[00:01] Rory: Yes, a live, production server. Running our backups. [00:02] One of the previous sysadmins doesn't belive in doing updates === freeflying_away is now known as freeflying [00:18] PryMar56, dpkg -l | grep xserv is not empty, I originally installed ubuntu-server but I needed xwindow for our gui applications, this is exactly how I did for RH. Does xserver adds something to slownes? thx [00:19] PryMar56, pkg counts is 666 [00:24] X does take memory and processing power. both of which might be better used on your applications instead. but the drain is usually pretty low.. [00:25] rostam - any python/perl depends in your apps? [00:26] PryMar56, no python/perl [00:27] rostam, pkg count looks similar to ubuntu-server.. and networkmanager is unused? all NIC configs are manual? [00:28] PryMar56, we have two CPU (AMD 5000) we do configure them manually, the same we do for RH. [00:28] rostam - check locale, i18n configs in /etc/default against what shows in ENV [00:30] PryMar56, Env you mean echo $Env? the output is empty [00:31] rostam, IOW - login as user, type env, and see if LANG, language, etc looks OK [00:34] rostam , also login as user, type groups <---- huge difference with RH if the user is admin [00:34] PryMar56, we are running our apps as root. do you see any issue there as far as performance?? [00:35] rostam - no..but that is not exactly the ubuntu way [00:36] rostam, if go through steps like this.. you might find weaknesses of faults [00:36] or faults [00:37] rostam in RH you have /etc/sysconfig in deb/ubuntu there is /etc/default [00:40] PryMar56, ok I will look for any differences between env and /etc/default setting, if I donot find it what else I should look for? thx [00:42] rostam - loaded modules (lsmod).. I doubt kernel differences will matter: RH is 2.6.32 and Ub is 3.0.1x [00:42] how about apparmor / [00:42] ? [00:43] rostam, apparmor is off in my server [00:43] PryMar56, How could I disable it? [00:44] rostam, thats an FAQ , but memory says something with purge... google it [00:44] in the most pessimistic of testing, apparmor adds less than 0.5% overhead; if you're having performance problems, apparmor is probably not involved :) [00:46] rostam: if your hard drives have 4k sectors (or larger, as some ssds do) you can sometimes see a gigantic slowdown if partitions are not aligned on 4k blocks, but rather on the older 512 byte boundaries -- every write might involve then a read, modify, write cycle, which would be significantly slower [00:46] rostam: there are several ways to disable [00:46] apparmor=0 on the grub kernel command line, do it in grub, or permanently in /etc/defaults/grub and then update-grub [00:46] rostam: you can purge the apparmor package, the kernel module will still be enabled but not policy will be loaded [00:47] rostam: what exactly is _slow_ in your configuration? can you narrow it down to a specific sequence of system calls or function calls? [00:51] opening devices (video encoder/decoder card) takes about 1 sec while in RH takes about 1 msec. [00:53] rostam: oh, interesting. any chance you can try your redhat with a newer kernel or your ubuntu with an older kernel? you can't just drop one kernel onto the other :/ but similar era kernels would be a worthwhile starting point [00:54] rostam: it might be that the kernel driver might have treated an open() request without checking the hardware or without allocating resources, but now it may [00:56] sarnold, valid points, let me dig more into the open call. Thank you all for helping me. I got lot us of good points. === exekias_ is now known as exekais === exekais is now known as exekias [03:34] Is there a way to test sshd settings without looking my current sessions? I'm trying to avoid getting locked out. [03:34] s/looking/losing [03:35] guzzlefry: changing ssh settings won't influence existing connections [03:35] guzzlefry: now, changing _firewall_ settings is where you've got to be very careful :) [03:35] sarnold: even when restarting the daemon? [03:35] service sshd restart [03:35] guzzlefry: yes, the daemon has spawned off children processes to handle logged in users [03:36] ah, good to know [03:36] thank you :) [03:36] guzzlefry: have fun :) [03:39] Oh, one more question actually. I've looked around, and it seems like the only way to lock a user to sftp and chroot them is to set root as the owner of the chroot directory. Has that situation changed at all? [03:45] guzzlefry: well, that's a tricky thing. chroot was never intended as a real security mechanism [03:46] ah, that would explain all of the breakages I've heard about it. [03:46] guzzlefry: you could try using an lxc container; I haven't tried that yet myself, but I think it ought to work. another option is confining the user with apparmor, though it isn't as convenient as one might like: sec-saucy-i386 [03:46] guzzlefry: http://wiki.apparmor.net/index.php/Pam_apparmor_example [03:46] sorry about the mispaste, juggling too many things at once :) [03:47] no problem, thanks again for your help === freeflying is now known as freeflying_away [04:05] is it right that ubuntu-server 12.04 installation need internet connection? [04:08] Well, this is interesting... [04:08] $ sudo ssh-keygen -i -f id-rsa.pub > authorized_keys [04:08] -bash: authorized_keys: Permission denied [04:10] fishcooker: I believe it'll download and install updates while installing, if you wish [04:10] guzzlefry: the > authorized_keys is handled by the shell _before_ it executes sudo [04:10] doh [04:10] thanks [04:11] It might be time to call it day. ;) === freeflying_away is now known as freeflying [04:11] always a good idea to call it a day before you fat-finger something and wreck your tomorrow, hehe :) [04:35] so without internet connection ubuntu server will not be installed, sarnold? === freeflying is now known as freeflying_away [05:15] hello, i am trying to setup a server for local file storage, is this possible using ubuntu server? === freeflying_away is now known as freeflying [05:30] Ghostx562: what do you mean by 'local file storage'? every computer has local file storage [05:32] i have unregistered board .. i've tried install ubuntu server many times and failed [05:33] pmatulis, store files on an old desktop with a 1tb drive, move files between that and my laptop [05:33] sort of file storage [05:33] Ghostx562: laptop running what OS? [05:34] fishcooker, installing from CD? [05:34] pmatulis, win7/ubuntu [05:34] Ghostx562: study samba [05:34] fishcooker: what is "unregistered board"? [05:34] pmatuils, will do thanks [05:34] !samba | Ghostx562 [05:34] Ghostx562: Samba is the way to cooperate with Windows environments. Links with more info: https://wiki.ubuntu.com/MountWindowsSharesPermanently and https://help.ubuntu.com/12.04/serverguide/C/windows-networking.html [05:35] but it works with ubuntu too [05:37] nope i installed from usb flashdisk [05:37] this is my lshw on previous ubuntu remix 10.10 [05:37] fishcooker, try cd better results that way [05:39] http://paste.debian.net/67115/ [05:40] i don't know why CD would be better than USB, Ghostx562 === freeflying is now known as freeflying_away === freeflying_away is now known as freeflying [07:00] I'm installing ubuntu server 12.04.3, I want to partition the disk manually, but I can't find fdisk. Any idea? === freeflying is now known as freeflying_away [07:01] the installer will step you through it === freeflying_away is now known as freeflying [07:30] has anyone else had all their LXC's stop working recently? They DHCP request on the bridge, but then don't acccept the response. [07:30] I can see DHCP outputting [07:30] send(3, "<30>Nov 22 07:29:48 dhclient: No DHCPOFFERS received.", 53, MSG_NOSIGNAL) = 53 [07:30] but I can also see dhcpd [07:30] Nov 22 20:28:50 lifelesshp dnsmasq-dhcp[1688]: DHCPDISCOVER(lxcbr0) 00:16:3e:9f:6e:06 [07:31] Nov 22 20:28:50 lifelesshp dnsmasq-dhcp[1688]: DHCPOFFER(lxcbr0) 10.0.3.214 00:16:3e:9f:6e:06 [07:31] in the host [07:36] how can I configure static IP for an interface [07:37] where is the configuration file? [07:44] ns5: /etc/network/interfaces [07:44] Sling: thanks === freeflying is now known as freeflying_away === freeflying_away is now known as freeflying [09:01] the python-protobuf package in my Ubuntu server 12.04.3 is too old, how can I update it? [09:17] ns5: sudo apt-get update && sudo apt-get install python-protobuf [09:17] Rory: the latest version is still too old... [09:17] ns5: What version is installed, and what version do you need? [09:18] 2.4.1-1ubuntu2, I need >=2.5 [09:23] !info python-protobuf precise [09:23] python-protobuf (source: protobuf): Python bindings for protocol buffers. In component main, is extra. Version 2.4.1-1ubuntu2 (precise), package size 75 kB, installed size 452 kB [09:24] ns5: There is no later version packaged, even in saucy [09:24] ns5: You'll have to get a later version from the upstream developers and install it yourself [09:24] !info python-protobuf [09:25] python-protobuf (source: protobuf): Python bindings for protocol buffers. In component main, is extra. Version 2.4.1-3ubuntu2 (saucy), package size 74 kB, installed size 452 kB [09:25] Rory: thanks, I'll try to install it manually [09:26] i can't help you with it because I dont even know what it is :P but if you're getting errors or something when installing put them on paste.ubuntu.com and I will look === freeflying is now known as freeflying_away [10:58] why installation of the server from usb always fail? [10:59] !md5sum | fishcooker [10:59] fishcooker: To verify your Ubuntu ISO image (or other files for which an MD5 checksum is provided), see http://help.ubuntu.com/community/HowToMD5SUM or http://www.linuxquestions.org/linux/answers/LQ_ISO/Checking_the_md5sum_in_Windows [11:00] the hashes is match [11:00] Rory: [11:00] fishcooker: How do you know it fails? Do you get an error? [11:00] this box is minipc from china [11:01] stuck on retrieving libpcre3-udeb [11:01] btw [11:01] fishcooker: is it connected to the internet during installation? [11:01] yess [11:01] connected [11:01] stuck on 20% [11:02] fishcooker: Could you try the installation without a network connection? [11:02] it always be stop [11:02] on mirror [11:06] yes so there might be a problem with your connection, try installing while you are not connected to the Internet [11:08] but it always stop on mirror/ repo thing [11:09] fishcooker: Reboot the machine without a connection, and start the installation completely again [11:09] ok i will === shauno_ is now known as shauno [11:39] how about ubuntu mirror country? [11:39] no network here [11:42] Rory there is no possibility when you are not connected to the internet [11:42] the installation will be fail [11:42] fishcooker: That isn't true, I installed ubuntu server on a machine with no Internet this morning [11:43] now i am facing this problem [11:43] which iso do you use? [11:43] im using 12.04.3 [11:45] ubuntu-12.04.3-server-amd64.iso [11:50] yes [11:50] the same here [11:50] with the same hashes [11:59] fishcooker: are you checking the hash from the USB stick itself, or from the ISO file you downloaded? [12:00] fishcooker: best to verify the boot media itself, if you're not already doing that. [12:04] i will follow your direction [12:05] which file rbasak? [12:09] my prediction that this box doesn't support ubuntu [12:10] this my cpuinfo http://paste.debian.net/67143/ [12:10] the last installed os here is ubuntu remix 10.10 [12:10] on this box [12:10] netbook [12:16] Everything that has been said above seems to just indicate there was a problem with the network or mirror, rather than any problem with the installer or system === gary_poster|away is now known as gary_poster [13:31] salve [13:31] sto cercando di configurare un vps con ubuntu server ed apache ma non riesco a vederlo dall'esterno anche se ho configurato iptables in modo che DOVREI vederlo [13:32] qualcuno mi da una mano? [13:32] premetto che non ho accesso al sistema grafico [13:33] aokmanga: english please [13:33] ops sorry :P [13:34] i'm trying to setup a vps with ubuntu server and apache ma i can't connect to it from outside [13:34] i tried to change settings in iptables but it seems not to work, i can't access to the graphical server [13:35] !php-gd [13:35] ok... .ubottu doesnt know anything about php-gd... I need it for a part of my moodle install on ubuntu 12.04 LTS, server version... anyone know the package name for it? [13:36] got it nevermind, php5-gd, lol [13:36] Arrick: php5-gd? [13:36] :-D [13:37] aokmanga: Ubuntu Server is not graphical. [13:38] rbasak: ok does it has an X server or not? [13:38] only for curiosity because anyway i've no access to it :D [13:38] aokmanga: not by default. [13:38] thank you [13:38] aokmanga: you could install one, but then it sounds like you really want Ubuntu Desktop. [13:39] understood [13:39] anyway i installed apache mysql and so on [13:39] aokmanga: generally the access mechanism to Ubuntu Server is ssh. [13:39] configured iptables [13:39] i made everything through ssh [13:39] but i can't access to it from outside [13:39] i don't know why [13:40] i think it's a problem of the iptables settings [13:40] but i can't find it [13:40] Outside what? [13:40] i'm setting a vps [13:40] and i was looking to find the apache web page from my home pc [13:40] browsing the ip on the browser [13:40] So you can access it from inside the network where it is located? but not from outside? [13:41] i don't know if i can access from inside the network because i'ven't got the server physically :P [13:42] it's a little free vps hosting [13:42] Can you connect to it with ssh from where you are right now? [13:42] yes [13:42] but they gave me ssh with an ipv4 [13:43] but i've only access (except for ssh) to ipv6 [13:43] i set ip6tables in fact [13:43] For the most part, you shouldn't need to touch iptables for things to work properly. [13:43] i tried to touch it because it wasn't visible :/ [13:43] maybe i made some mistakes [13:45] anyone can help me to solve this problem? [13:46] I'd make sure that apache2 is actually listening on port 80 locally first, and then attack iptables. [13:46] how can i do that? [13:46] netstat? [13:47] aokmanga: yep. [13:48] thanks for the support, i'm trying to learn :) [13:53] mdeslaur: is anyone working on CVE-2013-4164 for ruby? Should I file a bug on it? [13:53] rbasak: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4164) [13:54] rbasak: no need to file a bug, we track CVEs in our tracker [13:54] rbasak: it will appear in today's tracker update [13:55] mdeslaur: OK, thanks. I looked in the tracker; didn't know it updated daily. [13:56] rbasak: adding new cves is a process we do 2-3 times a week [13:56] usually on mon-wed-fri [13:56] thanks for the ping [13:56] I see. np, sorry for the noise. [14:00] no need to apologize, I'm glad you told me about it in case we missed it [14:10] hey all, I have php5-xmlrpc installed on my 12.04 server, but I cant figure out how to enable it... any pointers? [15:14] I moved a raid1 array (2 disks) from one server and placed them inside another .. "mdadm --detail /dev/md127" shows me the Name as the being the former server this array was in - how can I change this to the name of the new server? [15:14] hi all again [15:15] i need to make my web server apache visible outside the internal network, i checked iptables and everything seems fine... there are no rules so everything can go in and out [15:16] netstat says that httpd is working and listening on the port 80 [15:16] but!!! [15:16] if i try service httpd restart it says [15:16] (98)Address already in use: make_sock: could not bind to address [::]:80 [15:17] this is what i have with netstat [15:17] tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 860/httpd tcp 0 0 2a02:4780:1:1::1:b39:80 :::* LISTEN 860/httpd [15:17] zetheroo: maybe /etc/mdadm/mdadm.conf [15:18] i'm trying to connect through ipv6 entering in the browser http://[2a02:4780:1:1::1:b39] but it doesn't work [15:21] is there something does i have to activate ipv6 protocol? [15:27] aokmanga: Can you ping that IP? [15:27] aokmanga: nvm i can ping it, it's up [15:28] how do you ping it? [15:28] aokmanga: ping6 [15:28] i tried ping 2a02:4780:1:1::1:b39 [15:28] ok thank you :) [15:29] does it work to you on the browser? [15:29] no [15:30] aokmanga: Can you please paste the output of this command: sudo netstat -anp | grep ":802" [15:30] !paste [15:30] For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [15:30] aokmanga: Which release of Ubuntu are you using btw? [15:30] 12.04 Pici [15:30] sorry aokmanga: netstat -anp | grep "80" [15:30] I have a very sticky shift key on this keyboard [15:31] I just don't recall us having httpd be the name of the apache2 daemon in some time (if ever) [15:31] Sorry aokmanga ignore me completely about netstat, I just read above [15:31] http://paste.ubuntu.com/6459041/ [15:32] aokmanga: What's the output of: cat /etc/issue [15:35] Rory: well, that was interesting [15:38] Centos 5.3 \n \l [16:30] jamespage: Floodlight smoke tests fail with today's trusty images. [16:30] reported bug 1254096 [16:30] Launchpad bug 1254096 in floodlight "Floodlight Debug Port not found (6655) with trusty server images" [Undecided,New] https://launchpad.net/bugs/1254096 [16:39] psivaa, thanks - i think [16:39] :-) [16:41] np :) [16:45] jamespage: keystone has switched over to testr by the way [16:45] \o/ [16:45] smooth === eagles0513875_ is now known as eagles0513875 [17:13] hey all, I have php5-xmlrpc installed on my 12.04 server, but I cant figure out how to enable it... any pointers? [17:26] psivaa, well this is like turning over the rock and finding the cochroaches [18:22] Hey, when I run the command 'chkconfig --level 345 ssh on' it tells me '/sbin/insserv' isn't a file or directory. [18:23] DeltaHeavy: ubuntu has used the 'upstart' init replacement for a while. It's quite different, even thogh there are some sysv-init compatibility efforts in place. it'd be worhtwhile to skim through the upstart cookbook: http://upstart.ubuntu.com/cookbook/ [18:23] Ok, thanks! [18:23] it's pointless trying to use chkconfig on run levels as ubuntu only uses run level 2 [18:23] and uses upstart [18:23] DeltaHeavy: in general, if something is installed, upstart will try to start it. if you want to stop it, you can do that easily with an override file: http://upstart.ubuntu.com/cookbook/#override-files [18:24] s/to stop it/prevent it from starting/ [18:24] Didn't know Ubuntu was so different. I'll look into it. Thanks! [18:24] DeltaHeavy: you've been asking this sort of stuff for a while on ubuntu and keep being told it's differences, not sure why it's not sinking in [18:25] ikonia: Uh, this is the first time I've been in this channel. Are you getting me confused with somebody else? [18:25] yes, parallelizing the init and running tasks based on when dependencies were satisfied drastically cut down on boot time, and once the override files were added, it became a -lot- easier to administrate than the old pile of a hundred symlinks. :) [18:25] I've seen you in #ubuntu a few times [18:25] Yeah, I've never used Ubuntu before. I don't apprichate your snippy attitude. [18:25] Ubuntu server* [18:26] ubuntu server works the same as ubuntu [18:26] I've only used Ubuntu as a desktop, no fancy stuff. I've never been told about this so you should learn to be a little bit more sociable and understanding. [18:26] so the differences that have been explained to you on ubuntu will be the same on ubuntu server [18:26] No they havn't [18:26] I don't even know what Upstart is [18:26] i didn't say you did [18:26] Learn some respect or I'm just going to /ignore you. [18:27] I'm pointing out that just trying to do things the same as other distros as you have done in ubuntu before isn't working === jetole_ is now known as jetole [18:27] so instead of rushing in - try to look at the differences, as you've been explained before, there are some significant differences and something the same as other distros [18:27] ikonia: please just drop it... [18:28] Is he always like this? [18:28] DeltaHeavy: I'm just trying to save you from making a mistake that can cause damage, [18:28] DeltaHeavy: no, most times he's quite helpful :) [18:28] ikonia: I apprichiate it it just comes off as confrontational when you're "not sure why it's not sinking in" when I havn't used Ubuntu in well over a year, and I'm not experianced in it or asked for much help in #ubuntu or anything of hte likes at all. [19:11] remember, http://www.ubuntu.com/about/about-ubuntu/conduct [19:13] * patdk-wk forgets [19:42] Hello [19:42] What's a good config file based alternative to ufw? ufw is a pain to use with configuration management [19:44] GomoX: I've heard good things about ferm, never used it myself though [19:45] sarnold: will look into that [19:46] check of csf [19:47] *out [19:49] aerokid240: not packaged for Debian it seems? === alaing is now known as alaing_away [21:18] I have a 6 drive RAID 5. The RAID failed and box locked up. When I got the box back up I tried to recover but the recovery failed and now I was a failed drive and a spare drive and 4 active [21:18] not enough to start the RAID [21:18] any thoughts on how to get this RAID back up? === Mapley is now known as rainbowdash` [22:09] surprisingly I found mysql down, how can I figure out what happened? [22:10] xkernel: usually it will log to /var/log/mysql/error.log === rap424_ is now known as rap424 === gary_poster is now known as gary_poster|away [22:40] im on ubuntu server installation now im on install grub boot loader on hard disk section.. the err message is grub-pc package failed to install into target [22:41] i see that the hardisk mount properly on /target [22:42] what should i do .. skip it or? [23:09] I am trying to boot ubuntu server 12.04 from a DVD - RW and I select it in the boot menu but all that happens is a blinking _ then it asks whether I want to boot from windows or Ubuntu 12.04 which I have previously installed [23:10] please help [23:10] anyone [23:15] hi all [23:15] i've a question for you [23:15] can i use a dns name server to use a text address on internet too or only in a private network? [23:19] aokmanga: I'm sorry, I don't understand your question, can you rephrase it/ [23:20] aokmanga: Only in your local domain. [23:20] thank you DeltaHeavy [23:20] sarnold i asked if i set a dns name server on my machine [23:21] can i use the name that replace my ip on internet? or only in a private network? anyway DeltaHeavy replied you can only use it internally so i'll skip it [23:22] aokmanga: You can edit your /etc/hosts file to have any string of text represent an IP address, in your local network or not. [23:23] in your local network or not? so if i set a string of text to replace my ip and you enter it in your browser with apache running you get my page? [23:25] aokmanga: if you edit your /etc/hosts file to assign names to IPs, those names will work on that machine -- but only that machine. you can give any name and any IP address that way [23:25] sarnold: ok, this is what i thought :) [23:26] thank you [23:26] aokmanga: that's sometimes useful if you want to prevent a specific annoying advertiser from blinking at you in webpages, add their name and 127.0.0.1 to /etc/hosts, and your browser will contact your local webserver instead :) [23:37] ls -l /var/lib/hugetlbfs pagesize-16MB or pagesize-16777216 I normally see 16MB but why is it 16777216 on ubuntu? [23:37] qemu complains no pagesize-4MB found for example [23:38] it ignores pagesize-4194304 which should be just pagesize-4MB [23:39] can you make symlinks from one to the other? [23:39] hmm forgot that , Friday afternoon that is, let me try, thanks [23:40] hehe, well, it's reasonable to expect it to work out of the box :) I'm just hoping some symlinks will get you moving again.. [23:41] yeah that symlink 'fixed' it [23:41] :) [23:42] woo :)