/srv/irclogs.ubuntu.com/2013/12/19/#ubuntu-server.txt

ZalHi all, anyone know of any known problem with the latest ubuntu precise LTS AMI? Since switching to it, we're getting segfaults when trying to use Apache + SSL. strace isn't showing anything useful.00:22
ZalOr, how about ... where can I find a changelog for differences between Precise LTS Amazon machine imgages that are released?00:23
sarnoldZal: this isn't exactl what you asked for, but it might yet be useful.. https://lists.ubuntu.com/archives/precise-changes/2013-December/date.html00:27
Zalsarnold, that's certainly a great start, thank you!00:30
adam_gahs3, any plans for a new jenkinsapi upload to debian?00:32
ahs3adam_g: hadn't planned on it until next week when i have some time.  need it sooner?00:34
adam_gahs3, nah, was gonna do a merge to ubuntu but figured id see if there was an update coming first00:35
adam_gi'll hold off00:35
ahs3adam_g: okey dokey.  if you need to do an NMU, go for it00:36
adam_gahs3, cool thanks00:36
=== freeflying_away is now known as freeflying
SephizorHi, can anyone possibly help with a problem I'm having with postfix/dovecot/spamassassin?01:14
pmatulis!ask | Sephizor01:15
ubottuSephizor: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience01:15
SephizorFair enough. Just thought I'd see if anyone had general knowledge of the subject area first01:15
SephizorAnyway...Ever since I installed spamassassin yesterday, I've not been getting any mail at all in my inbox01:16
sarnoldsounds like mission accomplished :)01:16
jkitchenindeed01:16
SephizorHeh...01:16
jkitchencan you do that for me too?01:16
sarnoldlol01:16
SephizorI have a virtual user setup with postfix/dovecot01:16
jkitchenin all seriousness though, are the messages in your queue? "mailq" will tell you01:16
SephizorAnd it seems like the deliver command isn't working01:16
jkitchenmailq should also say *why* they're in your queue.01:17
SephizorYeah, there are messages in the queue01:17
Sephizor"Unknown mail transport error" and "temporary failure"01:18
SephizorNot much help :|01:18
jkitchencan you paste a full message?01:18
SephizorDefine "full message"01:18
jkitchen^.*$01:19
SephizorLol01:19
jkitchen?01:19
SephizorI mean like...do you want me to paste the output of "mailq" or a mail.log entry?01:19
jkitchenyes01:19
pmatulis/var/log/syslog will show you the mail being processed, that's where i would look first01:20
SephizorDec 19 01:19:43 trixie postfix/error[2651]: 2A7CA1825E: to=<sephizor@sephizor.com>, relay=none, delay=0.11, delays=0.11/0/0/0, dsn=4.3.0, status=deferred (unknown mail transport error)01:20
SephizorEhh...ok, that one was me editing configs to try and track down the problem01:23
SephizorThe error I was getting before:01:24
SephizorDec 19 01:22:27 trixie dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=1052(spamd) egid=1051(spamd) missing +r perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755)01:24
pmatulisdid you follow the hint Sephizor ?01:24
SephizorYes, the file is owned by root:root but I tried changing it to dovecot:root with no success01:25
jkitchenSephizor: based on that log message: 1) what user is trying to read 2) what file?01:26
jkitchenand 3) what error is it getting when it tries01:26
pmatulisspamd is being prevented from reading01:29
jkitchenpmatulis: ssshh!01:29
jkitchen:)01:29
SephizorI know01:29
SephizorI've added a+r01:29
Sephizorto it01:29
SephizorBut guys, please can we drop the condescending tone?01:29
jkitchenSephizor: right, but what about directories above it? what are those perms?01:29
jkitchenSephizor: sorry, wasn't trying to be condescending, was trying to teach01:30
jkitchenby answering those questions you inherently think about what the problem could be01:30
SephizorI know, I'm not a Linux noob though at all01:30
jkitchen"spamd user is trying to read /var/run/dovecot/auth-userdb and is getting permission denied"01:30
jkitchenso, first thing to check: perms on /, /var, /var/run, /var/run/dovecot, /var/run/dovecot/auth-userdb01:31
SephizorI'm just confused why adding spamassassin suddenly breaks everything when it worked fine for ages01:31
SephizorOh, and I changed the user to dovecot01:31
SephizorWith no success01:31
jkitchenand make sure spamd user would be able to traverse all of those directories and read the file (in this case most likely a socket)01:32
SephizorStill had that error01:32
jkitchenchanged what user to dovecot?01:32
SephizorIn the master.cf postfix config01:32
SephizorTo run spamd01:32
jkitchenok01:32
jkitchenSephizor: what are the permissions on /, /var, /var/run, /var/run/dovecot, /var/run/dovecot/auth-userdb01:33
SephizorOk, so, /var/run/dovecot is 755 root:root01:33
jkitchen(yes, I always check /, I had / get chmodded once and that caused some weird issues)01:33
Sephizor /var/run is 755 root:root01:34
Sephizor / is 755 root:root01:34
jkitchenand /var/run/dovecot/auth-userdb?01:35
Sephizor 644 root:root01:35
jkitchenok, then that's no longer the error you're getting01:35
jkitchen*or* you're looking at the wrong path. postfix likes to chroot things01:36
SephizorError changed to "missing +w", so I've added that too...just to wait until it tries to process the queue again I guess01:37
jkitchenok, but you don't want to just blindly chmod +w files01:37
jkitchenespecially when they are email related01:38
jkitchenhow did you incorporate spamassassin into your postfix / dovecot setup?01:39
SephizorAdded "-o content_filter" to the smtp line01:39
SephizorAnd added the following at the bottom of the file:01:39
Sephizorspamassassin    unix    -       n       n       -       -       pipe01:40
Sephizor  flags=DRhu user=spamd argv=/usr/lib/dovecot/deliver01:40
Sephizor  -f ${sender} -d ${recipient}01:40
jkitchenok, so that's where you changed user to dovecot previously?01:40
Sephizoruser=dovecot01:41
SephizorYeah01:41
jkitchenok01:41
jkitchencan you post your full master.cf and main.cf files? (using a pastebin of course)01:41
jkitchenalso, you don't need to wait around for postfix to try again, you can always 'postfix flush' to force things to try again01:42
jkitchenassuming you don't have an enormous mail queue it should be fine01:43
Sephizor30 mails01:43
SephizorNot too big01:43
jkitchenyea, that's nothing.01:43
jkitchenI'm talking if your queue is over a million or something hehe01:43
Sephizor:p01:43
SephizorHang on...gotta scp these down from my server >.<01:44
sarnoldif you install pastebinit on your server you can more easily pastebin content originating from it..01:44
Sephizormain.cf: http://paste.ubuntu.com/6597408/01:46
Sephizormaster.cf: http://paste.ubuntu.com/6597424/01:46
SephizorI've also tried this using sendmail for the spamd command01:49
SephizorSee anything?01:51
jkitchenSephizor: yes01:55
jkitchenyour "spamassassin" content filter is trying to use dovecot/deliver ...01:56
jkitchenI think that needs to change to something like "spamc"01:56
jkitchenhttps://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix01:56
pmatulisSephizor: where did you get your configurations from?01:56
jkitchenyou have mailbox_command dovecot deliver01:56
jkitchenwhich is probably correct01:57
SephizorOk, I changed argv to have "/usr/bin/spamc -f -e" before the dovecot command (as per other tutorials)02:00
jkitchenno, I think you need to remove the dovecot command entirely02:01
SephizorOh02:01
jkitchenit's a content filter, not a final delivery sequence02:02
jkitcheneither that or you can implement it in the mailbox_command in master.cf, perhaps02:02
SephizorOk, so now the queue is empty02:04
SephizorBut still no mai;02:04
Sephizor*mail02:04
jkitchenwhat do the logs say?02:04
SephizorDec 19 02:02:20 trixie postfix/pipe[3930]: B37201825F: to=<sephizor@sephizor.com>, relay=spamassassin, delay=2296, delays=2271/13/0/11, dsn=2.0.0, status=sent (delivered via spamassassin service)02:05
SephizorSo I'm guessing I have to put the deliver command in the master.cf02:05
SephizorStill no luck :(02:24
SephizorSo I gave up02:50
SephizorRemoved spamassassin with apt-get purge02:51
SephizorAnd removed all stuff relating to it from the postfix config02:51
SephizorAnd I still get an error about it...wtf!?02:51
SephizorAnyone know how I can get rid of a "03:22
Sephizorwarning: connect to transport private03:22
Sephizor" error?03:22
SephizorAfter uninstalling spamassassin03:23
SephizorI've found the cause, the message was received when spamassassin was still installed and now it's stuck in the mail queue03:26
SephizorBut I don't want to remove it from the queue since it's an important email which I need to read >.<03:26
zuladam_g: some of the tests were skipped because of babel issues when havana was out03:28
SephizorOh f'ing yes! I managed to retrieve the mail!03:37
SephizorIt was a response to a job application03:38
SephizorThat would have been hell if I'd lost that03:38
JanCSephizor: mail is just text files you know, so reading it while it's still in the quee would have been possible too  ;)03:42
JanCjust stored as text files03:42
SephizorIt said the contents were deferred03:42
SephizorSo I couldn't read it with postcat03:42
SephizorNow I just need to figure out where spamassassin actually "delievered" the mail that was in the queue before to...Since it said it was successful but isn't in my inbox03:44
hallyn_zul: down to three failures in the libvirt tests.  one i know about and need to fix in qrt one day.  the others are two of the same failure, but worrisome04:23
hallyn_http://paste.ubuntu.com/6597877/04:23
hallyn_looks like after a device is removed, it is not removed from the apparmor policy04:23
hallyn_jdstrand: ^ I assume, based on the test being there, that it is supposed to be?04:24
_rubenbugger .. backported targetcli (2.1-1) doesn't work on precise07:31
_rubendoh .. forgot to backport its library dependencies07:31
XATRIXHi guys, what's wrong with it ?07:45
XATRIXhttp://ur1.ca/g7zko07:45
XATRIXAs long as i see , i have no installed midnight commander.07:46
jamespageadam_g, ta - promulgated!09:32
=== gary_poster|away is now known as gary_poster
zuljamespage:  seen this?13:53
jamespagezul, seen what?13:57
zuljamespage:  doh https://launchpadlibrarian.net/160202855/buildlog_ubuntu-precise-i386.neutron_1%3A2014.1%2Bgit201312190800~precise-0ubuntu1_FAILEDTOBUILD.txt.gz13:57
zuljamespage:  seems like subunit is missing testtools13:58
jamespagezul, I thought I fixed that up yesterday13:58
zuljamespage:  hmm..13:58
jamespagezul, evidently not14:00
jamespagezul, I thought it was due to an early backport of subunit that just needed a rebuild14:00
jamespagezul, its only impacting on 12.0414:00
zuljamespage:  ack14:00
jamespagezul, I disabled the test execution for neutron in the lab - it takes so long the build times out and dies14:01
jamespagewe need todo something about that but not quite sure what right now14:01
zuljamespage:  okies thats unfortunate14:01
jamespagezul, we limit concurrency which does not help14:01
jamespagezul, I could bump it back up again and see14:02
zuljamespage:  cool14:02
jamespagezul, actually I think this is my bad - I dropped it 4->1 for concurrency two commits ago14:07
jamespageI'm going to push that back up14:07
zuljamespage:  cool...i thought i merged my taskflow cinder fix yesterday apparently i didnt14:08
zuljamespage:  the percona testssuite fails btw14:08
jamespagezul, yeah - I just saw14:09
jamespagethats on 14.0414:09
jamespagezul, OK thats wierd - in the lab it actually runs the tests on 12.04 with no problems - they time out but...14:13
zuljamespage:  doh! http://pastebin.ubuntu.com/6599908/14:17
caribouI'm looking at the cloud-initramfs-tools FTBS14:32
caribouseems that Dustin's last commit brings overlayroot/etc/update-motd.d which is a directory under overlayroot/etc14:32
caribouthis breaks the install statement in the Makefile that returns an error because of the directory under etc14:33
jamespagezul, the only diff I can think of re subunit is that in the lab it gets built on amd64 arch, but in PPA its done on i38614:40
zuljamespage:  weird14:41
jamespagezul, just trying that now14:41
jamespagezul, is OK in 14.04 and in the lab archive14:41
jamespagebut broken in the PPA's14:41
zulgotcha14:41
kirklandcaribou: hmm, do you have a fix?14:48
kirklandcaribou: sorry about that...14:48
cariboukirkland: looking for one; I'm not a Makefile/install guru; just need to figure out how to install the subdir as well14:48
cariboukirkland: no worry14:48
jamespagezul, linked the MIR for python-jsonpath-rw + ply to your openstack blueprint14:54
zuljamespage:  thanks14:54
jamespagezul, all OK - ply needs some test enablement (currently fails some python3 tests but OK under python2)14:54
zuljamespage:  cool networkx still uses python-support14:55
jamespagezul, that will need fixing I guess14:55
zuljamespage:  fixing it now14:56
jamespagenice14:56
jamespagezul, make sure that goes back to Debian - that's definately delta we don;t want to worry about going forwards :-)14:56
jamespagezul, Ran 9828 tests in 2536.629s14:56
jamespageomg that's alot of tets14:56
jamespageand one still fails...14:56
* jamespage sighs14:56
zulneutron?14:56
jamespagezul, was there a specific reason we have not mir'ed jsonrpclib14:57
jamespageits needed for one of the mechanism drivers for ml214:57
jamespageand I noticed it was pushed out of requirements.txt14:57
zuljamespage:  upstream sneaked it in during our FF14:58
jamespagezul, I'll add it to the MIR list14:58
zuljamespage:  ok14:58
zulit seems to me we are doing more MIR this cycle than last14:59
jamespagezul, nice easy one this time -https://code.launchpad.net/~james-page/neutron/enable-jsonrpclib/+merge/19967015:01
zuljamespage:  +1 merry christmas ;)15:02
jamespagezul, ta15:04
zuljamespage:  just a heads up in keystone http://pastebin.ubuntu.com/6600207/15:18
jamespagezul, ok - ta15:22
zuljamespage:  i dont know how it affects the charms if any15:22
jamespagezul, well as it deprecated - nothing immediately15:23
jdstrandhallyn_: re apparmor profile updated on detach> yes. that is a very old (2.5+ years) test15:45
TheLordOfTimerbasak: ping15:46
jdstrandhallyn_: if it isn't doing it, then it seems there is a regression15:46
rbasakTheLordOfTime: otp15:50
TheLordOfTimerbasak: mind if I ask the reason for the drop of lua from nginx-extras for the MIR? (one of the Debian maintainers is curious)15:51
TheLordOfTime(unless I missed policy somewhere, which sometimes happens since there's so much to track >.>)15:52
rbasakTheLordOfTime: because lua is in universe. Source packages in main cannot build-dep on packages in universe.15:52
TheLordOfTimerbasak: that's what i suspected, wasn't sure.15:54
TheLordOfTimerbasak: there is a decent bit of usage of the lua plugin in nginx, if anything, -extras might just be left in universe...15:56
TheLordOfTimerbasak: honestly, I'd rather *not* have to have the server team maintain -extras, there's third-party plugins that not even the nginx team truly maintains15:57
rbasakTheLordOfTime: unfortunately we can't do that. The source must be buildable entirely without universe.15:57
TheLordOfTimeand are causing issues (case in point Debian Bug 732251)15:57
uvirtbotDebian bug 732251 in nginx-extras "nginx-extras fastcgi_cache and proxy_cache both trigger errors with the push module" [Minor,Open] http://bugs.debian.org/73225115:57
rbasakTheLordOfTime: or, we need to pull lua into main. I think that's unlikely though.15:57
TheLordOfTimerbasak: if neither of those options is likely, we're likely to see a lot more bugs about the lack of a lua module15:58
rbasakjackweirdy: o/15:58
TheLordOfTimewhich means ultimately for those bugs we're going to have to Won'tFix those and say "Use the nginx team PPA if you want the Lua module"15:58
rbasakTheLordOfTime: unfortunately that's a cost of having a "support everything!" package in main.15:58
TheLordOfTimerbasak: you speak truth.15:58
TheLordOfTimerbasak: Debian can complain, but as long as the nginx team PPAs end up having whatever Debian has in it I don't think they'll make a huge fuss about it15:59
TheLordOfTimeassuming you don't mind the perpetual deviation from bug triage policy for "no lua" bugs and me having to send people over to use the nginx team PPA while at the same time marking "Won't Fix" on any "Please include the lua module" or similar bugs.16:00
TheLordOfTime(ultimately, that makes my job easier for triaging either way)16:01
rbasakTheLordOfTime: otp. Will respond in a bit.16:01
jamespageTheLordOfTime, rbasak: if we want to keep -extras its probably possible to have a second source package still in universe that builds those16:05
jamespagebut its an overhead I'd rather avoid16:05
TheLordOfTimejamespage: workaround is as i said, direct people who are annoyed about the lack of Lua in main-included nginx to the team's ppas, which aren't part of main...16:06
TheLordOfTimes/team/nginx team/16:06
TheLordOfTimebut that's just a measure to get people off our case, according to Debian maintainers, there is moderate use of the lua plugin in -extras16:07
* TheLordOfTime personally only uses nginx-full because he doesn't need the extra crap in -extras, but meh16:07
hallyn_jdstrand: i'm not sure where that regression is being introduced then.  The disk device is still being removed from the domain before security_apparmor.c:reload_profile() is called, so I woudl *expect* it to do the right thing...16:29
=== machina is now known as etzsch
jdstrandhallyn_: did they refactor the security hooks in some way? in the distant past, there were changes made that seemed ok but only actually worked for selinux because it uses on disk labelling and we use dynamic labelling16:41
hallyn_jdstrand: not sure.  i'll have to dig (and am afraid i may not have time)16:43
hallyn_jdstrand: would you say it's ok to push libvirt 1.2 with that regression and keep a bug open about it?16:43
rbasakTheLordOfTime: I think you summarised everything well. For "no lua" bugs, we can just mark them as dupes of a won't fix bug which has an explanation and pointers to alternatives (eg. a PPA).16:44
TheLordOfTimerbasak: assuming the MIR is accepted, and nginx migrates to main with the lua drop, would it hurt for me to create the bug that we can mark the others as a dupe of after that, or should I just wait for people to start complaining16:45
TheLordOfTime(because the complaining *usually* ends up in my email first >.>)16:45
rbasakTheLordOfTime: preempting emails and creating a bug in advance is absolutely fine.16:45
jdstrandhallyn_: so long as it gets fixed before release, sure. the thing is, if you detach a device from one vm and attach the same device to another vm, the apparmor profile still allows access to it so we break enforcement of vm isolation16:45
TheLordOfTimemmkay, i'll add that to my todo list if the MIR is approved and nginx migrates over.16:45
jdstrandhallyn_: I'd definitely put it into the 'High' category and targeted for trusty16:46
hallyn_jdstrand: yup16:46
hallyn_zul: ^ go ahead and push libvirt when you're happy with it.  I'll push a fix for the regression hopfully on monday.16:47
hallyn_zul: (and lemme know when you push so i can open a bug for the regression016:47
hallyn_eh i'll just open the bug now16:49
hallyn_ere i forget16:49
zulhallyn_:  the problem with libvirt-python is that going to be stuck in new unless we get an archive admin to look at it today16:51
zuljdstrand:  can you review libvirt-python for me so we dont break the new libvirt im going to be uploading?16:51
jdstrandzul: review? what do you mean?16:52
jdstrandzul: do you mean deNEW?16:52
zuljdstrand:  source new16:52
jdstrandzul: libvirt-python is a new source?16:52
zuljdstrand:  it is16:52
hallyn_jdstrand: upstream split it up into two packages16:53
jdstrandweird16:53
zuljdstrand:  what hallyn_  said16:53
jdstrandanyway, won't things break because it'll also need a MIR?16:53
zulit needs a MIR yes16:53
zulhallyn_:  im uploading it noew16:54
zuljdstrand:  should be a simple package to review16:55
jdstrandzul: ok, I might not be able to do it immediately16:55
zuljdstrand:  ok16:56
zulhallyn_/jdstrand: im going to wait until libvirt-python is reviewed before uploading libvirt 1.216:56
jdstrandzul: can you file a mir bug-- it doesn't have to do the whole rigamarole for MIR. just say that it is a package split and all the code was in the archive before16:57
zuljdstrand:  sure16:57
jdstrandzul: well, assuming that is true of course :) if it isn't, please follow MIR procedure16:57
zuljdstrand:  it is16:57
hallyn_zul: sounds good, thanks16:57
zulhallyn_/jdstrand: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/126275817:00
uvirtbotLaunchpad bug 1262758 in libvirt "[MIR] libvirt-python" [Undecided,New]17:00
zuljamespage:  still around?17:10
jamespagezul, yes17:10
zuljamespage:  so there is a couple of patches for django 1.6 and horizon in gerrit maybe we should grab them17:11
jamespagezul, +117:26
=== bitnumus is now known as Guest96288
zuljamespage:  i added savanna to the lab17:31
_root_anyone can help me with this?  http://askubuntu.com/questions/393067/php-fpm-eating-memory-creating-many-pools17:34
=== zzxc is now known as zzxc[afk]
sarnold_root_: are all those extra threads actually causing any harm?18:29
TheLordOfTimesarnold: i think he's concerned about RAM usage18:46
TheLordOfTimesarnold: i'm also pretty certain that he should turn on "Color threads differently" in his htop18:46
TheLordOfTimeso that we can see what're actually threads and what're actually processes18:47
sarnoldTheLordOfTime: could be; if so, running 'smem' would be worthwhile..18:47
TheLordOfTimerbasak: mind if I borrow your debdiff on the MIR, and add to it to remove the Lua part in the package description, or should I wait for the MIR to be done/worked on/approved ?18:47
TheLordOfTimerbasak: oh, also, your debdiff fails to include the current delta we have in Ubuntu, is that a problem?18:50
=== zzxc[afk] is now known as zzxc
=== Guest96288 is now known as bitnumus
adam_gjamespage, in case you're still around before the holiday, i just proposed the 2013.2.1 branch updates. was hoping to push the packages to saucy-proposed queue before i break20:37
toyotapieIs there anyway to see the memory type from within linux ? dmesg was not forthcoming21:59
patdk-wk_toyotapie, lshw22:08
toyotapiecan lshw tell the difference between Registered DIMMs and unbuffered with ECC?22:15
mic__hello, does the partman in 12.04.3LTS server installer understand 4k drives?22:31
sarnoldtoyotapie: if it can't, try also dmidecode22:31
mic__I cannot confirm - and the installation media has NO fdisk :S22:31
sarnoldmic__: perhaps gdisk?22:32
mic__mic__: but I am about to install ubuntu server from the CD22:32
mic__mic__: I try fdisk, parted etc. - none of these are included22:33
mic__sarnold: sorry ;)22:33
mic__sarnold: small mistype ;)22:33
mic__sarnold: so it's utterly hard to verify it during installation. And the performance penalty is very very big...22:33
sarnoldmic__: yeah, you wouldn't want to screw that up. :)22:34
mic__sarnold: but who decided to remove fdisk from the install media? ;) for a server install! ;)22:34
sarnoldmic__: I assume it'd be someone who knew that fdisk couldn't handle AF drives or GPT formatting and would just muck things up. that's just a guess though :)22:35
TheLordOfTimehmm... i have a question regarding MIRs, who do i poke today...22:36
TheLordOfTimeother than rbasak, i ping him enough22:36
mic__this is ridiculous.22:45
mic__:(22:45
mic__and the rescue system has fdisk, sfdisk and all that jazz.22:48
fdr-Hello, has anyone else noticed that the us-west apt mirror is having an issue I think:23:39
fdr-"W: Failed to fetch bzip2:/var/lib/apt/lists/partial/us-west-2.ec2.archive.ubuntu.com_ubuntu_dists_precise-updates_main_source_Sources  Hash Sum mismatch"23:39
fdr-I've had this happen a few times when using "ami-8635a9b6"23:40
sarnoldfdr-: are you perchance using apt-cacher-ng?23:43
fdr-sarnold: not that I know of23:51
fdr-I also booted a fresh system a few times today to try this out (an image burning process I wanted to run in the background)23:51
fdr-Other regions seem okay in the same program23:51

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!