchpad.net/~zulcss/nova/refreshed-1/+merge/17831414:43
=== james_ is now known as Guest30414
d4mSeeing bad signature errors on ubuntu repos on ec2 and s3, any maintainers here?17:17
jdhigh9000anybody know if using symlinks from thunderbird to the mail folder /home/user/mail will work with mutt?17:19
sarnoldjdhigh9000: I'd be careful to use read-only mode in mutt, no need to seriously confuse thunderbird17:20
jdhigh9000sarnold: thanks for the heads up. im a newbie :)17:21
=== smw__ is now known as smw_
=== james_ is now known as Guest23475
mgwIf I set up 2 or more dhcp peers, will omapi updates (and leases, for that matter) propagate across the peers? Or is the peer system merely for ensuring multiple servers are not trying to answer dchp requests?17:59
=== ogra_ is now known as _ogra_
=== _ogra_ is now known as ogra_
mynameisdeletedso... custom ubuntu install designed around one piece of software as an appliance18:22
mynameisdeletedplan to distribute as a virtualbox image, but maybe later a cdd for server.. I think best way to make it work in every server or virtual environment is as a kcikstart file that works with regular install cd18:23
mynameisdeletedI want this to ask user to configure stuff onthe first boot before the first login too.. software settings18:24
=== hggdh_ is now known as hggdh
TimothyA1hello, this morning I did an apt-get upgrade and it appears GRUB has been failing in a couple of ways. the server has a software RAID-1 setup and /dev/md1 and /dev/md2 as its disks. These are pastes of output of prior diagnostics: http://paste.ubuntu.com/5941192/ http://paste.ubuntu.com/5941199/19:30
TimothyA1is this machine still safe to reboot?19:31
sarnoldTimothyA1: I'd be scared too...19:32
TimothyA1I've had GRUB complain multiple times in the past, but then it at least still showed /dev/md1 and /dev/md2 as an option to install it19:33
TimothyA1now it only gave /dev/md1 as an option and complained it could not find the drive19:33
TimothyA1if I were to reboot the machine and it wouldn't boot up, would there be a way to fix this in a recovery shell?19:34
TimothyA1I'm rebooting...19:37
TimothyA1it's safe :D19:39
TimothyA1fwew19:39
TimothyA1now on to a different issue; why is apt holding back my mysql-server packages?19:40
sarnoldTimothyA1: nice!19:40
TimothyA1....and the PHP update broke PHP... excellent19:41
* TimothyA1 bangs his head on the wall19:41
TimothyA1okay, that's fixed. now, the mysql-server issue...19:44
TimothyA1The following packages have been kept back:  mysql-client-5.5 mysql-server-5.5 mysql-server-core-5.519:45
=== SJrX is now known as SJr
koolhead17adam_g, hola21:22
adam_gkoolhead17, highvoltage21:23
adam_ger21:23
adam_gkoolhead17, hi21:23
adam_g:)21:23
koolhead17adam_g, how have you been sir?21:23
adam_gkoolhead17, doing good, you?21:23
koolhead17adam_g, alive/sleepless21:24
koolhead17insomniac21:24
koolhead17arosales, hi there21:28
koolhead17its been while i spoke to folks here21:29
arosaleskoolhead17, hello23:20
arosaleskoolhead17, sorry for the late reply.23:20
pHcFhi, i'm looking for a tool to sit in the front of my server stack and able to check for a HTTP parameter in a request's body and redirect it to a specific server, like a reverse HTTP proxy… i tried nginx to do this, but i'm not very happy with it23:46
sarnoldpHcF: apache can also reverse proxy, but I might have expected nginx to do a better job of it. whta didn't you like about nginx?23:50
pHcFfirst because I can't check for a specific http parameter in request's body if it's POST or PUT23:50
pHcF(because it starts handling redirects/rewrite rules before having all the data of the request)23:51
Brian21hi everyone23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!